GET STARTED

Install & Download

Pair a device once, install the persistent agent, and let Rabbit Commander reconnect automatically.

AGENT0.5.1Node.js 18+
WIN

Windows 10 / 11

Bundled installer with persistent Task Scheduler startup and a hidden background launcher so the agent does not keep a PowerShell/Windows Terminal window open.

Silent backgroundAuto startAuto reconnect
Download Windows Setup EXE 1.1.0ZIP fallback
LIN

Linux / VPS

systemd service package for Ubuntu/Debian and other systemd-based VPS or server hosts.

systemdRestart always
Download Linux 1.0.0
MAC

macOS

LaunchAgent package with KeepAlive and secure relay pairing.

LaunchAgentKeepAlive
Download macOS 1.0.0

Production Release

RC-R1
Rabbit Commander 0.5.1Production R1 sealed and checksum verified.Customer Installer 1.1.1Windows, Linux and macOS packages published.Public downloadsVerified HTTP 200 with SHA-256 manifest.Windows background agentHidden launcher and automatic restart behavior are included in the current installer. Final clean-PC acceptance should still be verified on the target Windows machine.
View release checksums

Release Verification

VERIFIED
ReleaseRabbit-Commander-0.5.1-PRODUCTION-R1Release SHA-25650bfbf5216daa50130f38da800f27d5b85849e8913a8bf569f6b9e4370e5543eWindows Setup EXE SHA-2567be875f7005bb6a8d41f2a082e3e39be4463050785326bdf31ab0ff97e7f87dcUniversal installer SHA-256b99920e3cc25e8c8fa774fafb3e8be631a884e22503c58e29143a71c963cd6fc

Installation Guide

4 STEPS
1
Create a device

Open Devices → Add device. Save the one-time Device ID and Device Token.

2
No Node.js setup required

The Windows EXE includes a verified portable Node.js runtime and agent dependencies. Do not send device tokens through chat, email, screenshots or support tickets.

3
Download and extract

Use the operating-system package above and open PowerShell/Terminal in the extracted directory.

4
Run the installer

Use the matching command with your own Device ID and Token. The agent configures persistent startup automatically. On Windows, the production agent should remain hidden in the background after installation.

Create / manage devices →

Install Commands

PRODUCTION RELAY
Relay: wss://commander.zippri.com/relay
Security: Device tokens are one-time pairing secrets. Store them securely.

Windows verification

Confirm the scheduled task exists, the device becomes ONLINE, and no permanent PowerShell/Windows Terminal agent window remains open.

schtasks /Query /TN "Rabbit Commander Agent"

Linux verification

Confirm the agent service is active and persistent.

systemctl status rabbit-commander-agent --no-pager

macOS verification

Confirm the Rabbit LaunchAgent is loaded.

launchctl list | grep com.rabbit.commander.agent
USER MANUAL

Operate Rabbit Commander safely

Pair devices, use ChatGPT or other supported MCP clients, understand approvals and manage device security without exposing secrets.

MANUAL1.1.1Agent 0.5.1

1. First-time setup

  1. Sign in to Rabbit Commander.
  2. Create the target device from Devices.
  3. Save the one-time pairing credentials.
  4. Install the correct agent package.
  5. Wait until the device is ONLINE.
  6. Connect Rabbit Commander in ChatGPT and authorize using the same account.

2. ChatGPT quick prompts

List devicesUsing Rabbit Commander, call rabbit_list_devices.
Inspect serverUsing Rabbit Commander, show processes and listening ports on my selected device.
Read a fileUsing Rabbit Commander, read /path/to/file on my selected device.
Run commandUsing Rabbit Commander, run the requested command and ask for approval before execution.

3. Approval model

Read operations can run inside the authorized device scope. Writes, moves, directory creation, shell execution, process input and termination are approval-gated.

Exact fingerprint: The approved action must match the eventual execution request. Changed command text, content or target requires a new approval.

4. Security profiles

Read onlyInspection only; blocks state-changing actions.ControlledRead access plus approval-gated changes.PrivilegedAdvanced profile for trusted devices; human gates still protect high-risk actions.

5. Files and processes

Rabbit Commander can list, read, search and read multiple UTF-8 files within allowed roots. Persistent process sessions support start, output, input and termination when shell access is enabled.

6. Tokens and reconnect

Device tokens authenticate agents. ChatGPT uses OAuth access/refresh tokens. Rotating a device token invalidates the old token, so update the agent before restarting it.

AI CLIENTS

Connect Rabbit Commander to your AI client

Rabbit Commander exposes a remote OAuth-enabled MCP server that can be used by supported AI clients. Choose your client below; setup and feature availability differ by provider.

