Product
·
August 2026
Stop Giving AI Agents Your SSH Keys
Your AI agent needs to run commands on your servers. The only credential most people have to give it is an SSH key: everything, forever, with no record. rcmd's answer is a token scoped to named machines, expiring by default, revocable in one command, with every action audited — now one command to mint, and an MCP server to plug into. Includes the two security bugs I found in my own audit trail while building it.
#agent-tokens
#ai-agents
#devops
#infrastructure
#mcp
#open-source
#remotecmd
#security
#ssh
Read more