SSH Key Management

DjangoMOO supports public-key authentication over SSH via the simplesshkey library. Three built-in verbs let players manage their own SSH keys without needing admin access.

Commands

Command	Effect
`@keys`	List your registered SSH public keys
`@add-key <key>`	Add an SSH public key to your account
`@remove-key <n>`	Remove the key at position `<n>` in the list

Listing Keys

@keys

Output:

SSH keys for Wizard:
  1. [ssh-ed25519] SHA256:abc123...  my laptop
  2. [ssh-rsa] SHA256:def456...  work machine

If no keys are registered, @keys prints:

No SSH keys configured. Use @add-key to add one.

Adding a Key

Paste your public key as the direct object:

@add-key ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAA... user@host

The key name is taken from the comment field (the last token in an OpenSSH public key). On success:

Added SSH key: [ssh-ed25519] SHA256:abc123...  user@host

Keys are validated against the OpenSSH format before saving. An invalid key string produces an error without creating any record.

If the key comment contains a word that the parser treats as a preposition — for, at, by, in, on, from, etc. — enclose the whole key in quotes:

@add-key "ssh-rsa AAAA... my key for work"

Removing a Key

Use @keys to find the index, then pass it to @remove-key:

@keys
@remove-key 1

Output:

Removed SSH key: [ssh-ed25519] SHA256:abc123...  user@host

How It Works

The verbs are implemented as wizard-owned verbs on $player, so every connected player can manage their own keys. They call three SDK functions — add_ssh_key, list_ssh_keys, remove_ssh_key — defined in moo/sdk/ssh_keys.py. Those functions access the simplesshkey.UserKey model directly; verb code in the sandbox cannot import simplesshkey itself.

Each player’s SSH keys are stored as UserKey records linked to their Django User account. The SSH server in moo/shell/server.py validates keys during login via validate_public_key.

Verb source files

moo/bootstrap/default/verbs/player/at_keys.py
moo/bootstrap/default/verbs/player/at_add_key.py
moo/bootstrap/default/verbs/player/at_remove_key.py