Controlled, auditable SSH access for agents and automation.

Gateway is the control plane for servers your agents connect to: server definitions, per-server SSH identities, encrypted credential storage, and a full activity record.

What Gateway is today

Server registry

Register the servers your agents need to reach: hostname, port, SSH username, and a connection region. Gateway tracks control-plane state, not host reachability.

SSH identity issuance

Gateway generates an Ed25519 keypair per server, encrypts the private key with envelope encryption, and gives you the public key to install. Rotate or revoke it at any time.

Audit history

Every sign-in, credential change, file operation, and billing event is recorded to an append-only activity log scoped to your account.

What Gateway is not, yet

Gateway does not open SSH connections, run commands, or provide a terminal. It is a credential and configuration control plane; the execution layer that actually connects to your servers is built separately and is not part of this deployment. See known limitations for the full, current list.

Sign in with an identity you already trust

Gateway never asks for a password. Authentication is handled entirely by your OAuth2 or OIDC identity provider. Gateway only ever issues its own session afterward.