Manage SSH Keys with AI Agents

Use MCP tools to list, audit, and manage SSH keys in your workspace — all through conversation with your AI agent.

Your AI agent can list SSH keys in your workspace, help you identify old or unused keys, and guide you through key management.

---

”Show me all the SSH keys in my workspace.”

The agent lists your keys:

1. list_ssh_keys — returns all SSH keys with metadata

You have 4 SSH keys in your workspace:

Name	Type	Fingerprint	Added
macbook-pro	ed25519	SHA256:xK9…mN2	3 months ago
ci-deploy	rsa-4096	SHA256:aB3…pQ7	6 months ago
old-laptop	ed25519	SHA256:rT1…wX4	1 year ago
team-shared	rsa-2048	SHA256:kL5…jH8	8 months ago

old-laptop is over a year old. If you no longer use that machine, consider removing it. team-shared uses RSA-2048 — ed25519 is recommended for new keys.

---

”Which keys can access my running instances right now?”

The agent cross-references keys with instances:

1. list_ssh_keys — gets all workspace keys
2. list_instances — gets all running instances

All 4 workspace SSH keys are authorized on your 2 running instances:

Instance	GPU	Keys with access
training-run	A100	macbook-pro, ci-deploy, old-laptop, team-shared
dev-box	RTX 4090	macbook-pro, ci-deploy, old-laptop, team-shared

Every key in the workspace can SSH into every instance. If old-laptop is compromised or no longer in use, removing it reduces your attack surface.

To remove a key or add a new one, use the SSH Keys page in the dashboard.

---

”I just set up a new workstation. Walk me through adding its SSH key.”

The agent guides you through the process:

1. list_ssh_keys — shows current keys to avoid duplicates

Here’s how to add your new workstation’s SSH key:

Step 1: Generate a key if you don’t have one:

ssh-keygen -t ed25519 -C "workstation"

Step 2: Copy the public key:

cat ~/.ssh/id_ed25519.pub

Step 3: Add it in the dashboard at SSH Keys — paste the public key and give it a name like workstation.

Once added, the key is automatically authorized on all current and future instances in this workspace. You currently have 4 other keys — the new one will be number 5.

SSH key creation and deletion are managed through the dashboard. The MCP list_ssh_keys tool provides read-only access to your key inventory.

---

Tools used in this workflow

Tool	Purpose
list_ssh_keys	List all SSH keys and their metadata
list_instances	Cross-reference keys with running instances