SSH

The ssh command puts the CLI on a machine you reach over SSH and connects you to it, so agents can run there instead of on your laptop. You can check on them from anywhere, including an SSH app on your phone.

stashbase ssh install mybox    # install or update the CLI on the machine
stashbase ssh setup mybox      # run the machine's `stashbase setup`
stashbase ssh open mybox       # connect and attach to a tmux session
stashbase ssh uninstall mybox  # remove the CLI, its config and stored keys

The host is a name from ~/.ssh/config or user@host. The commands use your own ssh, so your SSH config, keys, agent and jump hosts apply. Nothing about the machine is stored on your laptop.

Install

stashbase ssh install mybox

Checks the machine's platform and any existing install, then asks before installing or updating. Run it again to update the CLI on the machine.

Prop

Type

Setup

stashbase ssh setup mybox

Runs the machine's interactive stashbase setup, so you enter an API key meant for that machine. The key on your laptop is never copied. Afterwards it checks that the key works and whether Docker is ready, and tells you how to fix anything missing.

Create a separate API key for each machine, so you can revoke it on its own.

Open

stashbase ssh open mybox

Connects to the machine and attaches to a tmux session named stashbase. Agents keep running when you detach or the connection drops; run ssh open again to get back to them.

Prop

Type

stashbase ssh open mybox --port 3000

Uninstall

stashbase ssh uninstall mybox

Lists what it will delete (the CLI, its config and stored keys) and asks first. Revoke the machine's API key in the dashboard too.

Running agents on the machine

The CLI on the machine is the normal CLI, so every command works there as usual. These commands don't install agents: install your agent on the machine, or use the Docker sandbox, whose default image already includes Claude Code and Codex.

Start an agent from your laptop

Once the machine is installed and set up, start an agent there without opening a shell first:

stashbase agent run --ssh mybox --remote-dir /srv/my-repo \
  --profile coding -- codex

The repository and its profile must already be at --remote-dir on the machine. The machine's CLI loads the profile and runs the sandbox there; the profile's [sandbox] backend still applies, and Docker is recommended. Add --remote (and optionally --remote-mode full) to use a remote Agent Proxy session.

If you start stashbase agent run over SSH outside tmux or another multiplexer, the CLI suggests one, since a dropped connection would end the agent.

Use one machine per developer. Users on a shared machine aren't isolated from each other: members of the docker group are effectively root.

Requirements

An x86_64 Linux machine or an Apple Silicon Mac, with bash and curl or wget. ARM Linux isn't supported yet.
From Windows, each step opens its own connection, so you may be asked for your password more than once.