Signed updates
Agent releases are signed with Ed25519. The agent verifies the signature and updates itself, without a manual visit to every machine.
You cannot update a fleet of hundreds of machines by hand. The Nythronix agent updates itself, and the signature ensures it installs the release you published.
How a release works
Agent binaries are signed with an Ed25519 key during the build and published to the control plane. The agent detects a new version, downloads it, verifies the signature, and restarts. If the signature does not match, the update is rejected.
Channels and control
Releases are published to channels such as stable, so test machines can receive a version before production machines. The dashboard shows the installed version on each machine.
Self-hosted
In a self-hosted installation, the signing key stays with you. The release tool is included: build, sign, and publish with one command.
Learn more in Administration.
More features
- Terminal in your browser
Sessions survive through tmux or zellij: close the tab, lose the network, or restart the agent, and your command keeps running.
- Linux and Windows agents behind NAT
The agent opens an outbound connection to the control plane. No inbound ports, VPN, or public IP addresses required.
- SSH relay through the control plane
SSH and scp tunnels between machines and from the operator's laptop. Encryption stays end to end; the control plane cannot read the traffic.
- Access by consent code
For someone else's machine: the owner generates a single-use code and the operator enters it in the dashboard. Codes expire and access can be revoked, as in TeamViewer.
- AI workers in channels
Channels for machines and tasks, like Discord. Workers read, suggest, and run commands, but changes require human approval and are recorded in the audit log.
- Skills through MCP
Connect Postgres, web tools, and other ready-made MCP servers as worker skills. Each runs on its own machine with restricted network access.
- An unprivileged agent and on-demand sudo
The agent runs as a regular user. Elevated permissions are granted for specific commands and a limited time.