A fast, encrypted, native SSH client. An AI that runs your commands,
a vault that never leaves your machine, P2P sync, cloud and Kubernetes —
all in a single binary. No Electron. No webview. No telemetry.
Chat in a sidebar next to your live session. It doesn't just narrate — it runs commands for you through a real execute_command tool, streaming token by token.
Built on Iced + wgpu. Instant startup, tiny memory footprint. No Electron, no webview, no Chromium tax.
A vault, not a config file
Argon2id + ChaCha20-Poly1305, every secret encrypted per-field with its own salt. Your credentials never leave the machine.
The whole SSH pipeline
Multi-hop jump chaining, SOCKS4/5 + HTTP CONNECT proxies, ProxyCommand, agent forwarding, and standalone port forwarding (-L / -R / -D).
Sync without a server
Your vault across devices over QUIC. LAN via mDNS, internet via STUN with an optional self-hosted relay. End-to-end encrypted, no central account.
Cloud and Kubernetes, one click
Discover EC2 instances and ECS services from your AWS profile, access key, or SSO — then connect over SSH, EC2 Instance Connect, SSM, or exec into a live container. Plus a Kubernetes provider: kubeconfig auth and a pod shell via kubectl exec.
MCP
Wired into your AI tooling
Expose your SSH hosts to Claude Code, Cursor and other clients over the Model Context Protocol. List, inspect and execute remotely. Shipped as a signed plugin, downloaded on demand — never bundled.
Cards grid with manual and dynamic cloud-backed groups, distro auto-detection, inline quick connect.Dual-pane SFTP. Drag-and-drop uploads, multi-select transfers, edit-in-place, parallel channels (1–8).Streaming AI sidebar. Token-by-token responses, per-block Copy / Run, terminal context, command execution.Cloud Accounts. Dynamic ECS groups expand to live tasks; multi-container Lens, region badge, Copy CLI per row.Keys and Identities side by side. Reusable credential bundles linked to many hosts; encrypted-key import.13 terminal palettes with mini swatches, plus fully custom UI and terminal schemes.Settings → Interface. Navigation orientation, customizable host icons, dynamic accent on the chrome.
03SECURITY
Security is not an afterthought.
Your credentials deserve better than plaintext config files. Every secret is encrypted before it ever touches disk.
Argon2id + ChaCha20-Poly1305Memory-hard KDF + AEAD encryption for every stored secret.
Per-field encryptionUnique 32-byte salt + 12-byte nonce for each credential.
Zero telemetryNo data leaves your machine. Ever. Verify it yourself — it's open source.
Pure Rust cryptographyNo C dependencies in the crypto path. Memory safe by design.
TOFU host key verificationFingerprints checked on every connection, alert on changes.