OpenCode Proxies Requests to Remote Server

Post LinkedIn

🦙Read original on Reddit r/LocalLLaMA

#proxy-issue #privacy-concern #local-llmopencodeopencode

💡Discover why popular local tool OpenCode isn't truly local—privacy risk alert

⚡ 30-Second TL;DR

What Changed

Web UI proxies requests to app.opencode.ai by default

Why It Matters

This undermines trust in OpenCode as a local tool, potentially deterring users prioritizing data privacy or offline use. Developers may need alternatives until fixed.

What To Do Next

Review OpenCode GitHub issues #12083 and #6352 before local deployment.

Who should care:Developers & AI Engineers

Key Points

•Web UI proxies requests to app.opencode.ai by default
•No option to serve fully locally or disable proxy
•Open GitHub PRs and issues: #12446, #12829, #17104, #12083
•Undocumented behavior problematic for firewalls and privacy

🧠 Deep Insight

Background and context from public sources — not the original article. 9 sources cited.

🔑 Enhanced Key Takeaways

•OpenCode supports standard proxy environment variables and custom certificates to address enterprise network constraints, including authentication via URL credentials or LLM Gateways for advanced methods like NTLM[2].
•Integration with tools like Promptfoo allows MCP server configuration (local or remote with OAuth/headers) and persistent sessions, but connecting to an existing server delegates authentication and setup to that server[1].
•OpenCode web UI works with oauth2proxy for authentication, though TUI clients face connection issues when running behind such proxies[7].

🔮 Future ImplicationsAI analysis grounded in cited sources

OpenCode will add configurable proxy disable flags by mid-2026

Multiple open GitHub issues and PRs indicate active developer attention to firewall and privacy concerns, with related network config docs suggesting ongoing enterprise improvements.

Privacy risks from default proxying will drive fully local forks

User reports of unexpected proxy routing (e.g., to Chinese servers) and RCE vulnerabilities highlight trust issues, likely prompting community alternatives for air-gapped use.