Show HN: PocketVeto is a Bluetooth-only AI agent remote control

PocketVeto, a new open-source tool, lets developers approve or deny AI coding agent actions from their phone via Bluetooth Classic, with no internet or LAN routing required. The tool provides a live dashboard of running agents and works on Windows, Linux, and Linux devcontainers, with macOS support deferred. It integrates with Cursor and Claude Code to gate risky tool calls like shell commands and file writes.

Local-only, Bluetooth-mediated approval gate and live progress dashboard for AI coding agents. You are away from the PC, screen off or busy. Your AI coding agents want to run risky tools shell commands, file writes, MCP calls and you want to approve or deny them from your phone. PocketVeto does that over Bluetooth Classic, with no internet and no LAN routing, so it keeps working under WiFi AP isolation. The same phone also shows a live dashboard of every running agent so you can see what they are up to without watching a terminal. v1. Supported on Windows , native Linux , and Linux devcontainers via a host-sidecar pattern . macOS Bluetooth is deferred to post-v1; the non-Bluetooth parts of the binary still compile and run on macOS, so a Mac can host agents that gate against a Linux/Windows server. - Install the binary on the host machine that owns the Bluetooth radio: curl -fsSL https://github.com/pocket-veto/pocket-veto/releases/latest/download/install.sh | sh See docs/setup.md /pocket-veto/pocket-veto/blob/main/docs/setup.md for Windows, build-from-source, and devcontainer variants. - Initialize configuration, hook installs, and the bearer token: pocket-veto init This pairs Bluetooth or lets you skip it for a devcontainer-only setup , writes ~/.pocket-veto/config.toml , installs hooks into .cursor/hooks.json and .claude/settings.json , and registers the server as a system service. - Start the server or reboot; the service starts automatically : pocket-veto serve - Install the Android app by sideloading the APK from the latest GitHub release or build it with ./gradlew assembleDebug from android/ , pair the phone with the PC if you have not already, and grant the runtime permissions. The dashboard and approval notifications appear automatically. See docs/setup.md /pocket-veto/pocket-veto/blob/main/docs/setup.md for the full walkthrough. Hook. Cursor and Claude Code invoke pocket-veto hook for every tool call and lifecycle event. The hook reads stdin JSON, auto-detects the host, and talks to the local server over HTTP on 127.0.0.1:38475 . Server. pocket-veto serve is a single Rust binary running an axum HTTP API, a SQLite audit log, and a Bluetooth bridge task. It persists every event and approval, then forwards frames to the phone. Phone. The Android app holds an RFCOMM socket open via a foreground service, surfaces approval requests as action-button notifications, and renders a live dashboard of agent cards. See ARCHITECTURE.md /pocket-veto/pocket-veto/blob/main/ARCHITECTURE.md for the full picture. Cursor https://cursor.com .cursor/hooks.json Claude Code https://code.claude.com .claude/settings.json Both are wired by pocket-veto init . The hook subcommand auto-detects which host invoked it from the event-name casing. MIT. See LICENSE /pocket-veto/pocket-veto/blob/main/LICENSE .