Skip to main content
Updated May 10, 2026 The raff ssh-key command group manages SSH public keys registered on your account. Linux VMs accept these keys at create time via --ssh-keys. Every subcommand supports --output json for scripting. Alias: raff ssh-keys.

​
Subcommand index

SubcommandWhat it does
listList SSH keys
getShow details for one SSH key
createRegister a new SSH public key
updateRename a key
deleteDelete a key

​
list

raff ssh-key list [--output table|json]
List SSH keys for the account. Output columns: ID, NAME, TYPE, FINGERPRINT.

​
get

raff ssh-key get <key-id>
Show full key details including the full public key string.

​
create

raff ssh-key create --name <name> (--public-key "<key-string>" | --public-key-file <path>)
Register an SSH public key. Required: --name. One of --public-key or --public-key-file must be provided. 
# From a file (most common)
raff ssh-key create --name "alice@laptop" \
  --public-key-file ~/.ssh/id_ed25519.pub

# Inline
raff ssh-key create --name "ci-deploy" \
  --public-key "ssh-ed25519 AAAA... ci@deploy"

​
update

raff ssh-key update <key-id> --name <new-name>
Rename a key. The key material itself is immutable — to rotate, register a new key and delete the old one.

​
delete

raff ssh-key delete <key-id> [--force]
Delete a key. Pass --force to skip the confirmation prompt. Existing VMs that already received the key keep it — deleting from the registry removes future use only.

raff_ssh_key (Terraform)

Declarative SSH key management.

API key commands

Manage API keys.

VM commands

Pass keys at VM create with —ssh-keys.
Last modified on May 11, 2026