vrr/spawn
2
0
Fork 0
mirror of https://github.com/OpenRouterTeam/spawn.git synced 2026-05-07 09:10:55 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10
spawn/hostkey
History
A a79dd226ac
fix(security): prevent API key injection in koyeb/nanoclaw.sh and harden remote temp file permissions (#1049) 
koyeb/nanoclaw.sh embedded the API key directly in a run_server command
string using single quotes. If the key contained a single quote, it could
break out and enable command injection. Replaced with the safe mktemp +
upload_file pattern used by all other nanoclaw scripts.

Also added chmod 600 before mv on remote /tmp/nanoclaw_env in 8 nanoclaw
scripts to restrict permissions on the credential file during transfer.

Agent: security-auditor

Co-authored-by: A <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-02-13 23:37:25 -05:00
..
lib fix(ux): show post-session summary with server status and reconnect info (#1037) 2026-02-13 20:06:40 -05:00
aider.sh feat: Add HOSTKEY support for nanoclaw, aider, goose, cline, continue (#999) 2026-02-13 12:40:29 -08:00
claude.sh fix: add actionable guidance to agent installation failures across 126 scripts (#966) 2026-02-13 10:14:03 -08:00
cline.sh feat: Add HOSTKEY support for nanoclaw, aider, goose, cline, continue (#999) 2026-02-13 12:40:29 -08:00
continue.sh feat: Add HOSTKEY support for nanoclaw, aider, goose, cline, continue (#999) 2026-02-13 12:40:29 -08:00
goose.sh feat: Add HOSTKEY support for nanoclaw, aider, goose, cline, continue (#999) 2026-02-13 12:40:29 -08:00
nanoclaw.sh fix(security): prevent API key injection in koyeb/nanoclaw.sh and harden remote temp file permissions (#1049) 2026-02-13 23:37:25 -05:00
openclaw.sh feat: add HOSTKEY cloud provider (#909) 2026-02-13 05:08:26 -08:00
README.md feat: add HOSTKEY cloud provider (#909) 2026-02-13 05:08:26 -08:00

README.md

HOSTKEY

HOSTKEY VPS hosting via REST API. HOSTKEY

Agents

Claude Code

bash <(curl -fsSL https://openrouter.ai/labs/spawn/hostkey/claude.sh)

OpenClaw

bash <(curl -fsSL https://openrouter.ai/labs/spawn/hostkey/openclaw.sh)

Authentication

To use HOSTKEY spawn scripts, you need a HOSTKEY API key:

  1. Log in to HOSTKEY
  2. Navigate to API settings in your account
  3. Generate a new API key
  4. Set the HOSTKEY_API_KEY environment variable

Non-Interactive Mode

HOSTKEY_SERVER_NAME=dev-mk1 \
HOSTKEY_API_KEY=your-api-key \
OPENROUTER_API_KEY=sk-or-v1-xxxxx \
  bash <(curl -fsSL https://openrouter.ai/labs/spawn/hostkey/claude.sh)

Environment Variables

  • HOSTKEY_API_KEY - Your HOSTKEY API key (required)
  • HOSTKEY_SERVER_NAME - Server name (prompted if not set)
  • HOSTKEY_LOCATION - Data center location: nl, de, fi, is, tr, us (default: nl)
  • HOSTKEY_INSTANCE_PRESET - Instance preset ID (default: 1)
  • OPENROUTER_API_KEY - Your OpenRouter API key (prompted via OAuth if not set)

Pricing

HOSTKEY offers affordable VPS hosting starting from €1/month with hourly billing available. Check HOSTKEY pricing for current rates.

Locations

  • nl - Amsterdam, Netherlands
  • de - Frankfurt, Germany
  • fi - Helsinki, Finland
  • is - Reykjavik, Iceland
  • tr - Istanbul, Turkey
  • us - New York, United States