# Alpacon Documentation

> Alpacon is a unified server management platform. This file indexes documentation for AI agents and LLMs.

## Integrate

- [Integrate](https://docs.alpacax.com/integrate/): Connect Alpacon with your CI/CD tools, identity providers, and workflows. Learn integration patterns for SSO, GitHub Actions, GitLab CI, and Jenkins with secure authentication and audit trails.
- [GitHub Actions](https://docs.alpacax.com/integrate/github-actions/): Automate deployments with Alpacon's GitHub Actions. Learn how to use alpacon-setup, websh, cp, and common actions for secure CI/CD without SSH keys.
- [GitLab CI](https://docs.alpacax.com/integrate/gitlab-ci/): Integrate Alpacon with GitLab CI/CD pipelines using official Docker container. Learn service token setup, ACL rules, deployment automation, and multi-environment pipelines.
- [Jenkins](https://docs.alpacax.com/integrate/jenkins/): Integrate Alpacon into Jenkins pipelines with Docker. Learn pipeline configuration, service token setup, ACL rules, and remote command execution for CI/CD automation.
- [Single sign-on (SSO)](https://docs.alpacax.com/integrate/sso/): Integrate Alpacon with your organization's identity provider using single sign-on (SSO). Centralize authentication and leverage existing MFA policies. Okta is supported via OIN Express Configuration, and Enterprise workspaces can connect a SAML IdP arranged during onboarding.
- [Okta SSO integration](https://docs.alpacax.com/integrate/sso/okta/): Set up single sign-on with Okta using Okta Integration Network (OIN) Express Configuration. One-click OIDC setup with centralized user management.

## Learn

- [Learn](https://docs.alpacax.com/learn/): Complete learning guide for Alpacon. Start with quickstart tutorials, explore key concepts, and follow hands-on guides for production best practices.
- [Set up your workspace](https://docs.alpacax.com/learn/admin-setup/): A guided setup path for workspace administrators. Invite your team, register servers, wire up group access, and configure approvals and security in order.
- [Give AI agents governed access](https://docs.alpacax.com/learn/ai-agents-governance/): A journey for the admin wiring an AI agent to their servers. Connect an agent over MCP, scope it to a task, keep a human on approvals, watch it work, and audit everything it did.
- [The approver's guide](https://docs.alpacax.com/learn/approver-guide/): A guide for Superusers who approve requests in Alpacon. Learn to read a work session or token request, decide well, and follow it through the audit trail.
- [Infrastructure setup](https://docs.alpacax.com/learn/best-practices/infrastructure-setup/): Enterprise infrastructure configuration guide for Alpacon. Learn firewall rules, proxy setup, network requirements, and deployment architecture for production environments.
- [Monitoring strategy guide](https://docs.alpacax.com/learn/best-practices/monitoring/): Effective monitoring and logging strategies for Alpacon. Learn about CPU, memory, disk metrics, advanced monitoring features, alerting, and log management best practices.
- [Permission management guide](https://docs.alpacax.com/learn/best-practices/permission-management/): Manage Alpacon permissions with roles, groups, and work sessions. Learn least privilege, session-based server access, token allowlists, and audit practices.
- [Security settings guide](https://docs.alpacax.com/learn/best-practices/security/): Complete security configuration guide for Alpacon. Learn MFA strategies, session management, API token security, audit logging, and compliance best practices.
- [How Alpacon works](https://docs.alpacax.com/learn/how-it-works/): How Alpacon works. Request time-bound work sessions instead of standing SSH access, connect as yourself, verify with MFA when it matters, and audit every session.
- [Installation](https://docs.alpacax.com/learn/installation/): Complete guide to installing the Alpacon agent (Alpamon) on Linux, macOS, and Windows servers. Covers automated installation, manual setup, and troubleshooting.
- [Introduction](https://docs.alpacax.com/learn/introduction/): Alpacon is execution governance for people, pipelines, and AI agents: time-bound work sessions that are approved, risk-assessed live, and audited by AI.
- [Key concepts](https://docs.alpacax.com/learn/key-concepts/): Essential Alpacon concepts explained. Learn about workspaces, the Alpamon agent, Websh, identity management, sessions, and audit logs for secure server access.
- [AI agents](https://docs.alpacax.com/learn/key-concepts/ai-agents/): How Alpacon governs AI agent access. Agents connect through MCP, act in scoped time-bound sessions, and sensitive actions are approved, with activity recorded.
- [Architecture](https://docs.alpacax.com/learn/key-concepts/architecture/): How Alpacon is put together from your seat: outbound-only agents, connect as yourself, approved time-bound sessions, scoped tokens, and AI-analyzed audit.
- [Zero trust](https://docs.alpacax.com/learn/key-concepts/zero-trust/): Alpacon's zero-trust model in practice: no standing access, identity-based connections, no exposed ports, and a complete audit trail. See how it differs from traditional SSH.
- [Migrating from SSH](https://docs.alpacax.com/learn/migration/migrating-from-ssh/): Step-by-step guide to migrate from traditional SSH to Alpacon. Learn migration strategies, testing procedures, and how to run both systems in parallel.
- [Quickstart](https://docs.alpacax.com/learn/quickstart/): Get started with Alpacon in 5 minutes. Learn to get your workspace, register your first server, and connect via browser terminal. No SSH keys or VPN required.
- [Security overview](https://docs.alpacax.com/learn/security/): Overview of Alpacon's security features. Learn about data encryption, authentication, access control, audit logging, compliance, and security architecture.
- [Authentication & access control](https://docs.alpacax.com/learn/security/authentication/): Enterprise-grade authentication and access control with Auth0/Okta. Learn about MFA, SSO, RBAC, session management, and API token security for secure infrastructure access.
- [Data security](https://docs.alpacax.com/learn/security/data-security/): Comprehensive data security measures in Alpacon. Learn about TLS encryption, data at rest protection, regional data storage, retention policies, and GDPR compliance.
- [Security FAQ](https://docs.alpacax.com/learn/security/faq/): Frequently asked security questions about Alpacon. Find answers about production security, SSH comparison, certifications, data handling, and security best practices.
- [Network security](https://docs.alpacax.com/learn/security/network/): Configure your network for Alpacon. Learn the agent-based outbound connection model, server and client firewall rules, corporate proxy setup, IP allowlisting, and connection troubleshooting.
- [Platform security and availability](https://docs.alpacax.com/learn/security/platform/): How Alpacon secures its platform: TLS transport encryption, certificate management, web application firewall and DDoS protection, monitoring, and availability posture.
- [Vulnerability disclosure policy](https://docs.alpacax.com/learn/security/vulnerability-disclosure/): Alpacon's responsible vulnerability disclosure policy. Learn how to report security issues, our response process, safe harbor, and how we credit reporters.
- [What Alpacon checks, and what it doesn't](https://docs.alpacax.com/learn/security/what-alpacon-checks/): What the policy check on an approval card covers before a request reaches an approver, what it leaves out, and the known limits of an agent's self-reported name.
- [GitHub Actions setup](https://docs.alpacax.com/learn/tutorials/github-actions-setup/): Build CI/CD pipeline with GitHub Actions and Alpacon. Learn how to create secure deployments without SSH keys using a scoped service token, ACL rules, and automated build processes.
- [Windows servers](https://docs.alpacax.com/learn/windows/): Alpacon supports Windows servers through the Alpamon agent. Learn which versions and features work, how the SYSTEM account works, and how to upgrade it.

## Reference

- [Reference](https://docs.alpacax.com/reference/): Complete technical reference for Alpacon. Access CLI commands, API endpoints, MCP tools, troubleshooting guides, FAQ, glossary, and release notes in one comprehensive resource.
- [Actions reference](https://docs.alpacax.com/reference/actions/): Reference documentation for Alpacon GitHub Actions. Four purpose-built actions for CI/CD workflows: setup, websh, cp, and common.
- [alpacon-common-action](https://docs.alpacax.com/reference/actions/common/): Run any Alpacon CLI command in your CI/CD workflows. A flexible action for listing servers, checking status, managing groups, and other Alpacon operations.
- [alpacon-cp-action](https://docs.alpacax.com/reference/actions/cp/): Copy files and directories between local and remote servers in CI/CD workflows. Supports upload, download, recursive copy, multiple source files, and user/group options.
- [alpacon-setup-action](https://docs.alpacax.com/reference/actions/setup/): Install the Alpacon CLI in your GitHub Actions workflow. Required as the first step before using other Alpacon actions.
- [alpacon-websh-action](https://docs.alpacax.com/reference/actions/websh/): Execute shell commands on remote servers in your CI/CD workflows. Supports running as specific users and groups, environment variables, and multi-line scripts.
- [API reference](https://docs.alpacax.com/reference/api/): Complete Alpacon REST API reference. Learn how to authenticate, execute commands, manage servers, and integrate with CI/CD pipelines using API tokens and webhooks.
- [Alerts API overview](https://docs.alpacax.com/reference/api/alerts/): API reference overview for the Alpacon Alerts API. Read every alert a workspace has raised—metric, offline, and security alerts alike—and acknowledge one.
