The Nexus ecosystem

Your whole lab,one orbit.

Nexus is an AI IDE and home-lab control room. The iPhone app, Nexus Desktop for Windows and Nexus Online share the same hosts, the same telemetry and the same security policy.

Desktop 0.1.13Windows 10 · 11 x64Codex · Claude Code
Download Nexus DesktopMeet the three clients
Nexus for iPhone

The lab in your pocket.

Device profiles that try LAN, Tailscale and Cloudflare in order. SSH terminals, live host metrics, systemd services and logs, SFTP, and PS5LM Plus chat over the gateway.

  • Host keys confirmed on first use, changed keys rejected
  • Low-resource notifications
  • Makes the one-time code that unlocks Desktop
Nexus Desktop · Windows

An AI IDE that knows your servers.

A Rust editor with Codex and Claude Code built in, next to a dashboard for every host you run. Agent edits arrive as diffs you accept hunk by hunk.

  • Ask, Plan, Agent and Bypass modes
  • PowerShell, WSL, Git Bash and SSH terminals
  • MSI, portable zip or a single exe
Download 0.1.13
Nexus Online · browser

Any screen, read-only.

A dashboard in the browser behind Cloudflare Access, for machines that aren't yours. It reads the same telemetry through the same policy engine and can't write anything you haven't unlocked.

  • AI chat, workspace files, models and agent runs
  • No passwords or SSH keys in the browser
  • Owner-only sign-in through Cloudflare Access
Sign in
Nexus Desktop

Four tools in one window.

IDE

An editor that respects your ignores

The explorer honours .gitignore, .cursorignore and .nexusignore. Multi-tab editing with highlighting for 15+ languages, find and replace, split view, a Git gutter, quick open and a command palette.

AI

Codex and Claude Code, side by side

Both run through their official CLIs on your own plan. You see exactly what context is shared, secrets are flagged before sending, and every agent edit lands as a reviewable diff. Ctrl+K edits inline.

Infrastructure

Every host on one dashboard

Live CPU, memory, disk and network with alerts at 90%. Services, logs, processes and network probes. NixOS dry-build and switch, plus Minecraft and PS5LM status.

Security

One policy engine for everything

Every remote action passes through the same Rust policy engine. SSH host keys are pinned. The app can lock behind a 4-digit code from your iPhone.

How it fits

Three clients, one gateway.

Remote traffic goes through Cloudflare Access to the gateway or over SSH with pinned keys. The phone's one-time code never touches the network: it is computed offline from a shared key.

DEBIAN SERVERSSH · pinned host keysSSH forced commandone-time coderelayNexus DesktopCodex · Claude Code CLIsNexus for iPhoneSwiftUINexus Onlinebrowser · newCloudflareAccess · PKCENixOS hostdry-build · switchNexus gatewayPS5LM · Minecraft · relaynexus-roread-only command catalog
Security

Debian is read-only. Agents never write.

The Debian server also runs the gateway, so Nexus treats it as read-only by default. The rule is enforced in the Rust backend and again on the server by nexus-ro, not only in the interface.

agent session · debian
agent › systemctl restart nexus-gateway
✕ blocked · agents never write to Debian
agent › journalctl -u nexus-gateway -n 50
✓ allowed · read-only catalog command
owner › unlock debian
◷ enter the code from your iPhone · 20 s
  • Owner unlockA 4-digit code from the iPhone app opens Debian writes for 30 minutes. Only for you, never for agents.
  • Pinned host keysYou confirm each host key once. A changed key stops the connection until you rotate it on purpose.
  • Secrets stay putAPI keys live in Windows Credential Manager. Context sent to an AI is scanned for secrets first.
Latest release

Nexus Desktop 0.1.13

Released 8 Nov 2026 for Windows 10 and 11 (x64). Installer, portable zip or a single executable, each with a SHA-256 checksum.

Get Nexus Desktop