Zero remote installation
Nothing is installed on the remote machine. tunnelagent runs locally and talks to the remote over a standard SSH connection. If you can ssh into it, it works.
No permissions needed
No root access, no package manager, no runtime dependencies on the remote. Just an SSH key that already works.
Works anywhere SSH goes
Dev servers, production boxes, cloud instances, VMs, jump hosts, bastion servers. Any SSH configuration including ProxyJump chains.
Guardrails for sensitive files
Defense in depth: the FUSE filesystem denies access, the shell shim blocks commands, and the system prompt instructs the agent not to touch private files.
Get started in one command
# Launch Claude Code on a remote machine
$ tunnelagent --host user@remote --exec claude
# Or use Codex
$ tunnelagent --host user@remote --exec codex
# Protect sensitive files
$ tunnelagent --host user@remote --private .env "*.key" secrets/ --exec claude
MIT licensed. Written in Rust. One binary. Linux only (for now).
View on GitHub