Remote commands through profiles — not a free shell.
SSH connections store host, port, user and keys in the vault. Automated processes run approved command profiles. A free-form remote command from the model is off; a named profile is used instead.
What SSH is allowed to do
SSH connector. Administrators manage connections. Trusting a server key is an explicit step in admin after you check the fingerprint.
SSH connections
Create host, port and user in admin. Keys and passwords go to secure credential store. Test connectivity before a automated process uses the connection.
Command profiles
ssh.execute-profile runs a catalog profile with validated arguments — not an arbitrary remote command from the model.
Tunnels
ssh.tunnel opens an approved tunnel destination. Sessions are tracked and purged; it is not an open-ended jump host.
Host keys
Trust the host key in admin after you verify the fingerprint. A mismatch is not something to override from chat.
Behind VPN when needed
If the host is only reachable over VPN, bring the gateway up first — then SSH. Timeout often means the path, not the key.
Explore more
WinRM / PSRP
WinRM and PowerShell Remoting (PSRP) are one Windows connection family. You store the host and choose WinRM or PSRP, keep passwords and certificates in the vault, then test the path or run approved Windows Ansible books. Same idea as SSH: a governed connection, not a shell in the request.
Terraform
A Terraform connection points at modules you have approved. Automated processes can validate, plan, apply and show the result. Destroy stays off unless the connection allows it and a person has approved. Typical work: a Proxmox VM, deploying or upgrading a stack, preparing an environment. Provider credentials — including Proxmox API tokens — stay in the organization vault. The run can be local or over an existing SSH connection.
Ansible
Ansible connections bind inventory and playbooks into governed automated process steps. A run uses an approved playbook, sensitive credential-referenced credentials and organization policy. Chat does not get a free ansible-playbook shell.
VPN
VPN connections (IPsec / IKEv2, SSTP or WireGuard, client or server role) sit in the same governed catalog as SSH and Ansible. From a server connection in admin you generate secrets once, then download ready profiles and install commands grouped by iPhone, Android, Windows and Ubuntu. Typical path: gateway first, then SSH, playbooks or Windows remoting on the far side.
Ready to move beyond the chatbot?
Build AI that understands your business, works with your knowledge, follows your processes and can actually finish the job. You decide which actions are allowed, when a person must step in and how much AI usage your organization can consume.