Register devices

The device registry is a set of SSH profiles — name, platform, address, auth — that self-populates from your Tailscale tailnet. Register once, target from anywhere.

Sync from Tailscale

agents devices sync reads tailscale status --json and turns each node into a device profile. In a terminal it opens a checkbox picker so you curate which nodes to keep; with --yes it registers every non-ignored node non-interactively.

agents devices sync         # curate: pick which tailnet nodes to keep (TTY)
agents devices sync --yes   # non-interactive: register all non-ignored nodes

List and inspect

agents devices list          # platform, address, reachability
agents devices ls --json     # machine-readable, for scripts
agents devices show mac-mini # the full profile for one device

Add and edit manually

Register a machine that is not on the tailnet, or override fields on one that is. The target is user@host or a bare host:

agents devices add studio muqsit@studio.local
agents devices set win-mini --platform windows --auth password --bundle muqsit
agents devices rm old-laptop

Ignore a node

Dismiss a tailnet node so sync never re-suggests it (and drop it from the registry if present). Undo with unignore:

agents devices ignore ipad165     # never auto-suggest this node again
agents devices unignore ipad165   # allow it back

Render an ssh_config

Emit the registry as an OpenSSH config so plain ssh <name> works too. Prints to stdout, or --write updates ~/.ssh/config.d/agents:

agents devices render           # print the ssh_config block
agents devices render --write   # write ~/.ssh/config.d/agents

Authentication

Each device authenticates one of two ways:

key — your SSH key (the default; nothing to configure when your key already reaches the host).
password — the password is pulled from a secrets bundle through a Keychain-backed askpass shim, so it never touches argv. Set it with agents devices set <name> --auth password --bundle <bundle>.

Devices overview — the one-flag model.
SSH — connect to a registered device.
Secrets — the bundle password auth pulls from.