跪拜 Guibai
← Back to the summary

Chat-Driven Server Ops With Guardrails: Finch Agent's Remote Host Mini-App

Hello everyone, I am:

Let me share a safe and stable solution for using AI to operate servers.

This solution is Finch Agent tool + Remote Host mini-app. Finch Agent tool download address: https://finchwork.app/zh

As shown in the figure, I sent "Display basic information of the current host" in the chat box, and it displayed the basic configuration of the remote host.

We can switch hosts at any time.

After switching hosts, sending "Display basic information of the current host" again shows the configuration of the selected host.

We can restart services, diagnose problems, modify files, and so on. No more manually typing commands and searching for documentation.

Every operation record and command we perform will be logged in the corresponding host's operations.

The server is an important asset. What if AI goes wild? What about accidental operations?

For security and sensitive operations, we can define whitelist and blacklist commands, using glob syntax for matching.

At the same time, four confirmation strategies are provided. You can require confirmation for every command, or allow read operations to pass automatically and ask for others.

Also, to prevent bypass, the Remote Host mini-app has built-in mandatory safety rules, such as strictly forbidding deletion of the / root directory, as well as top-level directories like /var, /home, /etc. It also forbids writing to raw disks, forking, shutdown/reboot, etc.

For sensitive operations, you must log in to the host manually and do them yourself, to avoid AI providing commands and you casually confirming, leading to irreparable problems.

If you are interested, you can download the Finch Agent tool at https://finchwork.app/zh, find the Remote Host mini-app, install and enable it.

One thing worth mentioning: through this mini-app, your server IP, account, password, etc., do not need to be exposed in the AI chat window or session at all.

For example, giving the AI server accounts and passwords to connect and operate would be much worse than this method, which has no safety protections.

After enabling the Remote Host mini-app, open the sidebar, add a host, and finally select the host below the chat window to perform various operations on it.

Of course, no plan is perfect. The Remote Host mini-app was just released, and there are many issues that need feedback, improvement, and optimization.