HELP CENTER1.3.0Updated 25 Sep 2026

Client compatibility overview

CURRENT GUIDANCE
ChatGPTSUPPORTED

Connect Rabbit Commander as a remote custom MCP app/connector in ChatGPT Developer Mode. Full read/write MCP availability depends on the ChatGPT plan and workspace policy.

https://commander.zippri.com/mcp-native-v1ChatGPT setup
ClaudeSUPPORTED

Connect Rabbit Commander as a custom remote MCP connector. Claude supports remote custom connectors across web/Desktop/Cowork, subject to account/admin policy.

https://commander.zippri.com/mcp-native-v1Claude setup
Gemini CLITESTED

Verified end-to-end on Rabbit Commander with Gemini CLI 0.61.0 and gemini-3.5-flash-lite.

rabbit-commander - Ready (21 tools)Gemini setup
Other MCP clientsMCP

Clients that support remote HTTP MCP plus OAuth may work with Rabbit Commander. Verify their current MCP/OAuth implementation before production use.

Remote MCP + OAuth/PKCEGeneral setup
Important: Connecting Rabbit Commander in one AI client does not automatically connect it in another. ChatGPT, Claude and Gemini each maintain their own connector configuration and authorization state.

ChatGPT — connect Rabbit Commander

REMOTE MCP

Use ChatGPT's custom MCP app/connector flow. Rabbit Commander is a remote MCP server, so no local bridge is required for the public production endpoint.

  1. Open ChatGPT Settings → Apps and enable Developer Mode / custom MCP access if your plan and workspace permit it.
  2. Create or add a custom app/connector.
  3. Use the Rabbit Commander native MCP URL shown below.
  4. Complete Rabbit Commander OAuth when ChatGPT asks you to connect.
  5. Enable/select Rabbit Commander for the message, then test rabbit_list_devices.
https://commander.zippri.com/mcp-native-v1
Test promptUsing Rabbit Commander, call rabbit_list_devices.

ChatGPT availability notes

PLAN DEPENDENT
Business / Enterprise / EduOpenAI currently documents full MCP support, including modify/write actions, through Developer Mode, subject to workspace/admin controls.ProOpenAI currently documents custom MCP use in Developer Mode with read/fetch permissions; full write MCP is more restricted than Business/Enterprise/Edu.Admin controlsWorkspace admins can control whether custom apps/connectors are allowed and which actions users may invoke.Remote onlyChatGPT connects to remote MCP servers; Rabbit Commander's public production endpoint satisfies this architecture.
OpenAI MCP app documentation

Claude — connect Rabbit Commander

CUSTOM CONNECTOR

Claude can connect to Rabbit Commander as a custom remote MCP connector. The connection is brokered from Anthropic's cloud, so use the public HTTPS MCP endpoint.

  1. Open Claude Customize → Connectors.
  2. Choose Add custom connector (Team/Enterprise owners may need to add it for the organization first).
  3. Enter Rabbit Commander as the connector name and use the native MCP URL below.
  4. Complete OAuth authorization with your Rabbit Commander account.
  5. Enable the connector for the conversation and ask Claude to call rabbit_list_devices.
https://commander.zippri.com/mcp-native-v1
Test promptUsing Rabbit Commander, call rabbit_list_devices.

Claude availability notes

REMOTE MCP
Free / Pro / MaxAnthropic documents custom remote MCP connectors for individual plans; Free accounts are currently limited to one custom connector.Team / EnterpriseAn Owner/Primary Owner may need to register the custom connector for the organization before members connect individually.Claude web / Desktop / CoworkRemote connectors are account-level cloud connections. Claude Desktop local MCP configuration is a separate mechanism.Public reachabilityRemote connectors originate from Anthropic's cloud. Rabbit Commander's public production endpoint is intended for this use.
Claude remote MCP documentation

Gemini CLI — verified baseline

TESTED 24 SEP 2026
Rabbit CommanderCommunity 0.5.1Customer Installer1.1.1Gemini CLI0.61.0Verified Gemini modelgemini-3.5-flash-liteNative OAuth MCPhttps://commander.zippri.com/mcp-native-v1Expected staterabbit-commander - Ready (21 tools)

Gemini CLI — start & authenticate

WINDOWS
& "C:\ProgramData\RabbitCommander\Tools\Gemini\gemini.cmd" --skip-trust --model gemini-3.5-flash-lite
/mcp auth rabbit-commander
/mcp list
Using Rabbit Commander, call rabbit_list_devices.
Do not paste API keys, OAuth tokens, device tokens or other secrets into the Gemini prompt.