- [Alerts API](https://docs.alpacax.com/reference/api/alerts/alerts/): API reference for Alpacon alerts. List and read the alerts a workspace has raised, across every alert type, and acknowledge one. Filter and search resolved history too.
- [Commands](https://docs.alpacax.com/reference/api/commands/): API reference for remote command execution on Alpacon servers. Execute, list, retrieve, and cancel commands with scheduling and dependency support.
- [IAM API overview](https://docs.alpacax.com/reference/api/iam/): API reference overview for Alpacon Identity and Access Management. Manage users, groups, and memberships programmatically through the REST API.
- [Groups API](https://docs.alpacax.com/reference/api/iam/groups/): API reference for Alpacon group management. List, create, update, and delete groups to organize users and control server access with role-based permissions.
- [Memberships API](https://docs.alpacax.com/reference/api/iam/memberships/): API reference for Alpacon group membership management. List, create, update, and delete memberships to control user roles and permissions within groups.
- [Users API](https://docs.alpacax.com/reference/api/iam/users/): API reference for Alpacon user management. List, create, update, and delete users with filtering, search, role-based access control, and detailed user profiles.
- [Metrics API overview](https://docs.alpacax.com/reference/api/metrics/): API reference overview for the Alpacon Metrics API. Read every server's latest values, create alert rules that watch them, and override a rule per server.
- [Latest metrics API](https://docs.alpacax.com/reference/api/metrics/latest/): API reference for Alpacon's latest metrics endpoint. Read every server's newest CPU, memory, disk, disk I/O, and network value in one paginated request.
- [Rule overrides API](https://docs.alpacax.com/reference/api/metrics/rule-overrides/): API reference for Alpacon per-server rule overrides. Give one server its own threshold, recovery threshold, or duration, or exempt it from an alert rule.
- [Alert rules API](https://docs.alpacax.com/reference/api/metrics/rules/): API reference for Alpacon metric alert rules. Set direction, duration, recovery threshold, no-data window, device scope, and notification destinations.
- [Workspace preferences API](https://docs.alpacax.com/reference/api/preferences/): Read and update Alpacon workspace preferences through the API. Learn the agent rollout policy, its maintenance window, and the deprecated auto upgrade flag.
- [Servers API overview](https://docs.alpacax.com/reference/api/servers/): API reference overview for Alpacon server management. List, register, update, and delete servers, and manage the notes attached to them through the REST API.
- [Agent upgrades API](https://docs.alpacax.com/reference/api/servers/agent-upgrades/): List Alpacon agent upgrades through the API. See each automatic or manual upgrade, per server or across the workspace, with its outcome and who started it.
- [Server notes API](https://docs.alpacax.com/reference/api/servers/notes/): API reference for Alpacon server notes. Create, list, retrieve, update, and delete notes attached to servers with support for private notes, pinned notes, and user mentions.
- [Servers API](https://docs.alpacax.com/reference/api/servers/servers/): This API reference covers Alpacon server management. Learn how to list, register, update, and delete servers, and how to upgrade or restart a server's agent.
- [API tokens](https://docs.alpacax.com/reference/api/tokens/): API reference for managing API tokens. Create, list, update, and delete tokens with scoped permissions for programmatic access to the Alpacon API.
- [CLI reference](https://docs.alpacax.com/reference/cli/): Alpacon CLI command reference. Learn how to use alpacon commands for server access, file transfers, and automation. Includes installation, authentication, and usage examples.
- [alpacon agent](https://docs.alpacax.com/reference/cli/agent/): The alpacon agent command manages the Alpamon agent on remote servers. You can restart or upgrade it without direct access. This page lists its subcommands.
- [alpacon agent restart](https://docs.alpacax.com/reference/cli/agent/restart/): This command restarts the Alpamon agent on a target server. It asks for confirmation and refuses while the server has active user work unless you force it.
- [alpacon agent upgrade](https://docs.alpacax.com/reference/cli/agent/upgrade/): This command upgrades the Alpamon agent on a server to its latest version. It asks you to confirm and refuses while the server has user work unless forced.
- [alpacon approval](https://docs.alpacax.com/reference/cli/approval/): Manage approval requests via CLI. List, inspect, approve, reject, and cancel requests for work sessions, sudo policies, and service tokens. Includes available subcommands, syntax, and usage examples.
- [alpacon approval approve](https://docs.alpacax.com/reference/cli/approval/approve/): Approving requests has moved to the Alpacon console. The CLI subcommand exits with an error and points you to the console for tracking request status.
- [alpacon approval cancel](https://docs.alpacax.com/reference/cli/approval/cancel/): Cancel a pending approval request you submitted. Cancelling a work session request also cancels the linked work session. Superusers can cancel any pending request. Includes syntax, available options, and usage examples.
- [alpacon approval describe](https://docs.alpacax.com/reference/cli/approval/describe/): Show all fields of an approval request, including who requested it, its type, and current status. Use JSON output to see nested work session details. Includes syntax, available options, and usage examples.
- [alpacon approval ls](https://docs.alpacax.com/reference/cli/approval/ls/): List approval requests in your workspace. Filter by status or request type, or show only your own submissions to track pending decisions. Includes syntax, available options, and usage examples.
- [alpacon approval reject](https://docs.alpacax.com/reference/cli/approval/reject/): Rejecting requests has moved to the Alpacon console. The CLI subcommand exits with an error and points you to the console for tracking request status.
- [alpacon audit](https://docs.alpacax.com/reference/cli/audit/): View audit logs via CLI. Track user actions, system events, and security-related activities across your infrastructure. Includes syntax, options, and usage examples.
- [alpacon authority](https://docs.alpacax.com/reference/cli/authority/): Manage certificate authorities (CA) via CLI. Create, delete, list, and inspect CAs, and download root certificates for secure server authentication and TLS. Includes subcommands, syntax, and usage examples.
- [alpacon authority create](https://docs.alpacax.com/reference/cli/authority/create/): Create a new certificate authority (CA) in Alpacon. Initialize a CA to sign and manage certificates with custom policies for secure server authentication. Includes syntax, options, and usage examples.
- [alpacon authority delete](https://docs.alpacax.com/reference/cli/authority/delete/): Delete a certificate authority (CA) that has never received a certificate request. Learn the syntax, options, and how to retire a CA by deleting its server.
- [alpacon authority describe](https://docs.alpacax.com/reference/cli/authority/describe/): Display detailed information about a specific certificate authority. View CA configuration, policies, status, and associated certificates for PKI management and auditing. Includes syntax, options, and usage examples.
- [alpacon authority download-crl](https://docs.alpacax.com/reference/cli/authority/download-crl/): Download the Certificate Revocation List (CRL) for a certificate authority. Get the current CRL for revocation verification. Includes syntax, options, and usage examples.
- [alpacon authority download-crt](https://docs.alpacax.com/reference/cli/authority/download-crt/): Download the root certificate from a certificate authority. Save the CA root certificate to a local file for trust chain configuration and secure client authentication. Includes syntax, options, and usage examples.
- [alpacon authority ls](https://docs.alpacax.com/reference/cli/authority/ls/): List all certificate authorities in your workspace. View all CAs to manage PKI infrastructure and monitor certificate issuance for security compliance. Includes syntax, available options, and usage examples.
- [alpacon authority update](https://docs.alpacax.com/reference/cli/authority/update/): Update a certificate authority configuration in Alpacon. Modify CA settings using an interactive editor. Includes syntax, options, and usage examples.
- [alpacon cert](https://docs.alpacax.com/reference/cli/cert/): Manage SSL/TLS certificates in your workspace via CLI. List, view details, and download certificates for secure server communication and authentication. Includes available subcommands, syntax, and usage examples.
- [alpacon cert describe](https://docs.alpacax.com/reference/cli/cert/describe/): Display detailed information about a specific SSL/TLS certificate. View certificate properties, expiration date, issuer, and subject for security auditing and management. Includes syntax, options, and usage examples.
- [alpacon cert download](https://docs.alpacax.com/reference/cli/cert/download/): Download an SSL/TLS certificate to a local file. Save the certificate by ID to a specified path for installation and secure communication configuration. Includes syntax, available options, and usage examples.
- [alpacon cert ls](https://docs.alpacax.com/reference/cli/cert/ls/): List all SSL/TLS certificates in your workspace. View the certificate inventory for security management, expiration tracking, and monitoring the certificate lifecycle. Includes syntax, options, and usage examples.
- [alpacon completion](https://docs.alpacax.com/reference/cli/completion/): Generate autocompletion scripts for your shell. Enable tab completion for Alpacon CLI commands in bash, fish, PowerShell, or zsh to improve command-line productivity. Includes subcommands and setup instructions.
- [alpacon completion bash](https://docs.alpacax.com/reference/cli/completion/bash/): Generate an autocompletion script for bash shell. Enable tab completion for Alpacon CLI commands in bash to speed up command entry and reduce typing errors. Includes installation instructions and usage examples.
