Workspace SSH Access

Crafting workspaces have a built-in SSH server and can be accessed remotely by any SSH client, as well as any tool that works over SSH — including scp, git, rsync, mutagen, and others.

SSH access is available for workspaces only, not for dependency services or container workloads. For remote execution in containers, see Workload Remote Exec.

Transport

The workspace SSH server port is not directly exposed to the external network. Instead, SSH connections are proxied via a special HTTP-based transport used by Crafting internally. This requires a ProxyCommand in the SSH client configuration.

This does not require manual setup. The cs CLI automatically updates ~/.ssh/config with the correct ProxyCommand after a successful login.

Using the CLI

The cs ssh command is the recommended way to establish an SSH session with a Crafting workspace. It ensures the ProxyCommand is correctly configured and auto-resumes the sandbox if it has been suspended:

cs ssh -W SANDBOX/WORKSPACE -- [flags and command]

Use -- as a separator to pass additional arguments to the underlying ssh executable.

Remote IDEs

IDEs that support SSH remotes work out of the box after logging in with cs, because the CLI prepares ~/.ssh/config automatically. The hostname format for a workspace is:

NAME--SANDBOX-ORG.SYS-DOMAIN

Where:

Supported remote IDEs include:

IDE CLI Command
VS Code cs vscode
JetBrains (Ultimate) cs jetbrains
Cursor cs cursor
Zed cs zed

See Also