Remote Control

Name: Remote Control
Author: @rebind

@rebindv0.6.0

Connect your programs to Rebind over WebSocket using the documented remote-control server. Works with the client libraries and MCP.

Let compatible programs send keyboard, mouse, and controller input, read supported information such as window details, and react to events on this computer. Connect using Rebind's client libraries or MCP setup for AI tools.

Needs Rebind 3.15.0 or newer on Windows or macOS. Rebind Link is optional, except for controller input, which needs a Link whose USB profile has a joypad. Available controls differ on Windows and macOS; check platform support for what you need.

Set up

Open the installed package's main.luau in Rebind and select Options.
Set a strong, unique Auth token. This is the secret your connecting program must provide. Without one, any program on this computer can connect, including a web page open in your browser.
Leave WS port at 19561, or choose an unused port. Start from the editor toolbar. Restart after changing the port.
Give your program the address ws://127.0.0.1:19561 and your token. Use your chosen port if you changed it.

Changing the token or the approved list does not disconnect programs already connected. Restart the script to revoke their access, and stop it whenever remote control is not needed.

For MCP, these values are called REBIND_URL and REBIND_TOKEN. Follow the linked client instructions to connect; the protocol reference covers custom programs.

Local only

Local only is on by default: the server accepts connections from this computer only. To connect from another trusted computer, or from WSL on Windows, turn it off, restart the script, and use this computer's network address in place of 127.0.0.1. Connections are not encrypted, so restrict access with your firewall and use a trusted network or an encrypted tunnel.

Approving apps

With Ask before a new app connects on (the default), Rebind shows a prompt (Deny is the default button) the first time a program sends a command, naming it by what the program calls itself. Until you choose, its commands are refused with awaiting_approval; once you allow it, the program retries. A name you allow is added to Approved apps and is not asked again. Clear a name there to be asked again.

A program that does not give a name is asked on every connection. The name is whatever the program says it is, so any program on this computer can claim one you approved. The auth token is what keeps other programs out.

Turn the toggle off on a computer where nobody can answer a prompt.

Advanced controls

Running system commands, accessing package files, changing Windows registry entries, and running custom Luau code are off by default. Turn them on in Options with Allow shell commands, Allow file access, Allow registry changes, and Allow custom Luau. Some MCP tools need Allow custom Luau; follow the MCP guide before enabling it.

Each of these gives a connected program full control of this computer, including every other setting here: custom Luau can change any option, file access can rewrite the script, and shell commands can do anything you can.

Leaving them off does not make access read-only. Approved programs can still send input and, where the platform supports it, capture the screen, read and change the clipboard, and control windows.

Settings live in Rebind, not in the package, so they survive updates.

Observation

Allow observation is off by default. Turned on, it lets a connected program record what you do, the way rebind observe does: every key and button you press and release, passwords included, mouse movement, the active window, and screenshots of your screen. An AI agent can use it to watch you do a task before it writes a script for it.

The program can start a recording, add notes to it, stop it, and read back every recording in Rebind's observations folder, including ones you made in the app or with rebind observe. One recording runs at a time. It ends when its time is up, at its stop key if the program set one, when the program stops it or disconnects, or when Remote Control stops. Recordings stay in the folder until you delete them, and the app's Recordings view lists them.

Do not type secrets while a recording runs. With Allow custom Luau on, a program can record even with this option off.

Stop

Stop from the editor toolbar. Left Ctrl + Left Alt + K (Left Control + Left Option + K on macOS) stops all scripts and releases held input. Stopping Remote Control also closes its network listener and ends its timers and audio playback.

Not every command has been tested on every platform. Windows use and actual input delivery still need verification.

Version

README.md

# Remote Control

Let compatible programs send keyboard, mouse, and controller input, read supported information such as window details, and react to events on this computer. Connect using Rebind's [client libraries](https://docs.rebind.gg/remote-control/client-libraries) or [MCP setup for AI tools](https://docs.rebind.gg/remote-control/mcp).

Needs Rebind 3.15.0 or newer on Windows or macOS. Rebind Link is optional, except for controller input, which needs a Link whose USB profile has a joypad. Available controls differ on Windows and macOS; check [platform support](https://docs.rebind.gg/concepts/platforms) for what you need.

## Set up

1. Open the installed package's `main.luau` in Rebind and select **Options**.
2. Set a strong, unique **Auth token**. This is the secret your connecting program must provide. Without one, any program on this computer can connect, including a web page open in your browser.
3. Leave **WS port** at **19561**, or choose an unused port. Start from the editor toolbar. Restart after changing the port.
4. Give your program the address `ws://127.0.0.1:19561` and your token. Use your chosen port if you changed it.

Changing the token or the approved list does not disconnect programs already connected. Restart the script to revoke their access, and stop it whenever remote control is not needed.

For MCP, these values are called `REBIND_URL` and `REBIND_TOKEN`. Follow the linked client instructions to connect; the [protocol reference](https://docs.rebind.gg/remote-control/protocol) covers custom programs.

## Local only

**Local only** is on by default: the server accepts connections from this computer only. To connect from another trusted computer, or from WSL on Windows, turn it off, restart the script, and use this computer's network address in place of `127.0.0.1`. Connections are not encrypted, so restrict access with your firewall and use a trusted network or an encrypted tunnel.

## Approving apps

With **Ask before a new app connects** on (the default), Rebind shows a prompt (Deny is the default button) the first time a program sends a command, naming it by what the program calls itself. Until you choose, its commands are refused with `awaiting_approval`; once you allow it, the program retries. A name you allow is added to **Approved apps** and is not asked again. Clear a name there to be asked again.

A program that does not give a name is asked on every connection. The name is whatever the program says it is, so any program on this computer can claim one you approved. The auth token is what keeps other programs out.

Turn the toggle off on a computer where nobody can answer a prompt.

## Advanced controls

Running system commands, accessing package files, changing Windows registry entries, and running custom Luau code are off by default. Turn them on in Options with **Allow shell commands**, **Allow file access**, **Allow registry changes**, and **Allow custom Luau**. Some MCP tools need **Allow custom Luau**; follow the MCP guide before enabling it.

Each of these gives a connected program full control of this computer, including every other setting here: custom Luau can change any option, file access can rewrite the script, and shell commands can do anything you can.

Leaving them off does not make access read-only. Approved programs can still send input and, where the platform supports it, capture the screen, read and change the clipboard, and control windows.

Settings live in Rebind, not in the package, so they survive updates.

## Observation

**Allow observation** is off by default. Turned on, it lets a connected program record what you do, the way `rebind observe` does: every key and button you press and release, passwords included, mouse movement, the active window, and screenshots of your screen. An AI agent can use it to watch you do a task before it writes a script for it.

The program can start a recording, add notes to it, stop it, and read back every recording in Rebind's observations folder, including ones you made in the app or with `rebind observe`. One recording runs at a time. It ends when its time is up, at its stop key if the program set one, when the program stops it or disconnects, or when Remote Control stops. Recordings stay in the folder until you delete them, and the app's Recordings view lists them.

Do not type secrets while a recording runs. With **Allow custom Luau** on, a program can record even with this option off.

## Stop

Stop from the editor toolbar. **Left Ctrl + Left Alt + K** (**Left Control + Left Option + K** on macOS) stops all scripts and releases held input. Stopping Remote Control also closes its network listener and ends its timers and audio playback.

Not every command has been tested on every platform. Windows use and actual input delivery still need verification.