AI agents
Let agents work on your servers without giving them a key.
Agents call K2Shell; K2Shell signs a short-lived certificate and runs the command under the rules you set. You watch it live and can replay it later.
What you get
Key custody
The agent never sees a password, private key or certificate.
A policy for every key
Allowlists without shell operators, read-only keys, and per-server scope.
Interactive when needed
session_open gives the agent a real terminal for prompts and installers.
Long jobs
job_start runs builds and migrations in the background and returns output when asked.
Watch it happen
Live tiles, recordings, and an activity log with every command.
Sealed output
Keep output for audit, encrypted so only your vault can read it.