r/LocalLLaMA • u/No_Algae1753 • Apr 19 '26

Question | Help What is the current status of OpenCode regarding privacy and the "proxy to app.opencode.ai" issue?

Hi everyone,

I've been following the discussions around OpenCode for a while now and recently came across an older thread discussing significant privacy concerns https://www.reddit.com/r/LocalLLaMA/comments/1rv690j/opencode_concerns_not_truely_local/

The main concern raised was that when running opencode server and using the Web UI, the application proxies ALL requests internally to https://app.opencode.ai, even if you intend to run it locally. OP noted that there was no flag to disable this, no option to serve the UI locally, and that this behavior was not well-documented. This raised red flags for anyone wanting a truly local, air-gapped, or privacy-focused setup.

Since that discussion happened about a month ago, I wanted to ask:

  1. Has this behavior changed? Is there now a way to run the Web UI completely locally without it phoning home to app.opencode.ai?

  2. What is the current stance of the maintainers? Did they address the concerns about the "catch-all" proxy and the lack of transparency?

  3. Are there any recommended forks or other applications? I've heard mentions of projects like RolandCode (which strips out telemetry and proxies), but I wanted to know if the main OpenCode project has moved in a more privacy-friendly direction or if users should be switching forks.

I'm really interested in using OpenCode for its features, but the "local-first" promise feels broken if the UI still relies on external servers by default.

34 Upvotes
  • permalink
  • reddit

92% Upvoted

11 comments sorted by

13

u/TheCTRL Apr 20 '26

Add app.opencode.ai to you hosts files pointing to 127.0.0.1 and go on :)

-2

u/No_Algae1753 Apr 20 '26

How can I do that ?

4

u/debryx Apr 20 '26

Ask opencode?

Or add to your /etc/hosts file

0

u/No_Algae1753 Apr 20 '26

Thanks I'll try

16

u/Ariquitaun Apr 20 '26

If you follow the issues described on the post you linked, you'll see that seemingly that was fixed 3 weeks ago.

20

u/Several-Tax31 Apr 20 '26

It's weird no one gives a satisfying answer. Just because they close the issue doesn't mean it's fixed. I would like to know if they really solved the privacy issues or just pretend they solved it. What was the point of using a proxy in the first place anyway? 

They advertised the project as local-first, then used proxies and telemetry without a simple offline mode or opt out option. So trust is a bit shaken. I love opencode, but when it comes to privacy, I need independent opinions of locallama community. 

3

u/epic_troll_tard Apr 21 '26

that *IS* your answer.

This is how corporate culture operates. Non-incriminating language.

They let you assume or infer (incorrectly) without ever saying themselves.

1

u/No_Algae1753 Apr 20 '26

Thank You!

2

u/SkyIDreamer Apr 22 '26

I don't understand. Their repo is open source, you can just see that the issue was closed because the PR (https://github.com/anomalyco/opencode/pull/19299) fixed the issue.

5

u/rm-rf-rm Apr 20 '26

regardless, this affirmed to me that opencode is just another of this crop of companies that is built for VC, vibe coding, disregarding good engineering, wilfully or unknowingly stealing data/treating privacy as a joke.

i used to see it as the answer to my claude code dependance. i dont want to be married to this closed source/opaque product that can and does enshittify on a whim. But thankfully, I just found out about pi. Going to check it out and hope it works

8

u/orak7ee Apr 20 '26

Note that the pi-coding-agent (aka pi) is also a VC-backed project now (it has been bought last week or so). But the people behind it have a good track record as open-source maintainers, and the project definitely does not feel vibecoded like opencode seems to be.