Your SSH workflow,
frictionless
SSH terminal, key management, encrypted sync and an AI agent that drives the terminal for you — in one fast desktop client. Your secrets never leave your control.
AI agent
The AI agent now drives the terminal
Chat, approve, and watch the command being typed into your session — with you in control the whole time.
Native function calling
With tool-capable providers — Claude (Anthropic), ShvIA (Blue3), local Ollama and OpenAI-compatible endpoints — the model returns a structured call, not a guess in prose.
Text bridge for any model
Provider has no tools? The bridge extracts the command from a ```run block and runs it through the same safe path. Any model becomes an agent.
Your policy decides
Allow, ask or deny rules per command. Destructive actions require confirmation, and nothing runs with execution (⚡) turned off.
In plain sight, audited
The agent types into the visible terminal of your tab — you watch every keystroke — and conversations and commands are recorded in the audit log.
You cut it off instantly
The ■ Stop button interrupts even during the provider call, not just between steps. Every turn reports time, tokens ↑↓ and cost — the real figure when the provider reports one, an estimate marked with "~" when it does not.
Long-term memory
The agent queries a shared knowledge base before answering and records what it learned afterwards. Commands are redacted on the way up — no password enters memory — terminal output stays in the audit log only, and with no server configured none of it turns on.
I will refresh the package list and apply the upgrades:
sudo apt update && sudo apt upgrade -y
Works with Claude (Anthropic), ShvIA (Blue3), xAI (Grok), local Ollama, LM Studio, vLLM and any OpenAI-compatible endpoint.
Why SShvTerm
Everything an SSH client should have
One client to connect, organize and protect your access.
A real terminal
Fast, GPU-accelerated terminal (xterm.js + WebGL) with tabs and up to 4-way splits. Connect by password or key, with automatic reconnect if the network drops.
Access from anywhere
Hosts, identities, keys and snippets synced and end-to-end encrypted. Install SShvTerm on another machine, sign in, and everything is back — the server never sees your data.
Built-in SFTP
Browse, upload and download files reusing the SSH connection you already opened. Transfer queue with progress, parallel transfers and live cancel.
Per-host WireGuard VPN
Reach servers on private networks through a WireGuard tunnel scoped to the connection — no root, no touching your system VPN. If the tunnel fails, nothing leaks (fail-closed).
SSH keys under control
Generate, import and organize Ed25519, ECDSA and RSA keys. Reuse identities across hosts without copy-paste.
Hosts, groups and tags
Group servers by project, label them with tags and find everything in an instant, no matter how many hosts you have.
Visual port forwarding
Create Local (-L) and Remote (-R) tunnels tied to your session — without memorizing ssh flags.
Bring your config
Import your hosts from OpenSSH (~/.ssh/config), PuTTY, MobaXterm and Termius, with a preview before applying. Migrate in minutes — no re-entering everything by hand.
Command snippets
Save the commands you repeat and fire them in any session. Define startup snippets per host.
Command autocomplete
Suggestions as you type, with the session history at hand. Getting in the way of your shell's Tab? One tap on the 💡 in the panel bar turns it off — or two Escapes in a row, without leaving the terminal.
An AI agent that drives the terminal
Ask in plain language and the agent types the command into your session — nothing runs without passing your policy (allow, ask or deny). Native function calling with Claude, ShvIA (Blue3), xAI (Grok), local Ollama and OpenAI-compatible endpoints; the API key is yours and stays encrypted in the vault.
Security
Truly zero-knowledge
Your secrets are encrypted on your device. Whoever hosts the server — including you — never sees a password or a key.
Client-side encryption
Sensitive fields are encrypted with RNCryptor (AES-256-CBC + HMAC-SHA256) before they ever leave your machine.
The key never leaves
The encryption key is derived from your password and lives only in memory — never sent, never stored in plaintext.
Everything goes through the local agent
The app never talks directly to the cloud or to SSH: all traffic goes through a local agent on 127.0.0.1.
Trust on first use (TOFU)
Each host fingerprint is pinned on the first connection; any mismatch blocks the session to stop MITM attacks.
Secrets never slip out to the model
Before any terminal excerpt reaches the AI, passwords, tokens and URL credentials are detected and redacted. When a secret shows up, the app displays the matched excerpt and lets you decide: block it, send it redacted, or attach it in the clear.
Want full control? Run your own sync server.
Cross-platform
Download SShvTerm
Native desktop app for macOS, Windows and Linux, with signed automatic updates. The macOS app is signed and notarized by Apple.
More formats (.AppImage, .rpm, .exe) and per-file SHA-256 on the Downloads page. On Linux, automatic updates deliver the same format you installed from.
Start connecting in minutes
Free for individuals. No credit card required.