I wanted my agents to call tools on machines they were not running on. That kept coming up. We already solved remote access for humans. SSH is great. But agents do not really work like humans in a terminal. They call tools. And when the thing they need is somewhere else, we still reach for keys, firewall rules, VPNs, bastions and credentials that outlive the task. So I built OpenTunnel. The flow is simple: 1. Start OpenTunnel with one command on the remote machine. It runs as a temporary foreground session and does not install anything. 2. Paste the printed prompt into your agent. 3. Remote commands behave like local tool calls, with stdout, stderr and the real exit code coming back. No accounts. No standing access. The relay only forwards encrypted frames and stores nothing. Use the hosted relay, or run your own. The relay is stateless and easy on your infrastructure. When you are done, press Ctrl+C. Access is gone. I made this because I wanted the primitive to exist. Maybe it helps someone else too. Remember: With great power comes great responsibility 😊

I rolled the boulder away: Cave is now in public beta 🎉 The private beta is over. No more explicit allowlist additions, which means anyone can now install Cave and run coding agents in isolated environments on their own infrastructure: bash <(curl -fsSL build.withcave.ai/install/cl…) cave server install A huge thank you to the brave souls who joined early and shared so much valuable feedback throughout the private beta 🚀 There is now also a dedicated repo for feedback, feature requests, and bug reports: github.com/withcave/cave Next stop: open sourcing Cave. It's already on the horizon.