pocketty CLI

pocketty <command>

Command	What it does
daemon	Runs the daemon in the foreground.
status	Shows the daemon’s state.
devices	Lists the paired phones.
unpair <id>	Removes a paired phone.
requests	Lists phones that wait for code approval.
approve [code]	Approves a phone, and asks for the code if you leave it out.
deny <code>	Denies a phone.
pair	Pairs a phone. The App runs this over SSH.

pocketty --version prints the version, and pocketty <command> --help describes a command.

daemon

pocketty daemon

Watches herdr, sends notifications, and takes code setup requests. Run it as a service, not by hand: see Install the Daemon. It needs herdr or Tailscale, and stops with an error if it finds neither.

It exits by itself when its binary changes on disk, so the service manager starts the new version.

status

pocketty status

state      /home/luke/.local/state/pocketty
daemon key 3f9cQ1…
devices    2
herdr      /home/luke/.local/bin/herdr
session    default (running)
session    work (stopped)

devices

pocketty devices

6b1e0c2a-2f4d-4a0e-9c51-0d1d7b0b1c11  Luke's iPhone  Ios  paired 2026-10-02T18:40:12Z

Prints no paired devices when there are none.

unpair

pocketty unpair 6b1e0c2a-2f4d-4a0e-9c51-0d1d7b0b1c11

Stops notifications to that phone. It does not remove the phone’s SSH key. See Remove a Phone.

requests

pocketty requests

lukes-iphone  luke@example.com  Luke's iPhone  expires in 94s

The columns are the phone’s Tailscale machine name, its Tailscale login, the device name, and the time left.

approve

pocketty approve
pocketty approve 482913

Without a code, it waits for a request and asks for the code. An empty answer denies. See Approve a Phone on a Server.

deny

pocketty deny 482913

pair

The App runs pocketty pair through your login shell when it connects, and sends one JSON line on stdin. You don’t run it yourself. If a login shell can’t find pocketty, the App tries ~/.local/bin/pocketty. If that is missing too, the host gets no notifications.