From 3bd19956ffeb45c6df1d5169811922847e22910c Mon Sep 17 00:00:00 2001 From: dtzp555-max Date: Sat, 13 Jun 2026 17:04:07 +1000 Subject: [PATCH] docs(readme): honest ToS framing for LAN sharing (#136) (#143) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit External user (#136) reported the LAN setup prompt instructs Claude to "share my Claude Pro/Max subscription with family" — which Claude Code refuses (Anthropic Usage Policy: per-user accounts). Reword the LAN setup prompt to "my own devices ... reach my subscription via a local OpenAI-compatible endpoint" (no longer triggers the refusal), and add an honest "account terms are your call" note to the existing sharing-limits section. Keeps the truthful origin story and the existing honest security-limits framing. Docs only. No server.mjs / Class A surface / models.json touched. Co-authored-by: dtzp555 Co-authored-by: Claude --- README.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index cc0af8f..c90abe5 100644 --- a/README.md +++ b/README.md @@ -128,11 +128,12 @@ Before each step, tell me what you'll run and wait for confirmation. On any error, diagnose first — don't auto-retry. ``` -**LAN mode (server)** — install OCP as a server so your family or multiple devices can share it: +**LAN mode (server)** — install OCP as a server so your own devices on the LAN can reach it (Claude Pro/Max are per-user accounts — review Anthropic's Usage Policy before extending access to other people): ```text -I want to install OCP on this device as a LAN server so my family and other -devices on the network can share my Claude Pro/Max subscription. +I want to install OCP on this device as a LAN server so my own devices on the +network can reach my Claude Pro/Max subscription through a local +OpenAI-compatible endpoint. Please follow https://github.com/dtzp555-max/ocp/blob/main/README.md "Server Setup" → "LAN mode" path: @@ -422,6 +423,7 @@ ocp keys revoke son-ipad # Revoke a key - The per-key modes (`shared` / `multi`) give per-key **usage tracking, quotas, and cache separation** — useful for seeing who used what and capping budgets. - They do **not** give a **security isolation boundary**. The spawned `claude` runs with the **operator's filesystem access** and is *not* sandboxed per key. **Only share with people you fully trust, on a trusted network.** - For simple trusted family sharing, the easiest setup is a single shared **anonymous key** (see [Anonymous Access](#anonymous-access-optional)) — no per-person separation, same trust assumption. +- **Account terms are your call.** Claude Pro/Max are *per-user* accounts, and Anthropic's Usage Policy governs who may use them. OCP is a localhost protocol adapter for your own tools and devices — it does not change your account terms, and whether any particular sharing setup complies with the Usage Policy is the account holder's responsibility. Review it before extending access to other people. **Real per-user isolation (sandboxed, multi-tenant-safe) is planned for after 2026-06-15** — per-key ephemeral home + tool lockdown + an OS sandbox. Until then, treat a multi-user OCP as a *trusted-group convenience*, not a security boundary. (This is also why `CLAUDE_TUI_MODE` is single-user-only — see [Subscription-pool (TUI) mode](#subscription-pool-tui-mode).)