Provider access stays on the host
Authenticate with opencode auth login. Never paste model keys into this
page.
Start OpenCode’s official browser interface on the smallest safe network boundary. Generate a localhost, private-network, or existing HTTPS-proxy plan without sending us a password, hostname, project path, or provider credential.
opencode web defaults to localhost.
OpenCode warns that network access should set OPENCODE_SERVER_PASSWORD; the
username defaults to opencode. Verify in OpenCode’s web documentation ↗# 1. Install or verify OpenCode curl -fsSL https://opencode.ai/install | bash # 2. Move into the project that OpenCode should serve cd /path/to/your/project # Authenticate a model provider if this host is not configured yet opencode auth login # 3. Start the official OpenCode web interface opencode web --hostname 127.0.0.1 --port 4096 # Open in a browser: http://127.0.0.1:4096 # Optional: attach the terminal UI from another shell opencode attach http://127.0.0.1:4096
Authenticate with opencode auth login. Never paste model keys into this
page.
The generated command creates 256 random bits locally and keeps the value out of shell history.
A password does not encrypt raw HTTP. Use a private mesh or a TLS reverse proxy.
Closing the browser is fine. Sleeping or powering off the OpenCode host stops access.
Run the official interface on your laptop when it can stay online, or on a server you already operate when you can secure the network and process. The generated plan is free because OpenCode already provides this workflow.
See every free setup and decision tool →Terminalbox Base provides one persistent Linux pane with OpenCode preinstalled, 2 vCPU, 4 GB RAM, and 50 GB storage. It is not the native OpenCode web UI; it is the full terminal interface on a host that stays awake. Your model-provider access remains separate.
Keep one OpenCode shell running — €6/month Review the hosted OpenCode boundary →Yes. The official opencode web command starts OpenCode’s browser interface. It binds to 127.0.0.1 by default, so the default page is reachable only from the host computer.
Bind it to 0.0.0.0 for a trusted private network, or keep it on localhost behind an HTTPS reverse proxy. Set OPENCODE_SERVER_PASSWORD before allowing any network access. Do not expose the raw HTTP port to the public internet.
Yes. The browser is a client of the OpenCode process running on the host. You can close the browser, but the host, network, and OpenCode process must remain available for remote access.
Not currently. Terminalbox provides OpenCode’s terminal UI inside a persistent hosted browser terminal. It does not publish an OpenCode web port or claim to be the native OpenCode web interface.
No. The plan is assembled in your browser and generates the password with OpenSSL in your own shell. Terminalbox records only bounded page and button labels, never generated commands, passwords, paths, provider credentials, or source code.
Commands and defaults come from OpenCode’s web guide, CLI reference, and installation guide. Private-network and HTTPS guidance is a defensive deployment recommendation, not an OpenCode or Anomaly endorsement of Terminalbox.