- [alpacon completion fish](https://docs.alpacax.com/reference/cli/completion/fish/): Generate an autocompletion script for fish shell. Enable tab completion for Alpacon CLI commands in fish to enhance command-line efficiency and user experience. Includes installation instructions and usage examples.
- [alpacon completion powershell](https://docs.alpacax.com/reference/cli/completion/powershell/): Generate an autocompletion script for PowerShell. Enable tab completion for Alpacon CLI commands in PowerShell to improve Windows command-line productivity. Includes installation instructions and usage examples.
- [alpacon completion zsh](https://docs.alpacax.com/reference/cli/completion/zsh/): Generate an autocompletion script for zsh shell. Enable tab completion for Alpacon CLI commands in zsh to streamline command entry and boost productivity. Includes installation instructions and usage examples.
- [alpacon cp](https://docs.alpacax.com/reference/cli/cp/): Copy files between local machine and remote servers. Upload, download, and transfer files with recursive directory support and authentication options. Includes syntax, available options, and usage examples.
- [alpacon csr](https://docs.alpacax.com/reference/cli/csr/): Manage certificate signing requests (CSR) via CLI. Create, approve, deny, delete, and list CSRs for certificate issuance and PKI management. Includes available subcommands, syntax, and usage examples.
- [alpacon csr approve](https://docs.alpacax.com/reference/cli/csr/approve/): Approve a certificate signing request (CSR) to issue a signed certificate. Complete the certificate provisioning workflow by signing approved CSRs from the CLI. Includes syntax, options, and usage examples.
- [alpacon csr create](https://docs.alpacax.com/reference/cli/csr/create/): Create a new certificate signing request (CSR) for certificate issuance. Generate a CSR with custom subject properties and configurations for your certificate authority. Includes syntax, options, and usage examples.
- [alpacon csr delete](https://docs.alpacax.com/reference/cli/csr/delete/): Delete a certificate signing request (CSR) from the system. Remove CSRs by ID to clean up pending or rejected certificate requests and maintain PKI hygiene. Includes syntax, available options, and usage examples.
- [alpacon csr deny](https://docs.alpacax.com/reference/cli/csr/deny/): Deny a certificate signing request (CSR) to prevent certificate issuance. Reject CSRs that do not meet security or policy compliance requirements from the CLI. Includes syntax, available options, and usage examples.
- [alpacon csr describe](https://docs.alpacax.com/reference/cli/csr/describe/): Display detailed information about a specific certificate signing request. View CSR properties, status, subject, and configuration for review and approval decisions. Includes syntax, available options, and usage examples.
- [alpacon csr download-crt](https://docs.alpacax.com/reference/cli/csr/download-crt/): Download the signed certificate for a CSR. Retrieve the issued certificate by CSR ID after approval, and save it to custom output path for flexible management.
- [alpacon csr ls](https://docs.alpacax.com/reference/cli/csr/ls/): List all certificate signing requests in your workspace. Filter CSRs by status such as signed, denied, or pending to manage the certificate issuance workflow. Includes syntax, available options, and usage examples.
- [alpacon csr retry](https://docs.alpacax.com/reference/cli/csr/retry/): Retry a failed certificate signing request. Resubmit a CSR for processing when it failed due to temporary issues. Includes syntax, options, and usage examples.
- [alpacon edit](https://docs.alpacax.com/reference/cli/edit/): Edit remote files with your local editor. Download a file, edit it locally, and upload changes back to the server automatically when the editor exits.
- [alpacon event](https://docs.alpacax.com/reference/cli/event/): Subscribe to the Alpacon event channel from the CLI. Learn what the channel is, which event types you can subscribe to, and when to use watch or wait.
- [alpacon event wait](https://docs.alpacax.com/reference/cli/event/wait/): Block until one Alpacon event decides an outcome, then exit with a code a script can branch on. Covers success and failure sets, --until, and timeouts.
- [alpacon event watch](https://docs.alpacax.com/reference/cli/event/watch/): Stream Alpacon events from the CLI until you stop them. Subscribe by event type and target, get one line per event, and switch to NDJSON for scripts.
- [alpacon exec](https://docs.alpacax.com/reference/cli/exec/): Execute a command on a remote server without opening an interactive terminal session. Run one-off, asynchronous, or verified file executions with user and group options.
- [Getting started](https://docs.alpacax.com/reference/cli/getting-started/): Get started with Alpacon CLI. Learn installation methods for Linux, macOS, Windows, and Docker, authentication with login/logout, server management, and Websh terminal connection.
- [alpacon group](https://docs.alpacax.com/reference/cli/group/): Manage IAM groups via CLI in Alpacon workspace. Create, delete, describe, and list groups, and manage group members with role-based permissions. Includes available subcommands, syntax, and usage examples.
- [alpacon group create](https://docs.alpacax.com/reference/cli/group/create/): Create a new IAM group in Alpacon workspace. Add a group for organizing users and managing access permissions collectively across your infrastructure. Includes syntax, available options, and usage examples.
- [alpacon group delete](https://docs.alpacax.com/reference/cli/group/delete/): Delete a specified IAM group from Alpacon workspace. Permanently remove the group and its associated permissions with appropriate authorization. Includes syntax, available options, and usage examples.
- [alpacon group describe](https://docs.alpacax.com/reference/cli/group/describe/): Display detailed information about a specific IAM group. View group members, role assignments, permissions, and configuration details for access management. Includes syntax, available options, and usage examples.
- [alpacon group ls](https://docs.alpacax.com/reference/cli/group/ls/): List all IAM groups in your Alpacon workspace. View group names and details for inventory, access management, and organizational oversight purposes. Includes syntax, available options, and usage examples.
- [alpacon group member add](https://docs.alpacax.com/reference/cli/group/member-add/): Add a user to a group with a specified role. Assign group membership and role-based permissions for access control within your workspace.
- [alpacon group member delete](https://docs.alpacax.com/reference/cli/group/member-delete/): Remove a user from a group. Revoke group membership and associated permissions by specifying the group and username.
- [alpacon group member](https://docs.alpacax.com/reference/cli/group/member/): Manage group members via CLI. Add, remove, and modify member roles within IAM groups to oversee membership and control access to group resources. Includes available subcommands, syntax, and usage examples.
- [alpacon group update](https://docs.alpacax.com/reference/cli/group/update/): Update IAM group configuration in Alpacon. Modify group settings using an interactive editor. Includes syntax, options, and usage examples.
- [alpacon log](https://docs.alpacax.com/reference/cli/log/): Retrieve and display server logs via CLI. View logs of different levels and types for debugging and monitoring server activities, with tail support for recent entries. Includes syntax, available options, and usage examples.
- [alpacon login](https://docs.alpacax.com/reference/cli/login/): Log in to Alpacon. Use a workspace and region for Alpacon Cloud, or a host for self-hosted, with browser login, an API token, or username and password (self-hosted).
- [alpacon logout](https://docs.alpacax.com/reference/cli/logout/): Log out of an Alpacon workspace and end your CLI session. Remove authentication credentials stored locally on your system to securely terminate access. Includes syntax, available options, and usage examples.
- [alpacon note](https://docs.alpacax.com/reference/cli/note/): Manage server notes and annotations via CLI. Create, delete, and list notes on servers for documentation, collaboration, and operational tracking. Includes available subcommands, syntax, and usage examples.
- [alpacon note create](https://docs.alpacax.com/reference/cli/note/create/): Create notes on servers for documentation and team collaboration. Add notes with custom content, privacy settings, and server association for operational communication. Includes syntax, available options, and usage examples.
- [alpacon note delete](https://docs.alpacax.com/reference/cli/note/delete/): Delete server notes permanently from the system. Remove notes by ID to clean up outdated or unnecessary documentation and annotations on your servers. Includes syntax, available options, and usage examples.
- [alpacon note describe](https://docs.alpacax.com/reference/cli/note/describe/): Display detailed information about a server note. View note content, author, timestamps, and server association. Includes syntax, options, and usage examples.
- [alpacon note ls](https://docs.alpacax.com/reference/cli/note/ls/): List all server notes with details. View notes by server, filter by count, and review note content, authors, and IDs for documentation tracking and collaboration. Includes syntax, available options, and usage examples.
- [alpacon note update](https://docs.alpacax.com/reference/cli/note/update/): Update a server note in Alpacon. Modify note content using an interactive editor. Includes syntax, options, and usage examples.
- [alpacon package](https://docs.alpacax.com/reference/cli/package/): Manage Python and system packages via CLI. List, upload, and download packages for air-gapped environments and centralized distribution across servers. Includes available subcommands, syntax, and usage examples.
- [alpacon package python download](https://docs.alpacax.com/reference/cli/package/python-download/): Download a Python package from the Alpacon package repository. Specify the package filename and a destination path to save the file locally.
- [alpacon package python ls](https://docs.alpacax.com/reference/cli/package/python-ls/): List Python wheel packages available in your Alpacon workspace. View available packages for air-gapped environments and centralized repository management.
