CLI Reference
Mezite provides four command-line tools for interacting with your SSH access platform. Each binary serves a distinct role in the Mezite ecosystem.
Binaries
| Binary | Description |
|---|---|
msh | Client CLI for end users. Authenticate, open SSH sessions, transfer files with SCP, list available nodes, and manage access requests. |
mezctl | Admin CLI for cluster operators. Manage users, roles, join tokens, audit logs, access requests, and auth connectors. |
mezd | Node agent installed on every SSH host. Connects to the Mezite proxy via a reverse tunnel, handles certificate-based authentication, and records sessions. |
mezd identity | Agent identity subcommand for CI/CD pipelines and automated
services. Continuously renews short-lived certificates so non-human
workloads can authenticate to Mezite. Run as mezd identity start, or set MEZITE_IDENTITY_DIR and MEZITE_IDENTITY_TOKEN in the environment of mezd start for combined mode (mezd start registers no flags — identity is configured via environment variables
only). |
Getting Started
Most users will start with msh to log
in and open SSH sessions. Cluster administrators should also install mezctl for user and role management.