Remote ArcREMOTE ARC BLOG
How Remote Arc keeps AI access powerful without exposing your computer
An AI that can only tell you what command to run is safe but limited. An AI that can run every command everywhere is useful but reckless. Remote Arc is built around the space between those two extremes.
1. Your computer never needs a public inbound port.
The local Remote Arc agent establishes an outbound connection to the hosted control plane. Your router does not need port forwarding, your laptop does not need a public IP, and the machine does not sit on the internet waiting for arbitrary inbound connections.
2. Pairing creates a device identity, not a shared master password.
Every paired computer receives its own revocable credential. The hosted database stores only the credential hash, so a device can be revoked independently.
3. OAuth controls the AI client separately from the device.
A paired computer and an authorized AI client are two different trust relationships. Revoking an AI client does not require re-pairing the computer, and revoking a computer does not require changing every AI connection.
4. Permission is per device, not one global agent switch.
A work laptop, gaming PC and home server should not expose the same capabilities. Safe access can stay read-only, Developer access can add targeted file edits, and Full access can add terminal execution only where it is genuinely required.
5. Read visibility and write authority are separate.
Ordinary non-sensitive files can remain available to read-only tools while persistent mutations stay inside Trusted Write Locations. A write outside those locations pauses for a narrowly scoped approval, and sensitive paths remain independently protected. Terminal access is still not an operating-system sandbox.
6. Supported edits can be undone locally.
The local agent can keep a bounded undo snapshot on the device itself, providing a recovery path without turning the hosted service into a backup of your file contents.
7. Audit metadata is useful without becoming content retention.
Remote Arc records operational metadata such as tool, device, result and time while intentionally avoiding persistence of file contents, raw command arguments, OAuth tokens and raw device credentials.
The important limitation: permissions are not magic.
Once unrestricted terminal execution is explicitly enabled, the shell inherits the permissions of the local operating-system user. The honest security model is layered control plus explicit user choice, not pretending that powerful execution has no consequences.