- [alpacon package python upload](https://docs.alpacax.com/reference/cli/package/python-upload/): Upload a Python package to the Alpacon package repository. Share wheel files across servers in air-gapped environments or centralized package distribution.
- [alpacon package python](https://docs.alpacax.com/reference/cli/package/python/): Manage Python packages in Alpacon. List, upload, and download Python wheel files for air-gapped environments and centralized package repository management.
- [alpacon package system download](https://docs.alpacax.com/reference/cli/package/system-download/): Download a system package from the Alpacon package repository. Retrieve deb, rpm, or other system packages to a local destination path.
- [alpacon package system ls](https://docs.alpacax.com/reference/cli/package/system-ls/): List system packages (deb, rpm) available in your Alpacon workspace. View available packages for air-gapped environments and centralized deployment.
- [alpacon package system upload](https://docs.alpacax.com/reference/cli/package/system-upload/): Upload a system package to the Alpacon package repository. Share deb, rpm, or other system packages across servers in air-gapped environments.
- [alpacon package system](https://docs.alpacax.com/reference/cli/package/system/): Manage system packages in Alpacon. List, upload, and download system packages such as deb and rpm for air-gapped environments and centralized distribution.
- [alpacon revoke](https://docs.alpacax.com/reference/cli/revoke/): Manage certificate revocation requests via CLI. Create, approve, deny, and track revocations with support for RFC 5280 reason codes. Includes subcommands, syntax, and usage examples.
- [alpacon revoke approve](https://docs.alpacax.com/reference/cli/revoke/approve/): Approve a pending certificate revocation request. The certificate will be added to the CRL after approval. Includes syntax, options, and usage examples.
- [alpacon revoke cancel](https://docs.alpacax.com/reference/cli/revoke/cancel/): Cancel a pending certificate revocation request before it is processed. The certificate remains valid. Includes syntax, options, and usage examples.
- [alpacon revoke create](https://docs.alpacax.com/reference/cli/revoke/create/): Create a certificate revocation request in Alpacon. Specify the certificate and RFC 5280 reason code to initiate revocation. Includes syntax, options, and usage examples.
- [alpacon revoke deny](https://docs.alpacax.com/reference/cli/revoke/deny/): Deny a certificate revocation request. The certificate remains valid after denial. Includes syntax, options, and usage examples.
- [alpacon revoke describe](https://docs.alpacax.com/reference/cli/revoke/describe/): Display detailed information about a certificate revocation request. View status, reason code, certificate details, and timestamps. Includes syntax, options, and usage examples.
- [alpacon revoke ls](https://docs.alpacax.com/reference/cli/revoke/ls/): List all certificate revocation requests in Alpacon. Filter by status to view pending, approved, or denied revocations. Includes syntax, options, and usage examples.
- [alpacon revoke retry](https://docs.alpacax.com/reference/cli/revoke/retry/): Retry a failed certificate revocation request. Use when a revocation failed due to temporary issues. Includes syntax, options, and usage examples.
- [alpacon server](https://docs.alpacax.com/reference/cli/server/): The alpacon server command manages servers registered in Alpacon. You can create, list, update, and delete servers and tokens. This page lists its subcommands.
- [alpacon server create](https://docs.alpacax.com/reference/cli/server/create/): Register a new server by generating an installation guide. Choose token-install or Ansible registration, select a platform, and run non-interactively.
- [alpacon server delete](https://docs.alpacax.com/reference/cli/server/delete/): Permanently delete a specified server from Alpacon. Requires appropriate permissions and the exact server name to remove the server from the system. Includes syntax, available options, and usage examples.
- [alpacon server describe](https://docs.alpacax.com/reference/cli/server/describe/): Display detailed information about a specific server in Alpacon. Fetch and view server status, configuration, and relevant attributes for in-depth understanding. Includes syntax, available options, and usage examples.
- [alpacon server ls](https://docs.alpacax.com/reference/cli/server/ls/): List all registered servers in Alpacon with detailed information. View server ID, name, status, and other relevant details for server inventory and infrastructure overview. Includes syntax, options, and usage examples.
- [alpacon server refresh](https://docs.alpacax.com/reference/cli/server/refresh/): Refresh the system information of a registered server through its Alpacon agent. This non-disruptive action sends the request without a confirmation prompt.
- [alpacon server token create](https://docs.alpacax.com/reference/cli/server/token-create/): Generate a new server registration token for use with Alpamon. Assign groups and set an expiry period (in days). The token key is shown once and cannot be retrieved again.
- [alpacon server token delete](https://docs.alpacax.com/reference/cli/server/token-delete/): Delete a server registration token by name. Removes the token and prevents new servers from self-registering with it via Alpamon.
- [alpacon server token ls](https://docs.alpacax.com/reference/cli/server/token-ls/): List all server registration tokens. View token names, group assignments, and expiry dates for tokens used by Alpamon to self-register servers.
- [alpacon server token](https://docs.alpacax.com/reference/cli/server/token/): Manage server registration tokens used by Alpamon to self-register servers. Create, list, and delete tokens with group assignments and expiry options.
- [alpacon server update](https://docs.alpacax.com/reference/cli/server/update/): Update server configuration in Alpacon. Modify server settings using an interactive editor. Includes syntax, options, and usage examples.
- [alpacon token](https://docs.alpacax.com/reference/cli/token/): Manage API tokens for server access and automation via CLI. Create, delete, list, and configure tokens with ACL permissions for CI/CD integration and security. Includes available subcommands, syntax, and usage examples.
- [alpacon token acl command add](https://docs.alpacax.com/reference/cli/token/acl-command-add/): Add a command ACL rule to an API token. Define which shell commands the token can execute via exec or non-interactive websh, with wildcard support and user/group restrictions.
- [alpacon token acl command delete](https://docs.alpacax.com/reference/cli/token/acl-command-delete/): Delete a command ACL rule by its ID. Remove an access control entry that was previously granted to an API token.
- [alpacon token acl command ls](https://docs.alpacax.com/reference/cli/token/acl-command-ls/): List all command ACL rules for an API token. Review which shell commands the token is authorized to execute via exec or non-interactive websh.
- [alpacon token acl command](https://docs.alpacax.com/reference/cli/token/acl-command/): Manage command ACL rules for an API token. Control which shell commands the token can execute via exec or non-interactive websh using deny-by-default access control.
- [alpacon token acl file add](https://docs.alpacax.com/reference/cli/token/acl-file-add/): Add a file ACL rule to an API token. Define which file paths the token can upload or download via cp, with path wildcard support and user/group restrictions.
- [alpacon token acl file delete](https://docs.alpacax.com/reference/cli/token/acl-file-delete/): Delete a file ACL rule by its ID. Remove a file access control entry that was previously granted to an API token.
- [alpacon token acl file ls](https://docs.alpacax.com/reference/cli/token/acl-file-ls/): List file ACL rules for an API token. Review which file paths and actions the token is authorized to access via cp.
- [alpacon token acl file](https://docs.alpacax.com/reference/cli/token/acl-file/): Manage file ACL rules for an API token. Control which file paths the token can read or write via cp using deny-by-default access control.
- [alpacon token acl server add](https://docs.alpacax.com/reference/cli/token/acl-server-add/): Grant an API token access to one or more servers. Add server ACL rules to allow the token to connect and execute commands on the specified servers.
- [alpacon token acl server delete](https://docs.alpacax.com/reference/cli/token/acl-server-delete/): Delete server ACL rule(s) for an API token. Remove a single rule by ACL ID or bulk-revoke access to multiple servers at once.
- [alpacon token acl server ls](https://docs.alpacax.com/reference/cli/token/acl-server-ls/): List server ACL rules for an API token. Review which servers the token is authorized to access.
- [alpacon token acl server](https://docs.alpacax.com/reference/cli/token/acl-server/): Manage server ACL rules for an API token. Control which servers the token can access using deny-by-default access control.
- [alpacon token acl](https://docs.alpacax.com/reference/cli/token/acl/): Manage access control lists (ACL) for API tokens. Three independent ACL types enforce deny-by-default access for commands, servers, and file paths.
- [alpacon token create](https://docs.alpacax.com/reference/cli/token/create/): Generate a new API token for server access and automation. Create a token with custom name, expiration period, and usage limits for CI/CD and programmatic workflows. Includes syntax, available options, and usage examples.
- [alpacon token delete](https://docs.alpacax.com/reference/cli/token/delete/): Remove existing API tokens from your workspace. Delete tokens by ID or name using command aliases for quick token revocation and security maintenance. Includes syntax, available options, and usage examples.
- [alpacon token duplicate](https://docs.alpacax.com/reference/cli/token/duplicate/): Duplicate an API token and all its rules. Create an exact copy of an existing token including all scopes and ACL rules for Command, Server, and File access control.
- [alpacon token ls](https://docs.alpacax.com/reference/cli/token/ls/): List all API tokens in your workspace. View token names, creation dates, and expiration dates to effectively manage access credentials and monitor the token lifecycle. Includes syntax, available options, and usage examples.
