Documentation

Setup guides for each connection mode, with the exact permissions and commands rather than a description of where to click.

• Getting startedInstall, add a host, connect. Five minutes.
• AWS setupBrowser sign-in or a least-privilege IAM user, for Instance Connect and Session Manager.
• Google Cloud setupService account, roles and firewall for IAP.
• Cloudflare setupAccess application and service token.
• YubiKey setupGenerating a P-256 key in PIV slot 9A.
• Tailscale setupBrowser sign-in or a pre-authorised key.

Also useful

• Security model — what protects what, and where it stops.
• FAQ — the questions that come up most.