Want to connect with Croc?
Join organizations building the agentic web. Get introductions, share updates, and shape the future of .agent.
Is this your company?
Claim this profile to update your info, add products, and connect with the community.
In the AI agent ecosystem, croc is a utility for data exfiltration and artifact movement. Agents operating in sandboxed or remote environments frequently generate logs, datasets, or media that must be retrieved by a human operator or transferred to another agent. Because croc requires only a simple code phrase and handles NAT traversal automatically, it is easier for an LLM to use via a terminal tool than configuring SSH tunnels or managing S3 credentials.
For developers building AgentOps platforms, croc provides a path for manual intervention. If an agent gets stuck or produces an unexpected large-scale output, a developer can prompt the agent to 'croc send' the relevant directory. This avoids the need for permanent ingress rules into the agent's execution environment, maintaining a smaller attack surface while still allowing for flexible data movement.
Moving a file between two machines should be simple, but the reality is often obstructed by NAT firewalls, SSH key management, and the lack of a shared file system. Croc is a command-line tool designed to bypass these obstacles without requiring the user to expose ports or configure complex permissions. Developed primarily by Zack Scholl in 2018, the tool has become a staple for developers and DevOps engineers who need to move data quickly between disparate environments.
The core of the tool's utility is its ability to facilitate a connection using a public or private relay. When a user initiates a transfer, the tool generates a code phrase. The recipient enters this phrase, and the relay facilitates the handshake. Crucially, the relay does not see the data; the transfer is end-to-end encrypted using the Password Authenticated Key Exchange (PAKE) protocol. Specifically, it uses the SPAKE2 algorithm to derive a shared key from the code phrase, ensuring that even if the relay is compromised, the file contents remain private.
Croc is frequently compared to Magic Wormhole, a similar Python-based tool. Its primary differentiator is its implementation in Go, which allows it to be distributed as a single static binary with no dependencies. This makes it significantly easier to install in restricted environments, such as minimal Docker containers or remote CI/CD runners, where a Python runtime may not be present. It also supports multi-file transfers and the ability to resume interrupted transfers, a common failure point for simpler ad-hoc methods.
However, the tool's history includes technical scrutiny. In 2021, security researchers identified a vulnerability (CVE-2021-31603) related to the SPAKE2 implementation that could, under specific conditions involving a rogue recipient, allow for plaintext recovery. The project addresses these risks through ongoing updates and by being transparent about its design. It remains a tool built for developer convenience and trust between known parties, rather than a protocol designed for anonymous high-stakes exfiltration. For many, the risk profile is acceptable given the alternative of uploading sensitive data to centralized, third-party web transfer services.
Beyond the default public relay, croc allows users to host their own relay servers. This is an important feature for organizations with strict data sovereignty requirements or those operating in air-gapped environments where external internet access is restricted. By running a private relay, teams can ensure that all data stays within their local network while still benefiting from the tool's hole-punching capabilities. It supports IPv6 by default but can fall back to IPv4, and it is optimized for speed, often outperforming legacy protocols like SCP on high-latency connections.
A CLI tool for end-to-end encrypted file transfers that works behind NATs and firewalls.
Easy way to get simple Fogo Sessions environment in local validator
General harness to run Clawdbot with container isolation
Research tools for collecting and analyzing data across perp dexs and cexs
Rust SDK for Ambient Ember
Typescript SDK for Ambient Ember Protocol
Pending vaults for Plume ERC4626 vaults
Croc is hiring
You've explored Croc.
Join organizations building the agentic web.