- [alpacon token scopes](https://docs.alpacax.com/reference/cli/token/scopes/): List available scopes for API tokens. View all scope resources and their actions that the current user is permitted to grant when creating an API token.
- [alpacon tunnel](https://docs.alpacax.com/reference/cli/tunnel/): Create a secure TCP tunnel between your local machine and a remote server. Forward local ports, run a command attached to the tunnel, and bind to work sessions.
- [alpacon user](https://docs.alpacax.com/reference/cli/user/): Manage IAM users via CLI in Alpacon workspace. Create, delete, update, describe, and list user accounts with permissions control for identity management. Includes available subcommands, syntax, and usage examples.
- [alpacon user create](https://docs.alpacax.com/reference/cli/user/create/): Create a new user account in Alpacon workspace. Add a user by specifying username, password, and other relevant details for IAM identity management. Includes syntax, available options, and usage examples.
- [alpacon user delete](https://docs.alpacax.com/reference/cli/user/delete/): Permanently delete a user account from Alpacon. Remove a specified user by providing the exact username as an argument to clean up IAM identities. Includes syntax, available options, and usage examples.
- [alpacon user describe](https://docs.alpacax.com/reference/cli/user/describe/): Display detailed information about a specific user account. Fetch and view user description, shell, email, and other relevant attributes for IAM management. Includes syntax, available options, and usage examples.
- [alpacon user invite](https://docs.alpacax.com/reference/cli/user/invite/): Invite a user to the workspace by email. The invitee receives an email with a link to join. Requires staff or superuser privileges. Available on Alpacon Cloud only.
- [alpacon user ls](https://docs.alpacax.com/reference/cli/user/ls/): List all registered users in Alpacon with detailed information. View name, email, status, and other relevant details for user inventory and IAM identity management. Includes syntax, available options, and usage examples.
- [alpacon user update](https://docs.alpacax.com/reference/cli/user/update/): Update user information in Alpacon workspace. Modify user details such as email and personal information with appropriate permissions for IAM account management. Includes syntax, available options, and usage examples.
- [alpacon username](https://docs.alpacax.com/reference/cli/username/): Manage the username for your account's server access via CLI, used by websh and webftp. View or set your username. Includes available subcommands, syntax, and usage examples.
- [alpacon username get](https://docs.alpacax.com/reference/cli/username/get/): Show the username configured for your account's server access. Print the value, or output it as JSON for scripting. Includes syntax, options, and usage examples.
- [alpacon username set](https://docs.alpacax.com/reference/cli/username/set/): Set the username for your account's server access via CLI, used by websh and webftp. Can only be set once. Includes syntax, options, and usage examples.
- [alpacon version](https://docs.alpacax.com/reference/cli/version/): Display the current Alpacon CLI version information. Check your installed CLI version and verify whether updates are available for your installation. Includes syntax, available options, and usage examples.
- [alpacon webftp-log](https://docs.alpacax.com/reference/cli/webftp-log/): View WebFTP file transfer logs via CLI. Track file uploads, downloads, and transfers across your servers. Includes syntax, options, and usage examples.
- [alpacon webhook](https://docs.alpacax.com/reference/cli/webhook/): Manage webhooks via CLI. Create, update, delete, and inspect webhooks for event notifications in your infrastructure. Includes subcommands, syntax, and usage examples.
- [alpacon webhook create](https://docs.alpacax.com/reference/cli/webhook/create/): Create a new webhook in Alpacon. Configure the name, URL, provider, and SSL verification. Includes syntax, options, and usage examples.
- [alpacon webhook delete](https://docs.alpacax.com/reference/cli/webhook/delete/): Delete a webhook from Alpacon. Removes the webhook and stops all event notifications to the URL. Includes syntax, options, and usage examples.
- [alpacon webhook describe](https://docs.alpacax.com/reference/cli/webhook/describe/): Display detailed information about a webhook, including its URL, provider, SSL verification, enabled status, and owner. Includes syntax and usage examples.
- [alpacon webhook ls](https://docs.alpacax.com/reference/cli/webhook/ls/): List all configured webhooks in Alpacon. View webhook names, URLs, enabled status, and owners. Includes syntax, options, and usage examples.
- [alpacon webhook update](https://docs.alpacax.com/reference/cli/webhook/update/): Update an existing webhook configuration. Modify its name, URL, provider, SSL verification, or enabled status. Includes syntax, options, and usage examples.
- [alpacon websh](https://docs.alpacax.com/reference/cli/websh/): Open a Websh terminal session or execute commands on remote servers. Access interactive terminals, run commands remotely, and share sessions for collaborative server operations. Includes syntax, options, and usage examples.
- [alpacon websh close](https://docs.alpacax.com/reference/cli/websh/close/): Close an active websh session. Gracefully terminates the specified session and disconnects all connected clients.
- [alpacon websh describe](https://docs.alpacax.com/reference/cli/websh/describe/): Display detailed information about a specific websh session. Shows session metadata including server, user, username, status, and connection details.
- [alpacon websh force-close](https://docs.alpacax.com/reference/cli/websh/force-close/): Force close a websh session from the CLI regardless of its current state. The command terminates the session immediately and requires Superuser privileges.
- [alpacon websh invite](https://docs.alpacax.com/reference/cli/websh/invite/): Invite users to join an active websh session by email. Send session invitations with optional read-only access control for collaborative server access.
- [alpacon websh join](https://docs.alpacax.com/reference/cli/websh/join/): Join a shared websh session using a URL and password. Connect to an existing session that was shared via the --share flag without an Alpacon account.
- [alpacon websh ls](https://docs.alpacax.com/reference/cli/websh/ls/): Display a list of active websh sessions. View all ongoing websh terminal sessions in your workspace with session IDs, servers, users, and connection status.
- [alpacon websh records](https://docs.alpacax.com/reference/cli/websh/records/): Retrieve or search masked terminal records within a Websh session. Filter by command text and limit the number of results. Available on paid plans only.
- [alpacon websh watch](https://docs.alpacax.com/reference/cli/websh/watch/): Watch an active websh session in read-only mode. Observe an ongoing terminal session without interacting. Requires staff or superuser privileges.
- [alpacon whoami](https://docs.alpacax.com/reference/cli/whoami/): Display the current authenticated identity, workspace, system user info, and group memberships. Useful for verifying context before running infrastructure commands or when managing multiple workspaces.
- [alpacon work-session](https://docs.alpacax.com/reference/cli/work-session/): Create, inspect, and manage Alpacon work sessions from the CLI. Learn the session lifecycle, gated operations per scope, session selection, and gate error codes.
- [alpacon work-session activate](https://docs.alpacax.com/reference/cli/work-session/activate/): Activate an approved Alpacon work session from the CLI. Move a session into the active state so its gated operations become available before its start time.
- [alpacon work-session approve](https://docs.alpacax.com/reference/cli/work-session/approve/): Approving work sessions has moved to the Alpacon console. The CLI subcommand exits with an error and points you to the console for tracking session status.
- [alpacon work-session cancel](https://docs.alpacax.com/reference/cli/work-session/cancel/): Withdraw a pending Alpacon work session request from the CLI before it is reviewed. Available to the session's requester or a superuser.
- [alpacon work-session complete](https://docs.alpacax.com/reference/cli/work-session/complete/): Mark an active Alpacon work session as completed from the CLI. End the session when your work is done so it can no longer authorize server operations.
- [alpacon work-session create](https://docs.alpacax.com/reference/cli/work-session/create/): Create a new Alpacon work session from the CLI. Request scopes and servers, set the duration, wait for approval, and attach the session automatically.
- [alpacon work-session current](https://docs.alpacax.com/reference/cli/work-session/current/): Show the active Alpacon work session for the current workspace. Check which session your exec, websh, cp, and tunnel commands will attach to by default.
- [alpacon work-session describe](https://docs.alpacax.com/reference/cli/work-session/describe/): Show the details of an Alpacon work session from the CLI. View the session's status, scopes, target servers, requester, and expiry time by session ID.
- [alpacon work-session extend](https://docs.alpacax.com/reference/cli/work-session/extend/): Extend the expiry of an approved or active Alpacon work session from the CLI, and see whether the extension applied immediately or is waiting on approval.
- [alpacon work-session ls](https://docs.alpacax.com/reference/cli/work-session/ls/): List Alpacon work sessions from the CLI. Filter by status such as pending, active, or expired, and by requester type or assigned user to find what you need.
- [alpacon work-session recording](https://docs.alpacax.com/reference/cli/work-session/recording/): Show a Websh session recording for an Alpacon work session from the CLI. Replay recorded terminal activity by index to audit what ran during the session.
- [alpacon work-session reject](https://docs.alpacax.com/reference/cli/work-session/reject/): Rejecting work sessions has moved to the Alpacon console. The CLI subcommand exits with an error and points you to the console for tracking session status.
- [alpacon work-session revoke](https://docs.alpacax.com/reference/cli/work-session/revoke/): Force-terminate an active or approved Alpacon work session from the CLI. Superusers can immediately cut off a session's access to servers in an emergency.
