OperationsSecurity Mission ControlPricing AboutLaunch Session
SECURE ACCESS METHODS

How the AI
Connects to Your Infrastructure

Three ways to give the AI secure, temporary access to your systems — each designed with zero-persistence and full encryption.

🔑
MOST COMMON

SSH Key Access

Generate a dedicated keypair for Moreslot. The AI uses it for the session duration and it's revocable instantly. Never share your root password — a scoped key is all that's needed.

HOW IT WORKS
  • 1
    Generate dedicated keypair
    ssh-keygen -t ed25519 -C "moreslot-session"
  • 2
    Add public key to authorized_keys
    echo "<pub-key>" >> ~/.ssh/authorized_keys
  • 3
    Share private key (encrypted) in session request
  • 4
    AI uses key for session, then it's invalidated automatically upon close
📱
FIELD ACCESS

QR Mobile Tunnel

For on-site access. Generate a QR code in the Moreslot app. Scan with your phone. A WireGuard tunnel opens directly to your infrastructure — no inbound ports needed.

HOW IT WORKS
  • 1
    Request session → QR code generated instantly in dashboard
  • 2
    Scan with Moreslot app while on-site at the facility
  • 3
    WireGuard tunnel opens through NAT — no firewall rule changes required
  • 4
    AI connects through encrypted tunnel and begins operation
  • 5
    Session expires after operation completion — tunnel destroyed
🌐
ENTERPRISE

Secure API Tunnel

Deploy a Moreslot relay agent inside your network. The agent establishes an outbound-only encrypted connection. No inbound firewall rules required. Full audit log on every byte.

HOW IT WORKS
  • 1
    Deploy lightweight Moreslot relay agent
    curl -s relay.moreslot.com/install | bash
  • 2
    Agent connects outbound to Moreslot relay — no inbound ports opened
  • 3
    AI sessions route through encrypted relay channel
  • 4
    Agent auto-removes after session — zero persistent footprint
SECURITY STANDARDS

Access Security Guarantees

Every access method is built on the same four non-negotiable security commitments.

Zero Persistent Access

Sessions expire automatically on completion. No backdoors, no lingering credentials, no persistent agents unless explicitly maintained.

Customer-Owned Keys

You generate the keys. You control revocation. Moreslot never holds master credentials or maintains independent access outside of a live session.

Time-Limited Sessions

Every session has a maximum duration configured at creation. Sessions auto-expire when the operation is complete or the time limit is reached — whichever comes first.

Complete Audit Trail

Every access is logged with timestamp, operator, actions taken, and outcome. Audit reports are cryptographically sealed and available in your dashboard permanently.

COMMON QUESTIONS

Access Questions

What if I want to revoke access mid-session?
Any access method can be revoked instantly by the customer, at any time, for any reason. Revoke the SSH key in authorized_keys, end the WireGuard tunnel from your device, or remove the relay agent with a single command. The AI session will terminate within seconds. Partial operations are automatically rolled back to the last clean checkpoint.
Does Moreslot store any access credentials?
Never in plaintext. Session credentials are ephemeral and encrypted with AES-256. They exist only for the duration of the session and are destroyed on close. They cannot be accessed by Moreslot staff at any point. Our architecture is designed so that even a complete breach of Moreslot's systems would yield no usable credentials from past sessions.
Can multiple sessions run simultaneously?
Yes, with SecureOps and AutoInfra plans. Each session runs in a fully isolated context — separate agent instances, separate credential scopes, separate audit logs. Sessions targeting the same infrastructure are serialized by default to prevent conflicts, but can be configured to run in parallel on non-overlapping systems.
What networks does the QR tunnel work on?
Any network, including strict corporate firewalls and hotel networks. WireGuard uses outbound UDP on a standard port, which is almost universally permitted on corporate networks. If UDP is blocked entirely, the Moreslot app automatically falls back to TCP-encapsulated transport. We've tested on over 40 corporate network configurations without a single failure.
READY TO CONNECT

Start With Secure Access

Choose your access method in the session request form and the AI walks you through setup. Most customers are connected in under 10 minutes.

Launch Session View Security Details