Connect to EVE

Authentication is owned by the VSIX. Do not put the EVE password in chat, Git, or MCP config.

Configure Connection

  1. Activity Bar → EVE IaC → Configure Connection.
  2. Enter the agent URL (https://<EVE_SERVER_IP>:8787), EVE username, and password.
  3. Compare origin, SHA-256 fingerprint, subject, and SAN with openssl on the EVE host.
  4. Click Trust only if they match the host you installed.
  5. Sidebar Connection should show Connected.

Never auto-trust. A changed certificate must not be trusted unless you approved the new fingerprint in that modal.

TLS Trust is the same modal. There is no separate MCP “trust” tool.

What the token is

After login the VSIX holds an opaque agent session Bearer token. It is not an EVE GUI cookie. Idle timeout is eight hours. The agent keeps the native EVE password only in memory.

Open Lab

Open Lab uses a one-time https://<agent>/browser/{token} URL inside the IDE Simple Browser. Native EVE cookies stay on that browser document. The AI model only sees /browser/<token> and never receives GUI cookies.

macOS + VS Code

Trust in the modal is required, and the OS trust store often is too. If Simple Browser shows a certificate error or a struck-through https:// on Open Lab, import the agent certificate into the macOS login keychain, then retry Open Lab. Cursor on the same Mac may succeed after in-UI Trust alone.

Live config apply

The sidebar Live config apply switch is per lab. When it is on, reconcile/wipe that would replace runtime config may run without an extra prompt. When it is off, expect a warning before reconciling a live lab — that runtime state is lost.

Next: Create a project or Import an existing lab.