HTTPS API and MCP

Every CLI command also works over HTTPS at POST /exec, and there is an MCP server at /mcp.

Get a token

Mint a token over SSH. --cmds limits what it may run and --exp sets when it expires.

ssh turm.dev ssh-key generate-api-key --label=ci --cmds=ls,new --exp=30d

The token is shown once. It appears in ssh-key list as api:ci.

Run a command

The request body is the command line, exactly as you would type it after ssh turm.dev.

curl -X POST /exec -H "Authorization: Bearer $TOKEN" -d ls
curl -X POST /exec -H "Authorization: Bearer $TOKEN" -d 'new --name=ci-1 --json'

Revoke a token

ssh turm.dev ssh-key remove api:ci