vrr/spawn
2
0
Fork 0
mirror of https://github.com/OpenRouterTeam/spawn.git synced 2026-05-09 19:49:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10
spawn/hostkey
History
A 3c3c697ea5
fix: json_escape SSH key names and fix GCP metadata injection (#958) 
SSH key registration in 11 cloud providers used unescaped key_name
directly in JSON request bodies. If the hostname (used to generate
key names) contained JSON-special characters like double-quotes, it
could break out of the JSON string and inject arbitrary JSON fields.

Fix: use json_escape for key_name in all providers, matching the
pattern already used by Scaleway.

Also fix GCP create_server which embedded the startup script inline
in --metadata with comma delimiters. Commas in the script could break
metadata parsing or inject additional metadata keys. Fix: use
--metadata-from-file for the startup script.

Affected providers: Hetzner, DigitalOcean, Vultr, BinaryLane,
Hostinger, Contabo, Cherry, HOSTKEY, Civo, Linode, Genesis Cloud, GCP.

Agent: security-auditor

Co-authored-by: A <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-02-13 09:03:35 -08:00
..
lib fix: json_escape SSH key names and fix GCP metadata injection (#958) 2026-02-13 09:03:35 -08:00
claude.sh feat: add HOSTKEY cloud provider (#909) 2026-02-13 05:08:26 -08:00
openclaw.sh feat: add HOSTKEY cloud provider (#909) 2026-02-13 05:08:26 -08:00
README.md feat: add HOSTKEY cloud provider (#909) 2026-02-13 05:08:26 -08:00

README.md

HOSTKEY

HOSTKEY VPS hosting via REST API. HOSTKEY

Agents

Claude Code

bash <(curl -fsSL https://openrouter.ai/labs/spawn/hostkey/claude.sh)

OpenClaw

bash <(curl -fsSL https://openrouter.ai/labs/spawn/hostkey/openclaw.sh)

Authentication

To use HOSTKEY spawn scripts, you need a HOSTKEY API key:

  1. Log in to HOSTKEY
  2. Navigate to API settings in your account
  3. Generate a new API key
  4. Set the HOSTKEY_API_KEY environment variable

Non-Interactive Mode

HOSTKEY_SERVER_NAME=dev-mk1 \
HOSTKEY_API_KEY=your-api-key \
OPENROUTER_API_KEY=sk-or-v1-xxxxx \
  bash <(curl -fsSL https://openrouter.ai/labs/spawn/hostkey/claude.sh)

Environment Variables

  • HOSTKEY_API_KEY - Your HOSTKEY API key (required)
  • HOSTKEY_SERVER_NAME - Server name (prompted if not set)
  • HOSTKEY_LOCATION - Data center location: nl, de, fi, is, tr, us (default: nl)
  • HOSTKEY_INSTANCE_PRESET - Instance preset ID (default: 1)
  • OPENROUTER_API_KEY - Your OpenRouter API key (prompted via OAuth if not set)

Pricing

HOSTKEY offers affordable VPS hosting starting from €1/month with hourly billing available. Check HOSTKEY pricing for current rates.

Locations

  • nl - Amsterdam, Netherlands
  • de - Frankfurt, Germany
  • fi - Helsinki, Finland
  • is - Reykjavik, Iceland
  • tr - Istanbul, Turkey
  • us - New York, United States