Secure SSH Agent proxy for Linux and MacOS desktop environment.
If you are using ssh agent + agent forwarding to access servers, your ssh agent socket might be exposed to other superusers. This tools helps you secure your ssh-agent on a linux/macos desktop.
First I started using yubikey with ssh key, but the tooling on linux is just not there. If you are managing multiple servers using jump servers and loops it was just a pain. You dont know if the connection is stuck cos of the yubikey or its a real connection timeout. Yubikey(or any smartcard) + ssh is just not flexible atm.
- Mask keys in ssh-add -l output. (optional, recommended)
- Replaces your current running ssh agent (optional, can be changed in settings, recommended. Restores your original ssh-agent on exit.)
- Lock ssh agent based on idle time
- Desktop notifications with rate limiting. Requests that arrive together, for example from parallel ssh sessions, are reported in a single popup.
- The tray icon shows how many sign requests are still waiting, the count is in the tray menu as well.
- hotkeys. (Only listens for keypresses while something is pending. default: F3 accepts the newest sign request, press it again to walk the rest of the queue, Ctrl+Shift+F3 accepts every pending sign request)
- optional bypass for X seconds after a single manual approve
- manual bypass, block all ssh-agent request
- autoupdate from github
See CHANGELOG.md for what changed between releases. Licensed under the ISC license.
- Just download the latest appImage/dmg and run it. Should work on any linux/macos machine. The binary is built by github workflow.
- Autoupdate supported.
- Install nodejs (20 or newer), npm.
- Checkout git repo
- npm install
- npm run compile-templates
- npm start
# export APP_ENV="dev"
# npm start
