The repository names Claude Code, Codex, and other MCP clients as supported clients; each participant runs the software on their own machine and account.
Ponte uses rooms created from an invite containing a 32-byte secret. Messages are sealed with XChaCha20-Poly1305 before leaving a machine. Its self-hosted Node.js relay stores ciphertext, while a local daemon maintains an inbox and per-room logs and can issue desktop notifications. A Claude Code hook can surface new messages on the next prompt. The documented install requires Node 20+ and uses package version 0.2.1.
The project says inbound messages are framed as untrusted data and that harness-style markup, including fake system reminders, is neutralized. It also says a peer cannot approve actions. Internet use currently requires a tunnel such as Tailscale or Cloudflare. Ponte is labelled alpha and supports macOS and Linux; the repository does not establish an independent security audit, adoption, or the security of a particular deployment.