New Tryssh for macOS is here

SSH made agentic.
Not made reckless.

Giving an agent your servers is easy. Trusting it is harder. Tryssh is the native Mac SSH workspace where the copilot does the work — and you approve every command that mutates state.

macOS 14+ · Apple silicon & Intel · Free plan, no card required

deploy@prod-api-01 — tryssh ssh · ed25519
Hosts
prod-api-01 12ms
db-primary 9ms
staging 31ms
prod-api-02
gpu-runner
↳ click a host
Terminal
Copilot
Connected · 12ms · chacha20-poly1305 · key in macOS Keychain ↻ replay
Human-in-the-loop — you approve every change Local-first — SQLite on your Mac Keychain-backed — secrets never in a DB Native — SwiftUI, not a webview
Approval gate · 0 surprises

Agents shouldn't get root without asking

The risk gate is default-deny. Read-only commands auto-run; anything that mutates state renders the exact command and waits for your click. You stay the operator — the agent stays the intern with great ideas.

How the gate works
Pending approval
Agent
nginx config test passed. Ready to reload:
$ systemctl reload nginx
Run Skip
Local-first · your machine

Your infrastructure map never leaves home

Hosts, chats, and history live in SQLite under ~/.tryssh. SSH keys and passphrases live in the macOS keychain — never in a database, never on our servers. Delete the folder and it's gone.

Read the privacy policy
~/.tryssh/
├── tryssh.db · hosts, chats, history
├── memory.db · agent memory
└── settings.json
⌗ macOS Keychain · keys & passphrases

A system built to run commands safely, not just suggest them.

A copilot on every host

Checks services, tails logs, provisions packages, hunts vulnerabilities — over SSH, on your word.

Agent

Default-deny risk gate

Only read-only, metacharacter-free commands auto-run. Everything else waits for you.

Approval gate

Secrets in the keychain

SSH keys and passphrases live in the macOS keychain. Databases hold metadata only.

Keychain

SFTP built in

Browse, upload, and edit remote files over the same SSH session. No second app.

Files
Security

Enterprise-grade posture, local-first heart

An SSH client holds the keys to your infrastructure. We built like it.

Local-first storage

Hosts, chats, and history in SQLite on your Mac — not on our servers.

Human-in-the-loop

Default-deny execution. Mutating commands need your explicit approval.

OS keychain secrets

Keys and passphrases never touch a database, ours or yours.

Channel isolation

The agent's exec channel is separate — it can't read or type into your terminal.

Pricing

The terminal is free. Forever.

Credits meter agent chat only — 1 credit = 1 agent turn. SSH, terminal, and SFTP are never metered.

Free
$0
200 credits to start
  • Unlimited hosts & terminals
  • Agent copilot on every host
  • SFTP file browser
  • Keychain secret storage
Download
Team
$29 / mo
4,500 credits / mo
  • Everything in Pro
  • Highest monthly allowance
  • Priority support
Start with Team
Enterprise
Custom
Unmetered
  • Unmetered agent turns
  • Deployment & onboarding help
  • Direct line to the team
Talk to us

Prefer your own Anthropic API key? Paste it in Settings — chat runs on your key, nothing metered.

FAQ

Questions, answered

What exactly is a credit?
1 credit = 1 agent turn: one message to the copilot, including every command and follow-up the agent runs inside that turn. The terminal itself is never metered.
Do I need an account?
With an account you get hosted agent chat — no API key to manage. Prefer your own Anthropic API key? Paste it in Settings and chat runs on your key instead, nothing metered.
Where does my data live?
On your machine. Hosts, chats, and history sit in SQLite under ~/.tryssh. SSH keys and passphrases live in the macOS keychain and never leave your device.
Can the agent run destructive commands on its own?
No. The risk gate is default-deny — only read-only, metacharacter-free commands auto-run. Anything that mutates state renders the exact command and waits for your approval.
Windows or Linux?
macOS first. The core is a portable TypeScript backend behind one WebSocket protocol, so Windows and Linux clients are on the roadmap — the brain already ports.

Give your servers a copilot.

Download the app, add a host, and ask for something. The first 200 credits are on us.