SSH relay through the control plane
SSH and scp tunnels between machines and from the operator's laptop. Encryption stays end to end; the control plane cannot read the traffic.
When a browser terminal is not enough, you need real SSH: scp, rsync, port forwarding, or a remote IDE. Nythronix forwards a TCP connection to the machine through the control plane, while the SSH session inside remains end to end.
How it works
The operator starts a local tunnel with nyx-operator tunnel. The control plane connects it to the agent on the target machine, and a local port becomes available on the laptop. From there, use ordinary ssh -p or scp. SSH keys and encryption stay the same; the control plane only sees an encrypted stream.
Between machines
You can also create a tunnel between two agents: for example, to copy a backup from a server behind one NAT to a server behind another, without opening ports on either machine.
Web proxy to a local port
For services listening only on a machine’s localhost, the dashboard provides a proxy: open the agent’s local port in your browser without SSH or exposing it publicly.
Visibility and control
Every tunnel appears in the dashboard with an owner, target, and lifetime. Creation and closure are recorded in the audit log.
Learn more in SSH relay and tunnels.
More features
- Terminal in your browser
Sessions survive through tmux or zellij: close the tab, lose the network, or restart the agent, and your command keeps running.
- Linux and Windows agents behind NAT
The agent opens an outbound connection to the control plane. No inbound ports, VPN, or public IP addresses required.
- Access by consent code
For someone else's machine: the owner generates a single-use code and the operator enters it in the dashboard. Codes expire and access can be revoked, as in TeamViewer.
- AI workers in channels
Channels for machines and tasks, like Discord. Workers read, suggest, and run commands, but changes require human approval and are recorded in the audit log.
- Skills through MCP
Connect Postgres, web tools, and other ready-made MCP servers as worker skills. Each runs on its own machine with restricted network access.
- Signed updates
Agent releases are signed with Ed25519. The agent verifies the signature and updates itself, without a manual visit to every machine.
- An unprivileged agent and on-demand sudo
The agent runs as a regular user. Elevated permissions are granted for specific commands and a limited time.