SSH

List your SSH keys

The SSH public keys registered to you — not to the account. A key identifies one person, so this is the same list whichever account your key or session is acting on. A key added from the dashboard reaches the computers of every account where you are an owner or member. A key added through an API key or a connected app reaches only the account that credential acts on, and is removed when the credential is revoked. Each key’s reach says which of those it is, from the account this request acts on, without naming any other. Viewers cannot connect.

HOW TO CONNECT. Switch SSH on for a computer (PUT /computers/{id}/ssh), then ssh -J mandala@ssh.mandala.computer:2222 user@<computer id or name>. The jump host checks the key you offer against this list and your role on the computer’s account; the computer’s own sshd then checks it again. A name that matches computers on more than one of your accounts is refused — use the id.

Connecting to a suspended computer resumes it — a start like any other, charged and refusable by your plan. A stopped computer refuses the connection; start it first.

Requires the viewer role or higher.

get/ssh-keys

Request

  • Base URL: https://app.mandala.computer/api/v1
  • URL: https://app.mandala.computer/api/v1/ssh-keys
  • Auth: HTTP bearer

Response

Your keys, oldest first.

idstring required

sshk- and sixteen hex characters.

namestring required

Your label for it. Defaults to the comment that followed the key when you added it.

public_keystring required

The key as <type> <base64>, re-encoded from what you sent: no options and no comment. This is the line the platform writes into the computer.

fingerprintstring required

SHA256: and 43 characters, exactly as ssh-keygen -l -f <file> prints it.

key_typestring required

One of ssh-ed25519, ecdsa-sha2-nistp256, ecdsa-sha2-nistp384, ecdsa-sha2-nistp521, sk-ssh-ed25519@openssh.com, sk-ecdsa-sha2-nistp256@openssh.com or ssh-rsa.

created_atstring required

RFC 3339 timestamp.

last_used_atstring nullable required

When this key last opened a connection to a computer. null until it has.

reach'everywhere' | 'this_account' | 'another_account' required

Where this key can connect, from the account this request acts on. everywhere: it was added from the dashboard and works on every account where you are an owner or member. this_account: it was added through an API key or connected app on this account and works here only. another_account: it was added through an API key or connected app on a different account and does not work here; which account is not said. A key is registered once, so adding it again is a 409: to use one key on every account, remove it and add it from the dashboard; otherwise use a separate key here.

Changes

No recorded changes to this operation across all 1 revision of this API.