An unprivileged agent and on-demand sudo
The agent runs as a regular user. Elevated permissions are granted for specific commands and a limited time.
An agent that always runs as root is one mistake away from compromising the entire machine. The Nythronix agent runs as an unprivileged user, and privilege escalation is a separate, explicit action.
Sudo policy
Permissions are granted for specific commands and a limited time. A policy on the control plane defines what is allowed, and the machine owner can tighten it locally: the control plane cannot grant more than the local file permits.
Allowlist for remote commands
Commands that the control plane or a worker runs on a machine outside an interactive session must pass an allowlist. Everything outside that list is rejected and recorded in the audit log.
What the control plane can see
The control plane sees metadata: who connected, when, to which machine, and which command ran. It cannot see the contents of SSH tunnels because encryption remains end to end between your client and the machine.
Learn more in Security model.
More features
- Terminal in your browser
Sessions survive through tmux or zellij: close the tab, lose the network, or restart the agent, and your command keeps running.
- Linux and Windows agents behind NAT
The agent opens an outbound connection to the control plane. No inbound ports, VPN, or public IP addresses required.
- SSH relay through the control plane
SSH and scp tunnels between machines and from the operator's laptop. Encryption stays end to end; the control plane cannot read the traffic.
- Access by consent code
For someone else's machine: the owner generates a single-use code and the operator enters it in the dashboard. Codes expire and access can be revoked, as in TeamViewer.
- AI workers in channels
Channels for machines and tasks, like Discord. Workers read, suggest, and run commands, but changes require human approval and are recorded in the audit log.
- Skills through MCP
Connect Postgres, web tools, and other ready-made MCP servers as worker skills. Each runs on its own machine with restricted network access.
- Signed updates
Agent releases are signed with Ed25519. The agent verifies the signature and updates itself, without a manual visit to every machine.