Servers

SSH sessions

How short-lived, single-server SSH certificates give you and Claude a real shell with a small blast radius.

Launchpad never hands out permanent SSH keys. Instead, request_ssh_session mints a certificate:

• signed by Launchpad's private certificate authority, which every server trusts;
• valid for one server only;
• valid for 30 minutes (a new one is a single call away);
• logged at issuance, and revocable early with revoke_session.

The response contains everything needed to connect: host, username, private key, certificate and expiry. Claude handles this automatically. To connect yourself, save the key and certificate to files and run:

ssh -i launchpad_key -o CertificateFile=launchpad_key-cert.pub ubuntu@<host>

A fuller guide (including using sessions from your own tools) is coming soon.

Previous: Subdomains · Next: Health and logs