All apps/trezor-agent

trezor-agent

Hardware-based SSH/GPG/age agent.

Runs as trezor-agent|macOS, Linux, Windows|github.com

Command form

ai-draft · 3 tasks · 11 fields

Start a hardware-backed SSH agent for one identity: connect, open a shell, run a command, or run in the foreground. The command to run goes after the identity. PIN/passphrase helpers, GPG and age modes are left out.

Opens the form; the finished command lands at your prompt, unrun

Run in Otty

otty gui trezor-agent

Run SSH agentExample values, fixed in this page — nothing here reaches a terminal

Basic

Identity*

string

ECDSA curve

string

Connect via SSH

--connect

Advanced

Verbose

0count

TasksEach one presets the form for one job

Connect to a host

identitycurveconnectverbose

Shell with the agent

identitycurveshellverbose

Run a command under the agent

identitycurvecommandverbose

ParametersOnly these flags are editable in the form

Identity

Host identity such as user@host, optionally with port and path.
string · positional 0

Command to run

Program and arguments run under the agent (placed after --).
string · positional 1 · repeatable

ECDSA curve

string

--ecdsa-curve-name-eed25519nist256p1

Connect via SSH

boolean

--connect-c

Open a shell under the agent

boolean

--shell-s

Run in foreground

boolean

--foreground-f

Socket path

path

--sock-path

Connection timeout (seconds)

number

--timeout

Log file

path

--log-file

Log SSH protocol messages

boolean

--debug

Verbose

count

--verbose-v

SourcesEvery flag above is checked against these

src

-v, --verbose -e, --ecdsa-curve-name CURVE specify ECDSA curve name --timeout timeout for accepting SSH client connections --debug log SSH protocol messages for debugging. --log-file Path to the log file (to be written by the agent). --sock-path Path to the socket of the age…

manual2026-10-27

raw.githubusercontent.com

Before it fills your prompt, Otty checks the installed trezor-agent against its version. A form that does not match your version is not offered.