Gemini troubleshooting

KNOWN ISSUES
Authentication required / OAuth scope-token missingRun /mcp auth rabbit-commander, complete browser authorization, then run /mcp list.Usage limit reached for gemini-3.8-flashLaunch the bundled CLI with --model gemini-3.5-flash-lite. The installed CLI can route the non-lite Flash alias to another backend.gemini-2.5-flash is invalidDo not use it with the verified bundled CLI baseline. Use gemini-3.5-flash-lite.Invalid input: expected record, received arrayThis Rabbit Commander compatibility issue is fixed in the current production backend. Restart/reload the MCP client if an old session still shows it.Gemini web cannot see Rabbit CommanderThe Gemini CLI MCP configuration is separate from the Gemini website. Web custom-app availability is controlled independently by Google.

Other MCP-compatible clients

VERIFY FIRST

Rabbit Commander uses a public remote MCP endpoint with OAuth. Other clients may be compatible if they support the same transport and authentication flow.

Preferred endpointhttps://commander.zippri.com/mcp-native-v1Compatibility endpointhttps://commander.zippri.com/mcpAuthenticationOAuth Authorization Code + PKCE S256Scopesmcp:read mcp:write offline_access
Support level: Do not label a third-party client as Rabbit Commander verified until its connection, OAuth, tool discovery and at least one read action have been tested end-to-end.

Universal support checklist

NO SECRETS
  1. Identify the AI client: ChatGPT, Claude, Gemini CLI, or other.
  2. Record the AI client version/plan where applicable.
  3. Confirm Rabbit Commander OAuth completed successfully.
  4. Confirm the client can discover Rabbit Commander tools.
  1. Test rabbit_list_devices.
  2. Copy the exact error text, but never the OAuth URL/token.
  3. State whether the failure is authentication, discovery, read, or write/action approval.
  4. Never include passwords, API keys, refresh tokens, device tokens or private keys.
Open support guide
TECHNICAL REFERENCE

Architecture & Security

Production service contract for administrators, developers and support teams.

MCP TOOLS21OAuth + PKCE
ChatGPT / Gemini CLI / MCP ClientOAuth + MCP
→
Commander GatewayHTTPS / MCP
→
Rabbit RelayWSS outbound agents
→
Authorized DeviceWindows / Linux / macOS

Production endpoints

Dashboardhttps://commander.zippri.com/Native OAuth MCPhttps://commander.zippri.com/mcp-native-v1MCP compatibility endpointhttps://commander.zippri.com/mcpRelaywss://commander.zippri.com/relayOAuth issuerhttps://commander.zippri.com

Authentication

FlowAuthorization Code + PKCE S256Read scopemcp:readWrite scopemcp:read mcp:writeRefreshoffline_access

Agent contract

RuntimeNode.js 18+NetworkOutbound HTTPS/WSSWindows startupTask Scheduler + hidden launcherLinux startupsystemdmacOS startupLaunchAgent

Security controls

Operations Policy R3: Safe Auto is optional and only auto-approves exact read-only diagnostics. Writes, builds, root services, production deployments and G2 privileged changes still require authorization. View policy status. Connected ChatGPT, Claude, Gemini and MCP clients follow the central server policy.
User isolationEvery dispatch checks authenticated device ownership.Allowed rootsFilesystem operations can be constrained to configured paths.Blocked commandsDevice policy can deny configured command patterns.Human gateState-changing actions require approval and an exact action fingerprint.
DIAGNOSTICS

Check the complete Rabbit path

Live non-destructive checks for MCP, Relay, Control and your authorized devices. Safe summaries exclude credentials.

Service health

LIVE
Waiting for diagnostics...

Device connectivity

0 DEVICES
Sign in to load private device diagnostics.

Quick diagnosis

Device offlineCheck internet access, agent startup and outbound WSS access to commander.zippri.com.AI client asks to reconnectReconnect Rabbit Commander OAuth. In Gemini CLI use /mcp auth rabbit-commander. Do not recreate the device or rotate its agent token.Gemini MCP validation errorConfirm Gemini CLI 0.61.0 or newer supported baseline, use gemini-3.5-flash-lite, and verify rabbit-commander - Ready (21 tools).Read blockedReview Allowed Roots and the device security profile.Write/command waitingOpen Approvals and approve the exact pending action.Windows terminal keeps blinkingReinstall the current Windows EXE, close the old exited terminal session, then verify the scheduled task and device ONLINE state.