What can the helper actually do once I allow?
Everything a person sitting at your machine could do: read and search any file, change and delete files, run commands, and take screenshots or short screen recordings. This is a remote-support tool, and an attended session is deliberately not a narrow one. Every call is written to a value-free audit log, and closing the window ends it.
Is the link enough to get in?
No — and this is the part worth understanding. The link only tells the relay which machine to route to. Until you press Enter in the console, or click Allow in the window, every request is refused before its arguments are even read. Only the keyboard in front of that machine can open the session.
Do I have to open a port or set up a VPN?
Neither. The machine being helped dials outward over WSS to reach the relay, the same way a chat client does. There is no port forwarding, no firewall rule, no router configuration, and nothing left listening once the session ends.
What happens to the link afterwards?
It stops working. A session token is generated fresh each time the binary runs, so a link that gets forwarded or pasted somewhere it should not be is useless once that session ends. Tokens avoid the characters l, o, 0 and 1 so they survive being read down the phone.
Can I use this on a server instead of someone's desktop?
Yes, and it is the same binary. Run ./omas over SSH once, or from a systemd unit, and the connector link prints to the console instead of opening a window. For a machine you administer permanently you can also run it with a fixed configuration and a capability mode per directory, so it stays scoped rather than all-or-nothing.
Does it only work with ChatGPT?
No. OMAS speaks the Model Context Protocol, so ChatGPT, Claude, Cursor and any other MCP client can connect to the same link. Nothing about the server is specific to one vendor.
Do I need Node.js or an installer?
No. OMAS is a single native Rust binary. The person being helped downloads one file and runs it — no installer, no account, no administrator rights.
Is the licence a subscription?
No. Premium is a one-time purchase with a perpetual key that verifies offline against a public key embedded in the app, so it keeps working without phoning home. The MIT-licensed server itself is free, and you can self-host the relay if you would rather not depend on ours.