- [alpacon work-session timeline](https://docs.alpacax.com/reference/cli/work-session/timeline/): Show the activity timeline for an Alpacon work session from the CLI. Review session events and Websh recordings to audit what happened during the session.
- [alpacon work-session update](https://docs.alpacax.com/reference/cli/work-session/update/): Update an Alpacon work session from the CLI. Change the title, description, scope, servers, schedule, or add MFA-bypass sudo command patterns to an existing session.
- [alpacon work-session use](https://docs.alpacax.com/reference/cli/work-session/use/): Set or clear the active Alpacon work session for the current workspace. Subsequent exec, websh, cp, and tunnel commands attach to it automatically.
- [alpacon workspace](https://docs.alpacax.com/reference/cli/workspace/): Manage workspaces from the CLI. View your current workspace, list all available workspaces, and switch between them without re-authenticating.
- [alpacon workspace access-control update](https://docs.alpacax.com/reference/cli/workspace/access-control-update/): Update workspace access control settings via an interactive editor. Modify sudo, tunneling, and directory permission settings by editing the current configuration.
- [alpacon workspace access-control](https://docs.alpacax.com/reference/cli/workspace/access-control/): Retrieve workspace access control settings. Display the current configuration for sudo, tunneling, directory permissions, and other access restrictions.
- [alpacon workspace authentication update](https://docs.alpacax.com/reference/cli/workspace/authentication-update/): Update workspace authentication settings via an interactive editor. Configure MFA requirements, session timeout, and allowed authentication methods for the workspace.
- [alpacon workspace authentication](https://docs.alpacax.com/reference/cli/workspace/authentication/): Retrieve workspace authentication settings. Display the current MFA requirements, session timeout, and allowed authentication methods for the workspace.
- [alpacon workspace ls](https://docs.alpacax.com/reference/cli/workspace/ls/): List all workspaces available to your account. Displays workspace names, regions, and connection status. Requires Auth0 authentication.
- [alpacon workspace mfa-methods](https://docs.alpacax.com/reference/cli/workspace/mfa-methods/): Retrieve the MFA methods allowed for the workspace. The same list decides whether a passkey sign-in counts as MFA, so you can check both with one command.
- [alpacon workspace preferences update](https://docs.alpacax.com/reference/cli/workspace/preferences-update/): Update workspace preferences via an interactive editor. Configure language, timezone, and other workspace-level settings by editing the current configuration.
- [alpacon workspace preferences](https://docs.alpacax.com/reference/cli/workspace/preferences/): Retrieve workspace preferences. Display the current language, timezone, and other workspace-level configuration settings.
- [alpacon workspace switch](https://docs.alpacax.com/reference/cli/workspace/switch/): Switch to a different workspace without re-authenticating. Works across regions and uses your existing login token for seamless workspace transitions.
- [alpacon workspace usage](https://docs.alpacax.com/reference/cli/workspace/usage/): Retrieve workspace usage and billing estimate. Display the current billing period usage and cost estimate for the workspace.
- [Error messages](https://docs.alpacax.com/reference/error-messages/): Find Alpacon error messages by code or text. Compare English and Korean text, then follow troubleshooting guides to resolve common request or access problems.
- [FAQ](https://docs.alpacax.com/reference/faq/): Frequently asked questions about Alpacon. Find answers about installation, security, operations, troubleshooting, and migration from SSH. Complete guide for common issues.
- [Glossary](https://docs.alpacax.com/reference/glossary/): Comprehensive glossary of Alpacon terms and concepts. Learn definitions for IAM, zero trust, authentication, access control, and security terminology.
- [MCP reference](https://docs.alpacax.com/reference/mcp/): Reference for the Alpacon MCP server, which extends Alpacon's zero-trust infrastructure access to AI assistants like Claude Desktop, Claude Code, and Cursor.
- [Getting started with MCP](https://docs.alpacax.com/reference/mcp/getting-started/): Install and configure the Alpacon MCP server, connect it to Claude Desktop, Claude Code, Cursor, or VS Code, and run your first natural language commands.
- [MCP prompts](https://docs.alpacax.com/reference/mcp/prompts/): Reference for Alpacon's four MCP prompts, workflow guides that teach an agent to scope Work Sessions, execute guarded actions, handle incidents, and audit activity.
- [MCP resources](https://docs.alpacax.com/reference/mcp/resources/): Reference for Alpacon's read-only MCP resources, exposed as alpacon:// URIs. Browse every resource by domain, with its URI pattern and what it returns.
- [MCP tools](https://docs.alpacax.com/reference/mcp/tools/): This page gives an overview of the Alpacon MCP tools. Learn the parameters every tool shares, the four access levels, and where to find each tool category.
- [Audit tools](https://docs.alpacax.com/reference/mcp/tools/audit/): MCP tools for reviewing activity logs, server command history, WebFTP transfer history, and AI-driven session security analyses across an Alpacon workspace.
- [Certificate tools](https://docs.alpacax.com/reference/mcp/tools/certificates/): MCP tools for managing Alpacon's certificate authorities, signing requests, issued certificates, and revocation requests—covering the full internal PKI lifecycle.
- [Events & webhooks tools](https://docs.alpacax.com/reference/mcp/tools/events/): MCP tool reference for Alpacon events, subscriptions, and webhooks. List and search server events, and manage notification subscriptions and webhook endpoints.
- [Command execution tools](https://docs.alpacax.com/reference/mcp/tools/execution/): MCP tools for running shell commands and reviewed scripts on servers, and reviewing history. Requires ACL permission; OAuth/browser callers also need a Work Session.
- [File transfer tools](https://docs.alpacax.com/reference/mcp/tools/files/): MCP tools for transferring files and folders between your machine and servers over secure WebFTP sessions. Covers single and bulk uploads, downloads, transfer history, and status polling.
- [IAM & API token tools](https://docs.alpacax.com/reference/mcp/tools/iam/): MCP tools for managing workspace users, groups, memberships, and machine applications, plus API tokens for programmatic access, rotation, and revocation.
- [Monitoring & alerts tools](https://docs.alpacax.com/reference/mcp/tools/monitoring/): Reference for the Alpacon MCP monitoring and alert tools. Covers CPU, memory, disk, and network metrics, alert rule management, and per-server rule overrides.
- [Access control & approvals tools](https://docs.alpacax.com/reference/mcp/tools/security/): MCP tools for command, server, and file ACLs, plus approval requests and sudo policies. Approving a request is always a human decision, made outside MCP.
- [Server management tools](https://docs.alpacax.com/reference/mcp/tools/servers/): These Alpacon MCP tools manage the servers themselves. Use them to find and update servers, keep notes, restart or upgrade the agent, and enroll new hosts.
- [System information & packages tools](https://docs.alpacax.com/reference/mcp/tools/system/): Reference for the Alpacon MCP tools that read server hardware, OS, user, group, network, and disk details, and that install or remove OS-level and Python packages.
- [Work Session tools](https://docs.alpacax.com/reference/mcp/tools/work-sessions/): MCP tools for creating, inspecting, updating, extending, and closing Work Sessions, the approval-gated primitive scoping infrastructure-mutating MCP actions.
- [Workspace management tools](https://docs.alpacax.com/reference/mcp/tools/workspace-settings/): MCP tools for workspace-wide settings—access control policy, security and MFA, and preferences like timezone, billing email, and allowed domains.
- [Release notes](https://docs.alpacax.com/reference/release-notes/): Alpacon release notes grouped by ship month, newest first. Track new features, improvements, and notable fixes across the web console, CLI, and agent.
- [Scopes](https://docs.alpacax.com/reference/scopes/): Complete Alpacon scope catalog. Every resource and action a role or a token can hold, what each one permits, and how scopes, wildcards, and ACLs decide what a credential can reach.
- [Agent issues](https://docs.alpacax.com/reference/troubleshooting/agent-issues/): Troubleshoot Alpamon agent issues. Resolve agent installation failures, upgrade problems, and service status issues for smooth server operations.
- [Common issues](https://docs.alpacax.com/reference/troubleshooting/common-issues/): Common issues and solutions for Alpacon. Find answers to frequently asked questions and troubleshoot general problems when using Alpacon services.
- [Connection issues](https://docs.alpacax.com/reference/troubleshooting/connection-issues/): Troubleshoot server connection issues in Alpacon. Resolve disconnected server status, Websh session creation errors, and network connectivity problems.
- [PAM and sudo issues](https://docs.alpacax.com/reference/troubleshooting/pam-issues/): Troubleshoot Alpacon PAM and sudo problems—the sudo-rs 'terminal required' error, a missing sudoers rule, denied sudo commands, and PAM module version checks.

## Use

- [Using Alpacon](https://docs.alpacax.com/use/): Complete guides for using Alpacon's features. Learn how to manage workspaces, servers, access control, and monitor your infrastructure.
- [Approvals](https://docs.alpacax.com/use/approvals/): Approvals is a governance queue in Alpacon where Superusers review and approve or reject sensitive requests such as work sessions, service tokens, and identity changes. Each request shows a risk score, and work sessions include an AI pre-review so reviewers can decide quickly and safely.
