---
name: "ssh-agent-filter"
section: "1"
platform: "linux"
package: "ssh-agent-filter"
version: "0.5.2-1+b6"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/ssh-agent-filter"
---

# ssh-agent-filter(1)

filtering proxy for ssh-agent meant to be forwarded to untrusted servers

## NAME

ssh-agent-filter - filtering proxy for ssh-agent meant to be forwarded to untrusted servers

## SYNOPSIS

**ssh-agent-filter** \[ *OPTIONS* \]

## DESCRIPTION

ssh-agent-filter provides the unix domain socket interface of an ssh-agent. By default it forks and outputs shell code setting SSH\_AUTH\_SOCK and SSH\_AGENT\_PID, just like ssh-agent does.

It filters each request according to its command line options. No crypto operations are done by ssh-agent-filter; they are delegated to the upstream ssh-agent.

ssh-agent-filter is not meant to be used directly, but through afssh.

## OPTIONS

- **-A** \[ **--all-confirmed** \]

  allow all other keys with confirmation

- **-c** \[ **--comment** \] arg

  key specified by comment

- **-C** \[ **--comment-confirmed** \] arg

  key specified by comment, with confirmation

- **-d** \[ **--debug** \]

  show some debug info, don't fork

- **-f** \[ **--fingerprint** \] arg

  key specified by pubkey's hex-encoded md5 fingerprint

- **-F** \[ **--fingerprint-confirmed** \] arg key specified by pubkey's hex-encoded md5

  fingerprint, with confirmation

- **-h** \[ **--help** \]

  print this help message

- **-k** \[ **--key** \] arg

  key specified by base64-encoded pubkey

- **-K** \[ **--key-confirmed** \] arg

  key specified by base64-encoded pubkey, with confirmation

- **-n** \[ **--name** \] arg

  name for this instance of ssh-agent-filter, for confirmation puposes

- **-V** \[ **--version** \]

  print version information

## ENVIRONMENT

- SSH\_AUTH\_SOCK

  socket of upstream ssh-agent

- SSH\_ASKPASS

  command to run for confirmation questions

## AUTHOR

Written by Timo Weingärtner.

## REPORTING BUGS

Report bugs to the Debian BTS at https://bugs.debian.org/ or by mail to timo@tiwe.de.

## SEE ALSO

[afssh(1)](/afssh/1.md), [ssh(1)](/ssh/1.md), [ssh-agent(1)](/ssh-agent/1.md)