Connect to EVE

Authentication is owned by the VSIX. Do not put the EVE password in chat, Git, or MCP config.

Configure Connection

  1. Activity Bar → EVE IaC → Configure Connection.
  2. Enter the agent URL (https://<EVE_SERVER_IP>:8787), EVE username, and password.
  3. Compare origin, SHA-256 fingerprint, subject, and SAN with openssl on the EVE host.
  4. Click Trust only if they match the host you installed.
  5. Sidebar Connection should show Connected.

Never auto-trust. A changed certificate must not be trusted unless you approved the new fingerprint in that modal.

Trust stores that certificate in the IDE. Later agent connections accept the server only when the live leaf has the same SHA-256 fingerprint. The PEM is not installed as a CA, and the agent connection does not use the workstation trust store.

TLS Trust is the same modal. There is no separate MCP “trust” tool.

What the token is

After login the VSIX holds an opaque agent session Bearer token. It is not an EVE GUI cookie. Idle timeout is eight hours. The agent keeps the native EVE password only in memory.

Open Lab

Open Lab uses a one-time https://<agent>/browser/{token} URL inside the IDE Simple Browser. Native EVE cookies stay on that browser document. The AI model only sees /browser/<token> and never receives GUI cookies.

macOS + VS Code

The agent connection needs Trust in the modal. It does not need the OS trust store.

Open Lab is the EVE web UI inside Simple Browser. If that page shows a certificate error or a struck-through https://, import the EVE certificate into the macOS login keychain, then retry Open Lab. That keychain step is for the browser page, not for the agent connection.

Live config apply

The sidebar Live config apply switch is per lab. When it is on, wipe (and some live config apply prompts) may run without an extra prompt. It is not stop consent: classified requires_stop still needs the Stop confirmation and a matching plan identity. When it is off, expect a warning before reconciling a live lab — that runtime config may be lost on clean boot.

Next: Create a project or Import an existing lab.