agentLink

Secure Remote Server Gateway, PuTTY Alternative & AI Agent Control Center for PHP, WordPress & Shared Hosting.

agentLink is an open-source platform designed to replace legacy terminal tools like PuTTY, FileZilla, and phpMyAdmin with a modern, secure control center. It allows developers and AI coding agents (Antigravity IDE, Claude Code, Cursor) to manage live web applications safely over HTTP/HTTPS without requiring SSH keys or root access.

For Non-Technical Users

You don't need to know coding to use agentLink. Here's how:

WordPress Users (Easiest)

1. Go to the Releases page and download agentlink.zip
2. Log into your WordPress admin dashboard
3. Go to Plugins > Add New > Upload Plugin
4. Choose the downloaded zip file and click Install Now
5. Click Activate
6. Find AgentLink AI in your admin sidebar, your pairing key is displayed there
7. Paste that key into your AI coding tool (Claude Code, Cursor, etc.) or the AgentLink Desktop UI

Anyone with a Website

1. Download agentLink.php from the Releases page
2. Upload it to your website's root folder using cPanel File Manager or FTP
3. Visit https://yourdomain.com/agentLink.php in your browser
4. Copy the pairing key shown on screen
5. Install the AgentLink Python tool on your computer: pip install agentlink
6. Run agentlink --ui to launch the desktop interface
7. Paste your server URL and pairing key, you're connected

Key Features

• Zero SSH / Root Setup Required: Operates via physical PHP gateway execution (agentLink.php). Works across all shared hosting, cPanel, WordPress, and dedicated servers.
• PuTTY Shell & Terminal Engine: Interactive web-SSH shell for running bash, php artisan, wp-cli, git, and custom scripts. Configurable allowlist for permitted commands.
• Database & SQL Query Console: Execute raw SQL queries (SELECT, SHOW, EXPLAIN) without opening phpMyAdmin. Write operations (INSERT/UPDATE/DELETE/DROP) are blocked by default and require explicit config opt-in.
• Mandatory Pre-Edit Auto-Backup: Automatically generates a safety backup before any file write or deletion occurs.
• Python CLI & MCP Bridge: Single-file Python script (agentLink.py) providing terminal access and standard JSON-RPC 2.0 MCP protocol integration for AI agents.
• Glassmorphic Desktop UI: Sleek Vercel/Linear dark theme (agentLink-ui/index.html) with tabbed navigation and hardware-accelerated rendering.

Security Features (v0.1.0)

• Header-Only Authentication: Secret key is accepted exclusively via the X-AgentLink-Key HTTP header. No key in URL query strings or $_REQUEST, prevents log leakage, CSRF, and referrer exposure.
• Path Traversal Protection: All file operations are constrained to the site base directory via realpath() canonicalization. Requests resolving outside the base directory are rejected.
• Rate Limiting: Per-IP file-based rate limiting (30 requests/60 seconds by default). Configurable via .agentlink_config.json.
• HMAC-Signed Download Tokens: Backup download URLs use short-lived (5-minute) HMAC-SHA256 tokens instead of exposing the secret key.
• Configurable Feature Toggles: Disable exec, SQL writes, or file deletion via server-side config. Restrict exec to an allowlist of commands.
• Audit Logging: All API actions, auth failures, and errors are logged to storage/agentlink/audit.log with sensitive parameters redacted.
• Sanitized Error Messages: Production mode returns generic errors. Set debug: true in config for detailed messages during development.
• WordPress Context Guard: The engine detects WordPress context and prevents double-execution when loaded as a plugin.
• Strong Key Generation: 128-bit secret keys generated with random_bytes(16), stored with 0600 file permissions.