- [Request types](https://docs.alpacax.com/use/approvals/request-types/): The kinds of requests that go through Alpacon Approvals—work sessions, service tokens, and identity changes—and what an approver sees and can adjust for each.
- [Reviewing requests](https://docs.alpacax.com/use/approvals/reviewing/): Review requests in Alpacon Approvals using AI pre-review and risk scoring. Learn how to adjust, approve, or reject requests, handle urgent sessions, and act in bulk.
- [Audit overview](https://docs.alpacax.com/use/audit/): Review what happened across your workspace. Track sessions, sudo grants, commands, file transfers, and approval decisions from one place to meet compliance and investigate incidents.
- [Events overview](https://docs.alpacax.com/use/audit/events/): Audit individual actions inside work sessions — websh terminals, sudo grants, commands, and file transfers. Each event ties back to a session, a user, and a server.
- [Commands](https://docs.alpacax.com/use/audit/events/commands/): Review every command sent to your servers through Alpacon. Track who issued each command, the result, and the status for operations, debugging, and compliance.
- [File transfers](https://docs.alpacax.com/use/audit/events/file-transfers/): Audit file uploads and downloads performed through WebFTP. Track which files moved, who moved them, and where.
- [Sudo](https://docs.alpacax.com/use/audit/events/sudo/): Review every sudo authorization in your workspace. See who was allowed to run which privileged command on which server, and how that authorization was granted.
- [Websh](https://docs.alpacax.com/use/audit/events/websh/): Review every terminal session opened against your servers. See who connected, from where, how long they stayed, and what they ran.
- [Governance overview](https://docs.alpacax.com/use/audit/governance/): Audit trail for approval decisions, workspace-level activity, and logins that bypassed Alpacon. Review who decided what, when, and why, and who opens each page.
- [Activity log](https://docs.alpacax.com/use/audit/governance/activity-log/): Workspace-wide activity at a glance. Track sign-ins, permission changes, settings updates, and other workspace-level events with timeline charts and detailed logs.
- [Approvals](https://docs.alpacax.com/use/audit/governance/approvals/): Review past approval decisions across your workspace. See what was requested, who reviewed it, the outcome, and the justification on record.
- [External access](https://docs.alpacax.com/use/audit/governance/external-access/): Review logins that reach your servers without Alpacon. See how each direct login is classified, who is notified, which roles review it, and what plans include.
- [Direct-login coverage](https://docs.alpacax.com/use/audit/governance/external-access/coverage/): Check whether each server can report direct logins. Read its coverage state, fix the reason it isn't covered, and see what detection does and doesn't capture.
- [Summary and evidence](https://docs.alpacax.com/use/audit/governance/external-access/evidence/): Summarize a period of direct logins for an audit: counts by class, findings, standing-entry reviews and per-server coverage, then export the evidence as a ZIP.
- [Review direct logins](https://docs.alpacax.com/use/audit/governance/external-access/review/): Work through External access findings: read a finding, collect claims, record a disposition alone or in a batch, and allow expected access as standing entries.
- [Sessions](https://docs.alpacax.com/use/audit/sessions/): Review every work session in your workspace. See who requested each session, who approved it, what scopes it covered, how long it ran, and how it ended.
- [Cloud overview](https://docs.alpacax.com/use/cloud/): Connect AWS accounts to Alpacon to auto-discover EC2 instances and install the agent with one click. Manage cloud-hosted servers alongside on-premise servers in one place.
- [Manage cloud accounts](https://docs.alpacax.com/use/cloud/accounts/): Manage connected AWS accounts in Alpacon. Review account status, adjust sync interval and agent provisioning, re-verify credentials, and disconnect accounts.
- [Connect an AWS account](https://docs.alpacax.com/use/cloud/connect-aws/): Connect an AWS account to Alpacon with a guided CloudFormation setup. Learn the connection steps, the permissions Alpacon receives, and how to verify the connection.
- [Install the agent](https://docs.alpacax.com/use/cloud/install-agent/): Onboard EC2 instances in Alpacon by installing the Alpamon agent with one click via AWS SSM, or follow the manual SSH guide. Learn the install steps and how to resolve blockers.
- [Instance inventory](https://docs.alpacax.com/use/cloud/instances/): Browse EC2 instances discovered from connected AWS accounts in Alpacon. Learn how auto-sync works, how to search and filter instances, and what each column means.
- [Deployment overview](https://docs.alpacax.com/use/deployment/): Automate deployments and run commands across multiple servers. Learn about API access tokens, server registration tokens, and CLI-based multi-server command execution.
- [Tokens overview](https://docs.alpacax.com/use/deployment/tokens/): Manage tokens for API automation and server registration. Compare API access tokens and server registration tokens to choose the right type for your needs.
- [API access token](https://docs.alpacax.com/use/deployment/tokens/api-access/): Create and manage API access tokens with scoped permissions. Configure resource-level access, ACL rules for commands, files, and servers, and expiration for secure CI/CD integration.
- [Command patterns and sudo](https://docs.alpacax.com/use/deployment/tokens/command-patterns/): Write allowed-command rules that actually match. Learn how token elevation and AI-verdict rejections are decided for API access and service tokens.
- [Server registration token](https://docs.alpacax.com/use/deployment/tokens/server-registration/): Use server registration tokens for automated server onboarding in Alpacon. Configure allowed groups and expiration, and create or select tokens within the registration flow.
- [Code editor overview](https://docs.alpacax.com/use/editor/): Alpacon browser-based code editor overview. Edit files on remote servers directly from your browser without SSH or IDE setup, protected by MFA for privileged access.
- [Connect to editor](https://docs.alpacax.com/use/editor/connect/): Connect to Alpacon's browser-based code editor. Learn how to access the editor from multiple locations with account selection and MFA authentication.
- [Editor interface](https://docs.alpacax.com/use/editor/interface/): Learn about the Alpacon code editor interface. Understand the VS Code-like editing environment, file explorer, clipboard support, and dark mode features.
- [Editor sessions](https://docs.alpacax.com/use/editor/sessions/): Understand how Alpacon editor sessions work. Learn about close confirmation, saving your work, handling connection errors, and practical tips to prevent data loss.
- [Access control overview](https://docs.alpacax.com/use/iam/): Identity and Access Management (IAM) overview. Centrally manage workspace access control through role-based permissions, user management, and groups.
- [Applications](https://docs.alpacax.com/use/iam/applications/): Applications are non-human identities for CI/CD, monitoring, automation, and AI agents in Alpacon. Create applications and issue service tokens with scoped, audited access.
- [Provisioning](https://docs.alpacax.com/use/iam/applications/provisioning/): Configure how an application's server account is created in Alpacon. Set the username, shell, home, and UID, and choose Disabled, Lazy, or Automatic provisioning.
- [Service tokens](https://docs.alpacax.com/use/iam/applications/service-tokens/): Issue service tokens for an application in Alpacon. Set scopes, expiry, IP and rate limits, time restrictions, and use break-glass emergency access—all risk-scored and audited.
- [Groups](https://docs.alpacax.com/use/iam/groups/): Groups bundle users who need the same server access in Alpacon. Create groups, assign members and roles, set server permissions, and review group activity.
- [Assign users to groups](https://docs.alpacax.com/use/iam/groups/assign-users/): Assign users to groups in Alpacon for access control. Learn how to add and remove members, and understand Owner, Manager, and Member group roles.
- [Create groups](https://docs.alpacax.com/use/iam/groups/create/): Create user groups in Alpacon for organized access management. Learn group creation steps, naming rules, and how to structure teams and projects.
- [View and edit groups](https://docs.alpacax.com/use/iam/groups/manage/): View, search, and edit user groups in Alpacon. Manage group details, review member and server assignments, track activity, and delete groups.
- [Set group permissions](https://docs.alpacax.com/use/iam/groups/set-permissions/): Configure group permissions in Alpacon. Assign servers to groups, manage Websh, WebFTP, and command execution access, and understand permission inheritance.
- [Set permissions](https://docs.alpacax.com/use/iam/permissions/): Configure server access permissions in Alpacon. Learn about user roles, group-based access control, feature permissions, and security best practices.
- [Users](https://docs.alpacax.com/use/iam/users/): Users are the people in your Alpacon workspace. Invite team members, change roles, set the username they use on servers, and remove accounts safely.
- [Invite team members](https://docs.alpacax.com/use/iam/users/add/): Invite team members to your Alpacon workspace. Learn about email invitations, domain-based auto-join, invitation management, and permission settings.
- [View and edit users](https://docs.alpacax.com/use/iam/users/manage/): View and edit workspace users in Alpacon. Search and filter user lists, change roles, manage profiles, and reset passwords for your team.
- [Remove users](https://docs.alpacax.com/use/iam/users/remove/): Safely remove users from your Alpacon workspace. Learn about normal and purge deletion types, pre-removal checklist, and data impact considerations.
