Current status

What works today, what is planned. anyhop is usable now through its CLI, Web UI, and REST API for per-app and per-workflow VPN exits.

Providers

Provider	Support
NordVPN	Token/API setup, location selection, automatic WireGuard channel creation, server pinning
Proton VPN	WireGuard .conf import
Customized	Self-hosted (or any other) WireGuard server: named .conf import, optional country/city

Which providers can come next, and why some cannot, is in VPN provider research.

Platforms

Platform	Support
macOS	Supported
Linux	Supported
Docker	Supported — ghcr.io/anyhop/anyhop
Windows	Planned

Features

Area	Status
Core CLI	Providers, channels, per-channel proxies, status, tests (probe + speed + traffic), logs
Routing	Ruleset-based router entrypoint with domain/CIDR/geosite/geoip/all matchers, kill-switch, CLI shadow lint, built-in LAN bypass
Web UI	Dashboard (channels, probe/speed, routes, kill-switch) + Bundle + Logs pages
REST API	Everything the CLI does over /api/v1 (Bearer auth) — for scripts and compose siblings
Docker	Container profile: proxy hub for compose networks, VPN gateway container (tun), declarative boot config
Distribution	PyPI, one-command uv bootstrap, Homebrew, GHCR

Planned next

• More VPN providers: WireGuard now, and OpenVPN-only providers once anyhop adds an OpenVPN provider archetype (sing-box 1.14.0 has shipped the OpenVPN client this was waiting on) — see VPN provider research.
• A macOS native app, built as an independent project on top of the public REST API — not bundled with this CLI core or the Web UI.
• Windows support and broader distribution.

Non-goals

• IKEv2/IPsec support.
• VPN providers without a usable WireGuard or (once anyhop ships the OpenVPN path) OpenVPN credential path — the excluded list and the reasoning for each is in VPN provider research.
• SOCKS5-only or unencrypted proxy providers.
• Bundling sing-box inside the Python package.