FarHand gives a coding agent remote hands over SSH while keeping credentials on the local machine

GitHub·medium signalXBlueskyLinkedInCopy link

Created 2026-09-19, FarHand is a single-binary MCP server that routes every command and file operation an agent performs onto a remote host over your existing OpenSSH config, keys, agent and jump hosts in one multiplexed session. The local machine exposes only an allowlisted set of folders via `local_ls`, `local_read`, `upload` and `download`; remote tools are `remote_bash`, `remote_read/write/edit/ls/glob/grep`, and every action writes one JSON line to a local audit log. The design argument against the obvious alternative (`opencode serve` on the remote) is that it forces provider keys onto the remote host, whereas FarHand keeps the agent and its credentials local.