https://api.tokios.com — no binding the server to 0.0.0.0, no VPN, no per-teammate network setup.
LAN is not the same as your team
LM Studio’s own docs cover serve on local network — binding the server beyond127.0.0.1 so other devices on your Wi-Fi can reach it — with a warning attached, and its request-level auth is off by default. That gets a second machine on your home network talking to the Mac Studio. It doesn’t get you:
- A teammate who isn’t on your LAN. Someone working from another building, another city, or their own home network can’t reach a server bound to your local subnet.
- Per-person access control. LM Studio’s network server has no built-in API key, so anyone who can reach the bound port and path can call it — there’s no way to hand one teammate access and not another, or to cut someone off later without restarting the server.
- One address that survives you changing machines. A LAN IP is tied to your network. Move the Mac Studio, change routers, or hand the job to a Mac mini instead, and every client’s config breaks.
https://api.tokios.com, so you never bind the runtime past loopback and never open an inbound port.
Mac Studio configurations and what they can run
The current Mac Studio ships with M4 Ultra, M5 Max, or M5 Ultra chips. Here is what each brings to local inference:
With that much unified memory, a Mac Studio handles model sizes that need a multi-GPU server on other platforms:
- 70B models at Q4 or Q8 quantization run comfortably on M4 Ultra (192 GB) and every M5 config.
- 500B+ MoE models like DeepSeek V4.1-Flash (552B) and Kimi K3 (2.8T at lower quant) need multi-device setups — see DeepSeek V4.1-Flash local hardware.
- DeepSeek V4-Flash at native precision (155 GB) fits the M5 Ultra 256 GB config with room for KV cache.
- Multiple smaller models simultaneously — run a coding model on Ollama and a general-purpose model on MLX Studio at the same time, each behind its own Tokios deployment.
Set it up on your Mac Studio
1
Start your runtime on the Mac Studio
Run the model server as you normally would, on loopback.Confirm it answers on its own OpenAI-compatible
/v1 API before adding the connector.2
Get a claim code and pair the connector
In the dashboard, open the Setup tab and select Start pairing to get a one-time claim code shaped Tokios ships a native Apple Silicon (arm64) build of
TKS-XXXX-XXXX (valid about 15 minutes). On the Mac Studio, run:tokios-connector, which covers Mac Studio, Mac mini, and MacBook Pro on Apple Silicon. If Gatekeeper flags the binary, clear it with xattr -d com.apple.quarantine ./tokios-connector; the install one-liner above avoids this.Back in the dashboard, approve the device on the Setup or Connectors tab. The connector’s token is delivered over the tunnel — you never see it on screen or paste it into a file.3
Point the connector at your runtime's /v1 endpoint
The connector’s upstream is your runtime’s own OpenAI-compatible API on the Mac Studio, still on loopback — not a port you expose to the network. Default ports: LM Studio
1234, Ollama 11434, MLX Studio 8000, MLX-LM Server 8080 (all with /v1 appended). No inbound firewall rule, no LAN binding, and no extra connector settings needed for this single-machine path.4
Register a deployment
On the Models tab, map your upstream model id (for example, the LM Studio or Ollama model you loaded) to a public deployment name such as
studio-model. Clients send this deployment name in the model field, not the upstream id.5
Create an API key
On the Keys tab, create a key. Keys are
sk-tok-… Bearer tokens, shown once, and can be scoped to specific deployment name patterns — so a teammate’s key can be limited to just this deployment.Keep it always on
A terminal window works for testing, but a Mac Studio doing this job full time should keep the connector running across reboots and logouts. Run it as a launchd background service using a~/Library/LaunchAgents/com.tokios.connector.plist agent that points ProgramArguments at tokios-connector --config and your tokios-connector.json, with RunAtLoad and KeepAlive set so it restarts automatically. See Connector config: running as a background service for the full plist and launchctl load / launchctl start commands.
For a machine no one ever logs into interactively, consider a LaunchDaemon instead of a LaunchAgent — check Apple’s current guidance for your macOS version to confirm which is preferable for your setup.
Use it from anywhere
Once the connector is paired and a deployment is registered, point your client at Tokios instead of the Mac Studio’s IP address or hostname.Claude Code’s model picker only lists
claude* ids, so your Tokios deployment won’t appear in the list — pass --model studio-model explicitly.Why one endpoint
- Share the Mac Studio without sharing your network. A teammate calls
https://api.tokios.comwith their own scoped key — they never need to be on your LAN or Tailscale tailnet. - Swap models without touching client config. Point
studio-modelat a different upstream model or backend, and every agent and script that already targets it keeps working. - No inbound ports, no
0.0.0.0. LM Studio, Ollama, MLX Studio, and MLX-LM Server stay on127.0.0.1. The connector only makes outbound connections to Tokios.
Next steps
Quickstart
Go from zero to a working connector, deployment, and API key.
Install the connector
Full connector install and pairing reference for all platforms.
Use Claude Code
Configure
ANTHROPIC_BASE_URL and ANTHROPIC_API_KEY in detail.Connector config reference
Serve multiple models from one Mac with
tokios-connector.json, and run it as a launchd service.