- [Resolve username conflicts](https://docs.alpacax.com/use/iam/users/resolve-conflicts/): Resolve UID conflicts between existing server users and Alpacon IAM users. Identify conflicts, choose resolution methods, and prevent future issues.
- [Username management](https://docs.alpacax.com/use/iam/users/username/): Learn about username management in Alpacon. Understand how UNIX usernames are set, the approval process, and their role in server access features.
- [Private SSL](https://docs.alpacax.com/use/private-ssl/): Manage internal SSL/TLS certificates with Alpacon's Private SSL. Create certificate authorities, issue certificates, and handle revocation.
- [Authorities](https://docs.alpacax.com/use/private-ssl/authorities/): Create and manage certificate authorities in Alpacon Private SSL. Set up root CAs, configure key algorithms, and download root certificates and CRLs.
- [Certificates](https://docs.alpacax.com/use/private-ssl/certificates/): View and manage issued SSL/TLS certificates in Alpacon Private SSL. Monitor certificate expiration, download certificates, and track certificate status.
- [Requests](https://docs.alpacax.com/use/private-ssl/requests/): Manage certificate sign requests and revoke requests in Alpacon Private SSL. Create, approve, or deny certificate operations with administrator oversight.
- [Servers overview](https://docs.alpacax.com/use/servers/): Manage all your servers from one place. Connect cloud and on-premise servers, organize them into groups, and monitor their health - all from your browser.
- [Account selection](https://docs.alpacax.com/use/servers/account-selection/): Understand account selection when connecting to servers. Learn the difference between personal and system accounts, sudo privilege requirements, and MFA authentication.
- [Connect to servers](https://docs.alpacax.com/use/servers/connect/): Connect to registered servers in Alpacon by requesting a work session. Learn how the Connect button starts a session, what's required, and how to launch the terminal, editor, and file transfer.
- [Control server access](https://docs.alpacax.com/use/servers/groups/): Control server access by assigning user groups in Alpacon. Learn group-based access management, filtering, and best practices for team organization.
- [Manage servers](https://docs.alpacax.com/use/servers/manage/): Learn how to manage registered servers in Alpacon. You can edit server details, restart or upgrade the agent, review its upgrade history, and refresh system information.
- [Monitor server status](https://docs.alpacax.com/use/servers/monitor/): Alpacon monitors server performance in real time. Learn how to track CPU, memory, and disk metrics, set up alert rules and offline alerts, and mute alerts.
- [Register a server](https://docs.alpacax.com/use/servers/register/): Step-by-step guide to registering servers with Alpacon. Install the Alpamon agent, connect cloud or on-premise servers, and verify the connection.
- [Remove a server](https://docs.alpacax.com/use/servers/remove/): Safely remove servers from Alpacon. Uninstall the Alpamon agent with alpamon unregister or manually, then delete the server from your workspace if needed.
- [Overview](https://docs.alpacax.com/use/settings/): User settings overview. Configure account information, security options, Websh terminal preferences, and language and theme in Alpacon.
- [Account settings](https://docs.alpacax.com/use/settings/account/): Account settings guide. Manage profile information, view account activity records, and manage sign-in history.
- [Language & theme](https://docs.alpacax.com/use/settings/language-theme/): Language and theme settings guide. Configure your preferred language and theme for a consistent UI experience across Alpacon.
- [Security settings](https://docs.alpacax.com/use/settings/security/): Security settings guide. Change your password, and register and manage MFA authentication methods.
- [Websh settings](https://docs.alpacax.com/use/settings/websh/): Configure Websh terminal settings, including session timeouts and sharing, plus terminal appearance and input—theme presets, fonts, clipboard behavior, and more.
- [File management overview](https://docs.alpacax.com/use/webftp/): WebFTP secure file transfer overview. Transfer files between local system and servers through browser without FTP clients, with drag-and-drop interface and audit logging.
- [Download files](https://docs.alpacax.com/use/webftp/download/): Download files and folders from servers to your computer using Alpacon WebFTP. Download single files, multiple items, or entire folders as a compressed archive.
- [Manage files and folders](https://docs.alpacax.com/use/webftp/manage/): Manage files and folders in Alpacon WebFTP. Use the kebab menu to download, copy, move, rename, and delete, browse with breadcrumbs, and toggle hidden files.
- [Set file permissions](https://docs.alpacax.com/use/webftp/permissions/): Set Linux file permissions and ownership in Alpacon WebFTP. Use the chmod and chown tabs with a command preview, and apply changes recursively.
- [Upload files](https://docs.alpacax.com/use/webftp/upload/): Upload files and folders to servers with Alpacon WebFTP. Use drag and drop or the New menu, and resolve duplicate or type conflicts during upload.
- [Terminal access overview](https://docs.alpacax.com/use/websh/): Websh browser-based terminal overview. Access servers securely through web browser without SSH clients, with session persistence and full audit logging.
- [Run commands](https://docs.alpacax.com/use/websh/commands/): Execute Linux commands in Alpacon's Websh terminal. Use standard commands with sudo access, and all executed commands are automatically logged for auditing.
- [Connect to terminal](https://docs.alpacax.com/use/websh/connect/): Open a browser-based Websh terminal in Alpacon through a work session. Learn how to request access, launch the terminal, and what account you connect as.
- [Websh session analysis](https://docs.alpacax.com/use/websh/session-analysis/): Review an AI analysis of a Websh terminal session in Alpacon—risk level, summary, detected threats, and recommended actions. An experimental security review feature.
- [Manage sessions](https://docs.alpacax.com/use/websh/sessions/): Manage and share Websh terminal sessions in Alpacon. Learn to reconnect, share by email or a one-time link, set permissions and expiry, and manage participants.
- [Keyboard shortcuts](https://docs.alpacax.com/use/websh/shortcuts/): Quick reference for keyboard shortcuts in Alpacon's Websh terminal. Copying and pasting, zooming, opening links, and shell shortcuts for text editing and history navigation.
- [sudo with MFA](https://docs.alpacax.com/use/websh/sudo-with-mfa/): Use sudo with MFA in Websh to run sudo commands with MFA-based verification. Learn requirements, how the in-terminal MFA prompt works, and how sudo policies and grants authorize access.
- [Work sessions overview](https://docs.alpacax.com/use/work-sessions/): Work sessions give time-bound, approved access to servers in Alpacon. Learn how the request, approval, and launch model works for terminal, file, editor, and command access.
- [After a session](https://docs.alpacax.com/use/work-sessions/after-session/): Review a work session after it ends in Alpacon. Replay the activity timeline and read the AI risk analysis—risk level, summary, threats, and recommended actions.
- [Request a session](https://docs.alpacax.com/use/work-sessions/create/): Request a work session in Alpacon to access servers. Learn how to select target servers, choose features, write a purpose, and set the session duration before submitting.
- [Use a session](https://docs.alpacax.com/use/work-sessions/detail/): Use an approved work session in Alpacon. Learn to launch features in the browser, attach from the CLI, track session status, and extend, terminate, or cancel a session.
- [Session features](https://docs.alpacax.com/use/work-sessions/features/): Session features define what you can do in an Alpacon work session. Learn the six features—web terminal, file transfer, command execution, port forwarding, editor, and sudo.
- [Live activity](https://docs.alpacax.com/use/work-sessions/live-activity/): Watch in-progress work sessions in real time in Alpacon. Follow live events across terminal, commands, sudo, and file transfers, and complete or revoke a session.
- [Workspace overview](https://docs.alpacax.com/use/workspace/): Learn about workspaces - your team's hub for managing servers and collaborating. Understand how to organize projects with isolated environments.
- [Get a workspace](https://docs.alpacax.com/use/workspace/create/): How to get an Alpacon workspace for your team. Book a demo and we set it up with you, or join an existing workspace through an invitation from your admin.
- [Delete a workspace](https://docs.alpacax.com/use/workspace/delete/): Guide to safely deleting a workspace in Alpacon. Understand what happens to connected servers, review billing implications, and learn about alternatives.
- [Maintenance windows](https://docs.alpacax.com/use/workspace/maintenance-windows/): Learn what the maintenance banner means and which server alerts pause during scheduled maintenance or a connectivity incident. See when alerts resume and when you're notified by email.
- [Manage workspace settings](https://docs.alpacax.com/use/workspace/manage-settings/): Configure workspace settings including preferences, billing, access, security, and integrations. Manage authentication, server access policies, and webhooks.
- [Notifications & webhooks](https://docs.alpacax.com/use/workspace/notifications/): Learn what triggers a notification in Alpacon and how it reaches your team. Choose your email, browser notification, and Slack DM channels, and set up webhooks.
- [Plans & billing](https://docs.alpacax.com/use/workspace/plans-billing/): Manage your Alpacon plan from the console. Learn what happens at a plan limit, how upgrading works, and what happens if a renewal charge fails or you cancel.
- [Switch workspaces](https://docs.alpacax.com/use/workspace/switch/): Learn how to switch between multiple workspaces in Alpacon. Set a default workspace, use domain-based access, and navigate between environments.