SSH

Use the returned SSH information and the configured jump path. There are no public raw SSH/TCP guest ports. The computer's public API identifier is not itself an Internet address, and SSH keys are a separate credential from API access tokens.

Keys and reachability

Register the intended public key with ssh_keys:write. A key restricted to computers or metadata can affect only visible computers; account-wide SSH keys require unrestricted authority. Never upload the private SSH key. Retain your client's host-key checks and do not silently disable verification when a host key changes.

The data API also provides a binary WebSocket SSH tunnel under exec scope. The SDK and CLI authenticate its upgrade with an access-token header; the authorization deadline bounds the socket. The original SSH byte protocol runs inside that transport. A token expiration can disconnect the tunnel while a separately managed background job remains running.

Guest agent and development tools

You are root in the guest. Stopping or changing the CE agent makes the data API unavailable, but SSH can remain usable and billing does not change. Use VS Code over SSH for a local editor and Security model for recovery boundaries. SSH is a customer connection, not a fallback for API authorization refusal.

Dory is in development; these pages describe the planned service and may change. Questions: support@computeengines.com.