CLI Reference

Mezite provides four command-line tools for interacting with your SSH access platform. Each binary serves a distinct role in the Mezite ecosystem.

Binaries

BinaryDescription
mshClient CLI for end users. Authenticate, open SSH sessions, transfer files with SCP, list available nodes, and manage access requests.
mezctlAdmin CLI for cluster operators. Manage users, roles, join tokens, audit logs, access requests, and auth connectors.
mezdNode agent installed on every SSH host. Connects to the Mezite proxy via a reverse tunnel, handles certificate-based authentication, and records sessions.
mezd identityMachine identity subcommand for CI/CD pipelines and automated services. Continuously renews short-lived certificates so non-human workloads can authenticate to Mezite. Run as mezd identity start standalone or use mezd start --identity-dir=... for combined mode.

Getting Started

Most users will start with msh to log in and open SSH sessions. Cluster administrators should also install mezctl for user and role management.