Skills through MCP
Connect Postgres, web tools, and other ready-made MCP servers as worker skills. Each runs on its own machine with restricted network access.
Model Context Protocol (MCP) is an open standard for connecting AI models to external tools. Nythronix uses it to give workers capabilities beyond the terminal: database queries, web page access, and internal API calls.
Skills live next to the data
The MCP server runs on the machine with the agent, not on the control plane. The database is not exposed externally; the worker accesses it through the agent. The control plane forwards calls and stores configuration.
The same rules as commands
Tools that make changes require human approval, just like terminal commands. Tool filters can restrict the available set so workers see only what they need.
Isolation
Each skill runs in a separate process with reduced privileges and restricted network access. Skill configuration comes from the control plane, so you can manage it from the dashboard without logging into the machine.
Learn more in Skills through MCP.
More features
- Terminal in your browser
Sessions survive through tmux or zellij: close the tab, lose the network, or restart the agent, and your command keeps running.
- Linux and Windows agents behind NAT
The agent opens an outbound connection to the control plane. No inbound ports, VPN, or public IP addresses required.
- SSH relay through the control plane
SSH and scp tunnels between machines and from the operator's laptop. Encryption stays end to end; the control plane cannot read the traffic.
- Access by consent code
For someone else's machine: the owner generates a single-use code and the operator enters it in the dashboard. Codes expire and access can be revoked, as in TeamViewer.
- AI workers in channels
Channels for machines and tasks, like Discord. Workers read, suggest, and run commands, but changes require human approval and are recorded in the audit log.
- Signed updates
Agent releases are signed with Ed25519. The agent verifies the signature and updates itself, without a manual visit to every machine.
- An unprivileged agent and on-demand sudo
The agent runs as a regular user. Elevated permissions are granted for specific commands and a limited time.