# Burrowee

> Burrowee is secure remote access to any machine — SSH, web apps, any TCP
> service — through a relay, with no open ports. An AI agent can operate Burrowee
> end to end by driving the open-source `burrowee-agent` CLI: it holds an Ed25519
> key, binds once to the user's account (GitHub), and signs every control-plane
> call. The agent never sees keys, tokens, or signatures — it only runs CLI
> commands and follows a `done` / `need_decision` / `need_human` / `error`
> next-action protocol.

## Start here

- [burrowee (entry skill)](https://release.burrowee.com/skills/burrowee/SKILL.md): Install `burrowee-agent`, bind it to a Burrowee account, then route to the per-task skills. Load this first.

## Skills

- [burrowee-gateway-setup](https://release.burrowee.com/skills/burrowee-gateway-setup/SKILL.md): Stand up and enroll a gateway, expose a local service over the relay.
- [burrowee-connect](https://release.burrowee.com/skills/burrowee-connect/SKILL.md): Pair the cli to a gateway, then connect or SSH to the exposed service.
- [burrowee-edge-setup](https://release.burrowee.com/skills/burrowee-edge-setup/SKILL.md): Stand up and approve a self-hosted edge relay.
- [burrowee-domains](https://release.burrowee.com/skills/burrowee-domains/SKILL.md): Attach and list custom (wildcard) domains (plan-gated).
- [burrowee-sessions](https://release.burrowee.com/skills/burrowee-sessions/SKILL.md): List, share, create, and revoke sessions.
- [burrowee-account](https://release.burrowee.com/skills/burrowee-account/SKILL.md): View and manage account and team settings; billing/upgrade/delete hand back to the human.

## API

- [Agent API & signing protocol](https://ai.burrowee.com/api): The binding ceremony, the request-signing canonical string + headers, the `/api/agent/v1` endpoint reference, the next-action protocol, and the `burrowee-agent` CLI reference. Open and reimplementable.

## Install

- Install the CLI: `curl -fsSL https://release.burrowee.com/agent/install.sh | sh` — then run `burrowee-agent version`.