Universal client matrix

Every device. One fleet. One identity.

Beacons maps every supported device into one of seven tiers. The tier determines the transport, the identity storage, the client implementation, and the distribution channel — automatically.

T1
Full
Kernel WG · raw sockets · hardware crypto
T2
Sandboxed
Userspace WG via OS VPN APIs
T3
Browser
WebRTC + IndexedDB + WebAuthn
T4
Constrained
MQTT / CoAP / raw TCP, brokered
T5
Cellular
Private APN — SIM is the credential
T6
WASM/WASI
Universal target — Hives, Workers
T7
Container
OCI image, Helm chart, sidecar

Mobile

Mobile.

PlatformTierImplementation
iOS / iPadOST2Tauri 2 mobile + Swift FFI + NetworkExtension
visionOST2SwiftUI shell + Swift FFI + NetworkExtension
Android (Play)T2Tauri 2 mobile + Kotlin/JNI + VpnService
Android (F-Droid)T2Same APK without Google services
Android (Aurora / GrapheneOS)T2Same APK, anonymous distribution
HarmonyOS / OpenHarmonyT2Native Harmony port (Phase 8)
watchOS / WearOST2-lightCompanion app, approvals on-wrist
KaiOST3Lightweight PWA wrapper
Mobile guide →

Desktop

Desktop.

PlatformTierImplementation
macOS (Apple Silicon + Intel)T1/T2beacons-core daemon + Tauri menubar + NetworkExtension
Windows 11 (x86_64 + ARM64)T1beacons-core + Tauri tray + WireGuardNT
Linux desktop (x86_64 / ARM / RISC-V)T1beacons-core daemon + Tauri tray + kernel WG
Steam DeckT1Linux x86_64 binary
ChromeOST1 / T3Crostini container or browser extension
Desktop guide →

Servers

Servers.

PlatformTierImplementation
Linux server (x86_64 / aarch64 / riscv64)T1beacons-core daemon, no GUI
Windows ServerT1Windows daemon variant
FreeBSD / OpenBSD / NetBSDT1Native BSD build
Cloud VM (any provider)T1Same Linux server build, OCI image
Servers guide →

NAS

NAS.

PlatformTierImplementation
Synology DSMT1DSM SPK wrapping beacons-core
QNAP QTST1QPKG
TrueNAS ScaleT1TrueNAS Helm app
TrueNAS Core (FreeBSD)T1FreeBSD jail
UnRAIDT1Community Apps plugin
OpenMediaVaultT1Debian package
Asustor / TerraMasterT1Vendor app package
NAS guide →

Routers

Routers.

PlatformTierImplementation
OpenWRT routersT1-lightOPKG, ARM / MIPS / x86 builds
pfSense / OPNsenseT1-lightFreeBSD package
Mikrotik RouterOST1-lightRouterOS container or sidecar
Ubiquiti UniFi / EdgeRouterT1-lightCustom package
GL.iNet travel routersT1OpenWRT OPKG
Routers guide →

Edge AI / SBC

Edge AI / SBC.

PlatformTierImplementation
Raspberry Pi (4 / 5 / Zero / CM4)T1Linux ARM build
NVIDIA Jetson (Nano / Xavier / Orin)T1Linux ARM64, CUDA-aware build flags
Google CoralT1Linux ARM
Pine64 / RockPro64 / Star64 (RISC-V)T1Linux ARM or RISC-V
Orange Pi / Banana Pi / ODROIDT1Linux ARM
Intel NUC / LattePandaT1Linux x86_64 or Windows
BeagleBone Black / AI-64T1Linux ARM
Edge AI / SBC guide →

TV / Set-top

TV / Set-top.

PlatformTierImplementation
Apple TV (tvOS)T2tvOS shell + NetworkExtension
Samsung Tizen TVT2Tizen Web App wrapping the PWA
LG webOS TVT2webOS Web App wrapping the PWA
Android TV / Google TVT2TV-optimized variant
Fire TV / Fire TabletT2Android variant
Roku OST3BrightScript dashboard channel
TV / Set-top guide →

Browser

Browser.

PlatformTierImplementation
PWA (any browser)T3WASM beacons-core + WebRTC
Chrome / Edge / Brave / Arc / Opera / VivaldiT2 / T3Extension + WASM + native messaging host
FirefoxT2 / T3WebExtension + WASM + native messaging host
SafariT2 / T3Safari Web Extension wrapping the WASM core
Browser guide →

Cloud-native / WASM

Cloud-native / WASM.

PlatformTierImplementation
OCI container peerT7beacons-core Linux binary in a container
Kubernetes DaemonSetT7Helm chart, one daemon per node
Kubernetes pod sidecarT7Helm chart, one sidecar per pod
Hives flight (WASM)T6WASM/WASI build inside Hives Wasmtime
Cloudflare WorkersT6WASM/WASI build, V8 isolate host
Fastly Compute@EdgeT6WASM/WASI build, Wasmtime host
Vercel Edge FunctionsT6WASM/WASI build
Firecracker microVMsT1Standard Linux binary inside the microVM
Cloud-native / WASM guide →

Constrained / Brokered IoT

Constrained / Brokered IoT.

PlatformTierImplementation
ESP32 / ESP32-S3 / ESP32-C3 (RISC-V)T4Beacons Lite over MQTT, brokered through parent peer
Raspberry Pi Pico (RP2040, RP2350)T4Same brokered model
Arduino / Adafruit FeatherT4Same brokered model
Nordic nRF52 / nRF53 (BLE mesh)T4Same brokered model
Particle Argon / BoronT4 / T5 hybridBrokered on Wi-Fi, T5 on cellular
Matter / Thread devicesT4Brokered through Matter controller peer
Constrained / Brokered IoT guide →

Satellite & off-grid

Satellite & off-grid.

PlatformTierImplementation
Iridium / Starlink / Swarm satelliteT1Standard Linux daemon over the satellite IP link
LoRaWAN gatewayT4 brokerBeacons-LoRa gateway translates signaling to LoRa packets
MeshtasticT4 brokerSame model
Satellite & off-grid guide →

Robotics

Robotics.

PlatformTierImplementation
ROS2 nodesT1Native Linux daemon + beacons-ros2 package
PX4 / PixhawkT1Onboard Linux
DJIT1SDK packages
Boston DynamicsT1SDK packages
NVIDIA IsaacT1SDK packages
Robotics guide →

Cellular-direct (T5)

Cellular-direct (T5).

PlatformTierImplementation
Telnyx WirelessT5Launch partner; private APN + custom IP pools
Twilio Super SIMT5Largest reach
SoracomT5APAC-strong, IoT-first
HologramT5Developer-friendly, global
OnomondoT5EU IoT eSIM
1NCET5Flat-rate IoT, EU
Particle CellularT5Cellular MCU + cloud, integrated
EMnifyT5EU enterprise IoT
KORE / Aeris / PelionT5Enterprise/industrial cellular
Cellular-direct (T5) guide →

Open a fleet

The mesh that fits agents and humans.

A `did:oas`-rooted private mesh that ships peer configurations to any device, anywhere, by policy — not by hand.

Open consoleRead the quickstart