Windows remote assistance relay
Open a command lane to a Windows host.
Handoff creates a short-lived browser session for PowerShell, diagnostics, and host-approved TCP tunnels. The host connects out, approves sensitive actions locally, and can close the bridge at any time.
PS
.\handoff.exe new
host
DESKTOP-7Q9
outbound WebSocket
relay
handoff.whyknot.dev
token gated
operator
browser viewer
command palette
session live
n1_9K2...X7Q
ps.exec
syntax view
tunnel.open
host prompt
api/tunnel
ready
# Inspect the host service before opening a tunnel
$port = 8080
Get-NetTCPConnection -LocalPort $port
Invoke-WebRequest -UseBasicParsing -Uri "http://127.0.0.1:$port/health"
approved
Browser to host service
127.0.0.1:8080
handoff tunnel tk_8S...Q2
Host-approved tunnels
Open a local TCP port from the viewer, wait for host approval, then connect with the generated handoff tunnel token. Each tunnel is scoped to that session.
PowerShell with context
The viewer includes a syntax-highlighted PowerShell composer alongside command history, results, and risky-action prompts.
No inbound hole
The host connects out to the relay. No VPN, port forward, shared Windows login, or inbound firewall exception is required.