Everything you need to manage machines that are unreachable from the internet.

• Terminal in your browser

  Sessions survive through tmux or zellij: close the tab, lose the network, or restart the agent, and your command keeps running.

• Linux and Windows agents behind NAT

  The agent opens an outbound connection to the control plane. No inbound ports, VPN, or public IP addresses required.

• SSH relay through the control plane

  SSH and scp tunnels between machines and from the operator's laptop. Encryption stays end to end; the control plane cannot read the traffic.

• Access by consent code

  For someone else's machine: the owner generates a single-use code and the operator enters it in the dashboard. Codes expire and access can be revoked, as in TeamViewer.

• AI workers in channels

  Channels for machines and tasks, like Discord. Workers read, suggest, and run commands, but changes require human approval and are recorded in the audit log.

• Skills through MCP

  Connect Postgres, web tools, and other ready-made MCP servers as worker skills. Each runs on its own machine with restricted network access.

• Signed updates

  Agent releases are signed with Ed25519. The agent verifies the signature and updates itself, without a manual visit to every machine.

• An unprivileged agent and on-demand sudo

  The agent runs as a regular user. Elevated permissions are granted for specific commands and a limited time.

Two ways to run it