Skip to content
SkiMasque
Sign InGet Started

Wherever workloads need temporary access to private infrastructure.

Terraform

  1. Terraform
    active
  2. Production database
Terraform reaches the production database.
WHO
acme/widget · main
WHAT
terraform
WHERE
db.prod:5432
LIMITS
20m

Private APIs

  1. CI job
    active
  2. private-api.internal:443
A CI job reaches a private API.

Kubernetes

  1. Deployment workflow
    active
  2. Kubernetes API
A deployment workflow reaches the Kubernetes API.

Database migrations

  1. migration job
    active
  2. database:5432
A migration job reaches the database.

For an agent session, set an enforced TTL such as:

20 minutes

Developer debugging

  1. developer
    active
  2. skimasque connect
    active
  3. private service
A developer runs skimasque connect to reach a private service.

Infrastructure automation

  1. CI
    active
  2. Terraform / Pulumi
    active
  3. Private infrastructure
CI runs Terraform or Pulumi against private infrastructure.

Coding agents

Grant a staging API to one task with exec --agent, inspect its decisions and end it from the console. Delegated sessions end with their parent. Use a sandbox to prevent direct bypass; destination permissions still control what the agent can do after connecting.