bypass-vpn

Route AI and work service traffic (Claude, ChatGPT, Atlassian, Wispr Flow, npm, Firebase, Google Auth) through your Wi-Fi gateway to bypass VPN routing.

Works on macOS and Windows. Zero dependencies.

Install

npm install -g bypass-vpn

Setup

macOS — run without a password (recommended)

bypass-vpn only needs elevated privileges for one thing: the route command. Run this once to grant passwordless access to just that command:

bypass-vpn --install-sudoers   # asks for your password this one time

After that, every run works with no password and no sudo. It adds a single scoped rule (NOPASSWD: /sbin/route) to /etc/sudoers.d/bypass-vpn — nothing else is granted. Undo any time with bypass-vpn --uninstall-sudoers.

Prefer not to set that up? You can always fall back to sudo bypass-vpn, which prompts for your password each run.

Windows

Run from an elevated Command Prompt or PowerShell (Administrator). No setup command needed.

Usage

On macOS, the examples below assume you've run --install-sudoers; otherwise prefix them with sudo. On Windows, run them from an elevated prompt.

# Route all services through Wi-Fi
bypass-vpn

# Route specific services only
bypass-vpn --service claude --service chatgpt

# Remove routes
bypass-vpn --remove

# Preview without executing (no privileges needed)
bypass-vpn --dry-run

# List available services
bypass-vpn --list

Custom Domains

Save your own domains (e.g., your company's Jira instance) so they're automatically routed on every run:

# One-time setup
bypass-vpn --add-domain mycompany.atlassian.net

# Now just run normally — saved domains are included automatically
bypass-vpn

# Remove a saved domain
bypass-vpn --remove-domain mycompany.atlassian.net

Custom domains are persisted in ~/.bypass-vpn.json.

Supported Services

| Service | Domains | |---------|---------| | Claude | api.anthropic.com | | ChatGPT | chatgpt.com, chat.openai.com, api.openai.com, + 5 more | | Firebase | firestore.googleapis.com, securetoken.googleapis.com, + 3 more | | Google Auth | accounts.google.com, oauth2.googleapis.com, + 2 more | | Atlassian | api.atlassian.com, auth.atlassian.com, id.atlassian.com | | Wispr Flow | wisprflow.ai, api.wisprflow.ai, inference.wisprflow.com, dl.wisprflow.com | | npm | registry.npmjs.org |

Run bypass-vpn --list for the full domain list.

How It Works

1. Detects your Wi-Fi gateway IP
2. Resolves each service domain to its current IP addresses
3. Adds host-specific routes through the Wi-Fi gateway, bypassing VPN's default route

Routes are ephemeral — they reset on reboot or network change. Re-run as needed.

Requirements

• Node.js >= 16
• macOS or Windows
• Privileges to modify the routing table — on macOS granted once via --install-sudoers (or sudo per run); on Windows an elevated prompt

Uninstall

npm uninstall -g bypass-vpn

Credits

Idea by Sourabh Khot

License

MIT