Repository Structure

agentLink/
├── agentLink.php         # Physical PHP server gateway engine (v0.1.0)
├── agentLink-wp.php      # WordPress plugin wrapper
├── agentLink.py          # Python CLI, Webview launcher & MCP JSON-RPC 2.0 server
├── agentLink-ui/         # Glassmorphic HTML5 desktop UI
│   └── index.html
├── docs/                 # GitHub Pages landing page
│   └── index.html
├── .github/workflows/    # CI/CD (auto-build WP plugin ZIP, deploy Pages)
├── setup.py              # Python pip package installer
├── readme.txt            # WordPress.org plugin readme
├── uninstall.php         # WordPress uninstall cleanup
├── LICENSE               # MIT License
└── README.md             # Project documentation

1. Quick Server Setup

Standard PHP / cPanel / Laravel

Copy agentLink.php to your web server root or public/ directory:

cp agentLink.php /home/user/public_html/agentLink.php

Visit https://yourdomain.com/agentLink.php in your browser to retrieve your generated Pairing Key.

WordPress Plugin

1. Download agentlink.zip from the Releases page.
2. Upload via WP Admin > Plugins > Add New > Upload Plugin.
3. Activate the plugin to view your pairing key in the WP Admin sidebar.

For developers building the zip locally: Compress agentLink-wp.php, agentLink.php, uninstall.php, and readme.txt into a zip named agentlink.zip. Or push a v* tag to trigger the GitHub Actions workflow that builds it automatically.

2. Server Configuration

On first run, the engine creates storage/agentlink/.agentlink_config.json:

{
  "enable_exec": true,
  "enable_sql_write": false,
  "enable_file_delete": true,
  "allowed_commands": [],
  "rate_limit_max": 30,
  "debug": false
}

For production: set enable_exec to false if you don't need shell access, and set debug to false.

3. Desktop App & CLI Usage

Option A: Launch Glassmorphic Desktop UI

Run agentLink.py or double-click agentLink-ui/index.html in any browser:

python agentLink.py --ui

Option B: Python CLI Commands

# Check remote server health & status
python agentLink.py --url https://yourdomain.com --key YOUR_KEY --status

# Run remote shell command (PuTTY alternative)
python agentLink.py --exec "php -v"

# Execute raw SQL query
python agentLink.py --sql "SELECT * FROM trip_packages LIMIT 5;"

# Generate site backup ZIP
python agentLink.py --backup

Option C: AI Agent MCP Server (JSON-RPC 2.0)

Add agentLink.py as an MCP stdio server in your IDE config (mcp.json):

{
  "mcpServers": {
    "agentLink": {
      "command": "python",
      "args": ["path/to/agentLink.py", "--mcp", "--url", "https://yourdomain.com", "--key", "YOUR_KEY"]
    }
  }
}

Available MCP tools:

• agentlink_status: Check server health and configuration
• agentlink_backup: Generate site ZIP backup
• agentlink_exec: Execute remote shell command
• agentlink_sql: Execute SQL query
• agentlink_read_file: Read remote file
• agentlink_write_file: Write remote file (auto-backup first)
• agentlink_list_dir: List directory contents
• agentlink_read_logs: Fetch server error logs
• agentlink_wp_action: WordPress post operations (create/list/delete)
• agentlink_clear_cache: Clear server caches

4. Security Hardening Guide

For production deployments:

1. Use HTTPS: Serve agentLink.php over HTTPS only to encrypt the secret key in transit.
2. Restrict exec: Set "enable_exec": false or define an "allowed_commands" allowlist.
3. Block SQL writes: Keep "enable_sql_write": false unless you explicitly need it.
4. Protect storage directory: Ensure storage/agentlink/ is not web-accessible (add .htaccess with Deny from all or place outside web root).
5. Rotate keys: Delete storage/agentlink/.agentlink_key to generate a new key. Update all clients.
6. Review audit logs: Check storage/agentlink/audit.log periodically for unauthorized access attempts.
7. Firewall: If possible, restrict access to agentLink.php by IP allowlisting at the web server level.

License

agentLink is open-source software licensed under the MIT License.