Each term below has a stable HTML anchor. Cross-page first-use linking writes the term as [term](/docs/glossary#term) so a reader unfamiliar with the vocabulary lands here.
Agent
A persistent isolated Linux VM running code-server in the browser. One Agent per account-slot, one Hetzner server (or Fly app for legacy) per Agent. See Get started with Agents.
Plain VM
A bare Linux server you SSH into directly. No Docker image, no managed IDE. One Hetzner server per Plain VM, customer-editable firewall. See Get started with Plain VMs.
Glamp
An environment snapshot published from an Agent — tarball plus manifest — that anyone can adopt to spin up an Agent in the same state. Stored in S3, addressable at crabglamp.com/{slug}/{name}. See Publish your first glamp.
Vault
Per-account store of customer-owned SSH public keys, attached to Plain VMs at provisioning time. v1 stores public keys only — no other secret types.
Virtual key
Platform-issued LLM/voice credential prefixed cg-pk-. Authenticates against the central proxy; the proxy forwards to OpenAI, Anthropic, or ElevenLabs using CrabGlamp's pool credentials. One spend cap covers the key across all providers.
Region
The data center hosting the resource. US (Hetzner Hillsboro, OR) or EU (Helsinki) at v1. Fixed for the resource's lifetime.
Billing item
A billable line on your account's subscription — one Agent's compute, a virtual key's LLM spend, a virtual key's voice spend, or one Plain VM's compute. (LLM and voice are separate billing items that share one key and one spend cap.)
Billing type
For Agents and Plain VMs, the choice of pay-as-you-go (metered) versus subscribe-and-save (flat-rate). For LLM/voice, always metered.
Lifecycle event
An immutable audit record of an ownership transition — transfer or destroy — for an Agent or Plain VM. Persists even after the resource is destroyed, so usage history stays attributable. (Plain VMs record only destroy.)
Tier
Size class for Agents and Plain VMs — small, medium, large. Determines vCPU, RAM, and disk. See Limits and quotas.
Cell
The pair (tier, region). Each cell has its own per-second price.
Cloudflare Tunnel
The data-plane edge for Agents on Hetzner. The Agent's host opens an outbound connection to Cloudflare; the public URL is served by Cloudflare's anycast network. Agents have zero inbound ports — Cloudflare handles TLS, routing, and DDoS.
Manifest
The JSON descriptor of a glamp at ~/glamp.json — name, displayName, description, tags, and the platform-assigned glampId after the first publish. Authored on the Agent, published with the tarball. There is no license or version field at v1.
Glampignore
A ~/.glampignore file in the Agent's home directory that excludes paths from the published tarball. Same format as .gitignore.