Skip to main content
POST
Mint certificate-backed OpenSSH relay access

Authorizations

Authorization
string
header
required

API key passed as Bearer token

Path Parameters

id
string
required

Machine ID (e.g. mch_a1b2c3d4)

Body

application/json
public_key
string
required

OpenSSH public key to certify for relay login.

Example:

"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAA... user@example"

user
string
default:root

Machine user to request in the certificate.

ttl_seconds
integer<uint64>

Requested certificate lifetime in seconds.

Required range: 1 <= x <= 3600
expires_in_minutes
integer<uint64>

SDK-compatible requested certificate lifetime in minutes.

Required range: 1 <= x <= 60

Response

SSH access material and generated OpenSSH command

certificate
string
required

OpenSSH user certificate for the submitted public key.

host
string
required

Public SSH relay hostname.

Example:

"ssh.nullspace.io"

port
integer<uint16>
required

Public SSH relay port.

Example:

22

user
string
required

Machine user encoded as a certificate principal.

Example:

"root"

expires_at
string<date-time>
required

Certificate expiration time.

access_id
string
required

Revocable access grant identifier. Treat as sensitive in logs.

command
string
required

Best-effort OpenSSH command for manual use.

host_key
string | null

Relay host public key for known_hosts pinning when configured.