Server console rescue under a PayPal lockConsole rescue · PayPal lock
No hold, no keystrokes.
Only your server answering can charge you.
When a Linux server stops answering SSH, the last way in is the hosting provider's web console: a screen and a keyboard. Keyhold lends that keyboard to an AI agent. A PayPal authorization is the lock on it, and only your own check of the server can turn the hold into a charge.
How a rescue runs
-
Free look
The agent sees screenshots and cannot press a key. You get the fault, the screen lines that show it and a fixed price: $9 for one config fix, $19 for a boot-path repair, $29 for kernel, initramfs or disk.
-
Your probe, fixed at checkout
An SSH login with a key only the probe holds, and a page that must answer with the content you expect. Its hash goes into the PayPal order.
-
Hold
You approve a PayPal one-time payment. Keyhold creates the order with intent AUTHORIZE for the quote and authorizes it. Nothing is captured.
-
The lock
Every keystroke is checked against PayPal's latest answer, which is re-read every 5 actions or 15 seconds. If the answer is anything but CREATED, Stop, or doubt, the keyboard is gone.
-
Capture on your probe only
Two passing probes, far enough apart, with no failure between. Then a capture of the quote or less. The agent has no tool that can charge you.
-
Void, or refund later
Giving up, a time limit, Stop, or a probe that never passes voids the hold. If the server falls over twice in a row during the warranty, the capture is refunded in full.
The three faults on /try
- Typo in sshd_config $9 hold A misspelled option in sshd_config stops SSH from starting. The web page still answers.
- fstab lists a disk that is gone $19 hold · try Stop A data disk was removed but stayed in /etc/fstab. The boot stops in emergency mode.
- GRUB locked by a password No hold The boot menu asks for a GRUB password nobody has. The console alone cannot fix this.
PayPal pieces in one rescue
- JS SDK v6: a client token,
findEligibleMethods, a PayPal one-time payment session. - Orders v2: create with intent AUTHORIZE, then authorize.
- Payments v2: GET authorization for the lock, capture with
final_capture, void, refund. PayPal-Request-Idon every money call, written to an outbox first, so a retry never moves money twice.- Webhooks stored raw, verified with PayPal, deduplicated, and never moving a rescue backwards.