Every port in this table has a source reference. Ports not confirmed in source are omitted.
| Port | Process | Protocol | Binds to | Mode | Source | Notes |
|---|---|---|---|---|---|---|
| 3030 | Clarity Warp server | HTTPS (TLS) | 0.0.0.0 |
all | main.rs:3155,3373 |
Self-signed cert; SANs: localhost, clarity.local. Single-instance guard: checks port on startup |
| 1883 | Mosquitto MQTT broker | MQTT (TCP) | 127.0.0.1 |
historian, standalone | mqtt_services/client.rs:8-9 |
Windows only (system service). macOS has no MQTT broker |
| 8000 | papa_agent_app (ADK) | HTTPS | 127.0.0.1 |
standalone | api/google_adk.rs:46,74 |
Internal-only; proxied via Warp /apps/* and /run_sse |
| 8001 | pulse_multi_agents | HTTP | 0.0.0.0 |
cloud-copilot | Dockerfile:54, index.py:282 |
Default port; overridden by PORT env var |
| 8200 | ML tag mapping API | HTTPS | 127.0.0.1 |
standalone | webpi_meta_connector.rs:1312 |
⚠ TODO-VERIFY: port referenced in source but value is a deployment config. Confirm before treating as fixed. |
These ports bind to 127.0.0.1 and must not be exposed externally.
Binds to 127.0.0.1:1883. The Clarity MQTT client (mqtt_services/client.rs:8) always connects to 127.0.0.1. External MQTT clients cannot reach the broker directly — they must use the WebSocket bridge at wss://localhost:3030/mqtt which proxies to the local broker via raw TCP.
Binds to 127.0.0.1:8000 (localhost HTTPS). The Clarity backend proxies all AI chat requests to this port via clarity:backend/src-tauri/src/api/google_adk.rs. The ADK process is spawned by the Process Manager and is not directly accessible from the browser.
Referenced in clarity:backend/src-tauri/src/connectors/webpi/webpi_meta_connector.rs:1312 as https://localhost:8200/map/tags. This is a Python service started by the Process Manager. The exact port value comes from deployment configuration (python_services.json or environment). Verify the actual bound port before treating 8200 as canonical.
The Clarity backend registers itself on the LAN via mDNS so browsers can reach it as clarity.local without manual IP configuration.
| Hostname | Registration method | Record type | Source |
|---|---|---|---|
clarity.local |
dns-sd -P (macOS primary) |
A + SRV | main.rs:2233-2257 |
clarity.local |
mdns-sd daemon (fallback / non-macOS) |
SRV | main.rs:2262-2273 |
The TLS certificate's SAN list includes clarity.local so browsers that trust the cert will not show warnings on the mDNS hostname.
Source: clarity:backend/src-tauri/src/main.rs:1597-1607 (cert generation), main.rs:2221-2276 (mDNS registration)
| Port | Exact source location | Quoted value |
|---|---|---|
| 3030 | main.rs:3190,3373 |
.run(([0, 0, 0, 0], 3030)) |
| 1883 | mqtt_services/client.rs:9 |
const DEFAULT_PORT: u16 = 1883; |
| 8000 | api/google_adk.rs:46 |
"https://localhost:8000/apps/{}" |
| 8001 | index.py:282 |
port=int(os.environ.get("PORT", 8001)) |
| 8001 | Dockerfile:54 |
EXPOSE 8001 |
| 8200 | webpi_meta_connector.rs:1312 |
"https://localhost:8200/map/tags" |
Last updated: 2026-05-23 — all ports verified from source code