lend

Remote commands, approved on your laptop

Give a remote shell or coding agent access to selected commands and SSH keys on your laptop. Review each request where your credentials live.

GET STARTED How it works

macOS + Linux · CLI + MCP · Go

Commands on your laptop

Keep tools such as gh and op local. Remote requests return streamed output and the command's exit code.

Command policy

Your SSH agent, with approval

Select which keys are visible and how they can sign. Lend checks each request before passing it to your existing agent.

SSH key rules

Review access locally

Use Touch ID on macOS or a local prompt on Linux. See the request, its reason, and reported caller context before you allow it.

Approval and callers

Connect, request, approve

ON YOUR LAPTOP

lend ssh --config ./policy.json -- agent-vm

ON THE REMOTE HOST

lend exec --reason "Inspect the pull request" -- \
  gh pr view 123 --repo example/project

The laptop checks the policy and asks for approval. gh runs locally and sends its result back over the forwarded SSH agent socket.

Set up your first session

Control the session

Sessions and leasesSeparate policies and bounded grants per SSH connection. Connect a coding agentOne MCP tool for requesting local commands with a reason. Watch and revoke accessInspect activity, pause sessions, and clear approval grants. Check your setupDiagnose policy, approval, and forwarding problems.