Local companion · home network safety

A browser can't see your LAN. This can.

MEOK Home Agent is one file of pure Python standard library (nothing to pip install) that reads your ARP table to enumerate devices, optionally probes a few risky ports, computes a plain-English safety score, signs the report, and serves it on localhost only. It never phones home.

⬇ Download the agent Open MEOK OS

Run it (three steps)

Fetch the file — curl -O https://os.meok.ai/agent/meok-home-agent.py (or the download button above)
Run it — python3 meok-home-agent.py
Scan — open MEOK OS → Guardian → tap Scan my network

meok-home-agent.py   # serve on 127.0.0.1:7777
meok-home-agent.py --once      # print one scan as JSON and exit
meok-home-agent.py --port 8123 # different port

It serves http://127.0.0.1:7777/scan (JSON) and /health. Pass ?noprobe to skip port-probing (faster, devices only).

What it does

Step	Detail
1 · Enumerate	Reads your OS ARP table to list devices on the LAN (IP + MAC).
2 · Probe	Checks a few risky ports on each device — Telnet (23), FTP (21), RDP (3389), VNC (5900), SMB (445) — 0.25 s timeout each.
3 · Score	Safety score starts at 100 and subtracts for exposure: `100 − min(60, findings × 12)`. Grade: Excellent ≥90 · Good ≥70 · Review ≥50 · At risk below.
4 · Sign	The report is HMAC-SHA256 signed with a per-install key minted on first run and stored `0600` in `.meok_home_agent.key` beside the script.

MEOK OS reads the report from 127.0.0.1 — the browser never sees your raw ARP table, because it deliberately can't.

Why a local agent, and not the browser?

Browser sandboxes deliberately cannot enumerate LAN devices or open raw sockets — that boundary protects you. The honest way to give MEOK Guardian real network visibility is a small program you run and control. This is that.

Security posture: binds to 127.0.0.1 only (not reachable from outside your machine); the report stays on your device; nothing is uploaded unless you choose to share it; no dependencies, no telemetry, no account. macOS / Linux / Windows.