Scripts Marketplace.
Signed scripts. Approval workflow. Scheduled. Audited with output.
- →Scripts signed (cosign). Signatures verified on the endpoint before execution.
- →Sensitive scripts require a second approver.
- →Full output captured into audit log with retention.
Core capabilities.
Signed scripts
Cosign signatures on every script. Verified before execution. Tampered scripts refused.
Typed parameters
No arbitrary strings into sensitive fields. Parameters validated server-side before dispatch.
Approval workflow
Second approver required for admin-level scripts. Chain-of-approval logged.
Scheduled runs
Cron-style schedule per-client. Next-run preview.
Output capture
stdout + stderr streamed back in real-time. Stored with retention in audit.
Rate limits
Per-script concurrency + per-tenant global budget.
Script execution log
Every run: host, operator, params, output, exit code, duration.
Catalog & authoring
Curated catalog. Submit your own scripts for signing via the UI.
RMM agent executes (PowerShell / bash / zsh). Output streamed over WebSocket. Stored in audit.
FAQ.
Can I write my own scripts?+
Yes. Submit via the UI for signing. Admin approval creates a signed catalog entry.
What about dangerous commands?+
Parameter validation + approval workflow + typed params catch most. Script author still responsible for semantics.