opentunnel

KO | EN

gitlite — search

#javascript #python #typescript #machine-learning #deep-learning #linux #docker #nodejs #windows #kubernetes #security #mcp #ios #open-source

(★ 15)

Your agent’s tool calls, on any machine.

opentunnel 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# OpenTunnel

**Your agent's tool calls, on any machine.**

OpenTunnel gives AI agents an ephemeral, end-to-end encrypted command tunnel to remote machines.
No SSH, no accounts, no standing access. Ctrl+C and it's gone.

[![CI](https://github.com/akoenig/opentunnel/actions/workflows/ci.yml/badge.svg)](https://github.com/akoenig/opentunnel/actions/workflows/ci.yml)
[![Release](https://img.shields.io/github/v/release/akoenig/opentunnel)](https://github.com/akoenig/opentunnel/releases)
[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://raw.githubusercontent.com/akoenig/opentunnel/main/LICENSE)

[opentunnel.sh](https://opentunnel.sh) · [Getting Started](https://opentunnel.sh/getting-started/) · [How It Works](https://opentunnel.sh/concepts/how-it-works/) · [Security Model](https://opentunnel.sh/concepts/security-model/) · [Self-Hosting](https://opentunnel.sh/guides/self-hosting/)

</div>

---

## Great agents, stuck on one machine.<br>Let's fix that.

Agents are brilliant on the machine they run on. The moment the task lives on another machine, they hit a wall of SSH keys, firewall rules, and standing credentials. Permanent infrastructure for a temporary need.

OpenTunnel removes the wall without creating permanent access. You start one foreground process on the remote machine and paste the printed prompt into your agent. From then on, the agent runs commands there like any other tool call: stdout, stderr, and the real exit code come back as if the machine were local. When the task is done, you press Ctrl+C. The session ends, the invite expires, and no trace of the access remains.

</div>

## Three steps, zero infrastructure

**1 · On the remote machine**

```console
$ curl -fsSL https://opentunnel.sh | sh

I opened an OpenTunnel session for you.
Session active. Press Ctrl+C to revoke access.
```

A temporary CLI is downloaded, checksum-verified, and opens one foreground session. Nothing is installed.

**2 · In your agent**

Paste the printed prompt. That's all: the prompt tells your agent everything it needs, and from that moment it runs commands on the remote machine as regular tool calls, with stdout, stderr, and the real exit code coming back as if the machine were local.

**3 · Press Ctrl+C when you're done**

The session ends, the invite expires, and the relay forgets the connection ever existed. Nothing persists, not on your machine and not on the relay.

## You don't have to trust the relay

The relay routes opaque, encrypted frames between your agent and the remote machine. It cannot read your traffic, so it doesn't matter who operates it.

- **End-to-end encrypted.** Commands, output, and exit codes are encrypted between host and client. The relay forwards ciphertext and sees only routing metadata, timing, and frame sizes.
- **Nothing persisted.** Only in-memory state for active connections. No sessions, invites, payloads, logs, or client metadata are ever stored.
- **Revocation is Ctrl+C.** Access lives exactly as long as the foreground host process. Stop it, and the tunnel ceases to exist.
- **No accounts, no keys.** No signup, no tokens to rotate, no SSH keys to distribute and forget. A session invite is the only secret, and it expires with the session.

The boundaries, including what OpenTunnel does *not* protect against, are documented precisely in the [security model](https://opentunnel.sh/concepts/security-model/).

## Run your own relay

Because the relay needs no database, no accounts, and no persistent state, self-hosting is one command:

```bash
docker run -p 8080:8080 ghcr.io/akoenig/opentunnel:latest \
  relay --public-url https://relay.example.com
```

Sessions started from your origin print agent prompts that point there automatically:

```bash
curl -fsSL https://relay.example.com/cli | sh -s -- create
```

Prefer immutable version tags in production; `latest` moves with each release. Public relay origins must use HTTPS; HTTP is accepted only for localhost and loopback development origins. The [self-hosting guide](https://opentunnel.sh/guides/self-hosting/) and [relay operations](https://opentunnel.sh/guides/relay-operations/) cover TLS termination, systemd, upgrades, and deployment verification.

## Deliberately small

OpenTunnel keeps the access model temporary and narrow on purpose. That is the security model, not a missing feature list: no accounts, no daemons, no audit logs (because there is nothing to log), no PTY, no file transfer, one agent, one command at a time. The full list lives in [scope and non-goals](https://opentunnel.sh/reference/scope-and-non-goals/).

## Development

OpenTunnel is a single Go module. The `opentunnel` binary contains all three roles: the relay, the host (`create`), and the client (`exec`).

```bash
go test ./... -count=1
go vet ./...
go mod tidy -diff
go test -race ./... -count=1
go build ./cmd/opentunnel
```

CI builds binaries for `linux` and `darwin` on `amd64` and `arm64`, and releases publish `ghcr.io/akoenig/opentunnel`. The [opentunnel.sh](https://opentunnel.sh) website lives in [`website/`](website/), and the operational source docs in [`docs/public-v1/`](docs/public-v1/).

---

Built by <a href="https://andrekoenig.com">André König</a> · Released under the <a href="LICENSE">MIT License</a>

</div>

opentunnel

opentunnel 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

opentunnel

opentunnel 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README