Early Access

Your SSH workflow,
frictionless

SSH terminal, key management, encrypted sync and an AI agent that drives the terminal for you — in one fast desktop client. Your secrets never leave your control.

production-01 — bash
sshvterm@prod-01:~$ ssh [email protected]
Connected to api.myapp.io (10.0.1.42) via SShvTerm
Last login: Sun Jun 8 09:14:02 2025 from 192.168.1.5
 
deploy@api:~$ docker ps --format "table {{.Names}}\t{{.Status}}"
NAMES             STATUS
api_web_1      Up 3 days
api_worker_1   Up 3 days
api_redis_1    Up 3 days
 
deploy@api:~$

The AI agent now drives the terminal

Chat, approve, and watch the command being typed into your session — with you in control the whole time.

Native function calling

With tool-capable providers — Claude (Anthropic), ShvIA (Blue3), local Ollama and OpenAI-compatible endpoints — the model returns a structured call, not a guess in prose.

Text bridge for any model

Provider has no tools? The bridge extracts the command from a ```run block and runs it through the same safe path. Any model becomes an agent.

Your policy decides

Allow, ask or deny rules per command. Destructive actions require confirmation, and nothing runs with execution (⚡) turned off.

In plain sight, audited

The agent types into the visible terminal of your tab — you watch every keystroke — and conversations and commands are recorded in the audit log.

SHVIA — Agent execution on
Update the packages on prod-01 and tell me if it needs a reboot.

I will refresh the package list and apply the upgrades:

sudo apt update && sudo apt upgrade -y
Approve Deny
Approved — typing into the terminal… done · exit 0
Done: 12 packages upgraded. No reboot required.

Works with Claude (Anthropic), ShvIA (Blue3), local Ollama, LM Studio, vLLM and any OpenAI-compatible endpoint.

Everything an SSH client should have

One client to connect, organize and protect your access.

A real terminal

Fast, GPU-accelerated terminal (xterm.js + WebGL) with tabs and up to 4-way splits. Connect by password or key, with automatic reconnect if the network drops.

Access from anywhere

Hosts, identities, keys and snippets synced and end-to-end encrypted. Install SShvTerm on another machine, sign in, and everything is back — the server never sees your data.

Built-in SFTP

Browse, upload and download files reusing the SSH connection you already opened. Transfer queue with progress, parallel transfers and live cancel.

Per-host WireGuard VPN

Reach servers on private networks through a WireGuard tunnel scoped to the connection — no root, no touching your system VPN. If the tunnel fails, nothing leaks (fail-closed).

SSH keys under control

Generate, import and organize Ed25519, ECDSA and RSA keys. Reuse identities across hosts without copy-paste.

Hosts, groups and tags

Group servers by project, label them with tags and find everything in an instant, no matter how many hosts you have.

Visual port forwarding

Create Local (-L) and Remote (-R) tunnels tied to your session — without memorizing ssh flags.

Bring your config

Import your hosts from OpenSSH (~/.ssh/config), PuTTY, MobaXterm and Termius, with a preview before applying. Migrate in minutes — no re-entering everything by hand.

Command snippets

Save the commands you repeat and fire them in any session. Define startup snippets per host.

An AI agent that drives the terminal

Ask in plain language and the agent types the command into your session — nothing runs without passing your policy (allow, ask or deny). Native function calling with Claude, ShvIA (Blue3), local Ollama and OpenAI-compatible endpoints; the API key is yours and stays encrypted in the vault.

Truly zero-knowledge

Your secrets are encrypted on your device. Whoever hosts the server — including you — never sees a password or a key.

Client-side encryption

Sensitive fields are encrypted with RNCryptor (AES-256-CBC + HMAC-SHA256) before they ever leave your machine.

The key never leaves

The encryption key is derived from your password and lives only in memory — never sent, never stored in plaintext.

Everything goes through the local agent

The app never talks directly to the cloud or to SSH: all traffic goes through a local agent on 127.0.0.1.

Trust on first use (TOFU)

Each host fingerprint is pinned on the first connection; any mismatch blocks the session to stop MITM attacks.

Want full control? Run your own sync server.

Download SShvTerm

Native desktop app for macOS, Windows and Linux. The macOS app is signed and notarized by Apple.

v1.2.44

More formats (.AppImage, .exe) and per-file SHA-256 on the Downloads page.

Start connecting in minutes

Free for individuals. No credit card required.