What connection methods does VixPro AI support?

Four connection methods, configurable per server:

• Agent — lightweight Go binary connects outbound via WebSocket through Cloudflare Tunnel. No inbound ports. Works behind NAT and firewalls. Supports operations that would terminate an SSH session (reboots, network restarts). Recommended for most servers
• SSH — traditional SSH execution via the VixPro AI container. Useful where agent installation isn't possible
• Both — Go Agent preferred with automatic SSH fallback if the agent is disconnected. Provides resilience for critical servers
• Cloud API — agentless execution through your cloud provider's native infrastructure. AWS uses SSM Run Command, GCP uses IAP TCP Tunneling, Azure uses Run Command. No software installed, no open ports

All four methods pass through the same security gate chain:

• Org-level permissions — allowed, requires approval, or disabled per tool
• Admin approval gates — untested tools never reach production
• Audit logging — every execution logged with full parameters
• Rate limiting — prevents runaway execution loops
• Parameter validation — verified before any command runs