Giving an agent your servers is easy. Trusting it is harder. Tryssh is the native Mac SSH workspace where the copilot does the work — and you approve every command that mutates state.
The risk gate is default-deny. Read-only commands auto-run; anything that mutates state renders the exact command and waits for your click. You stay the operator — the agent stays the intern with great ideas.
How the gate works →Hosts, chats, and history live in SQLite under ~/.tryssh. SSH keys and passphrases live in the macOS keychain — never in a database, never on our servers. Delete the folder and it's gone.
Read the privacy policy →Checks services, tails logs, provisions packages, hunts vulnerabilities — over SSH, on your word.
AgentOnly read-only, metacharacter-free commands auto-run. Everything else waits for you.
Approval gateSSH keys and passphrases live in the macOS keychain. Databases hold metadata only.
KeychainBrowse, upload, and edit remote files over the same SSH session. No second app.
FilesAn SSH client holds the keys to your infrastructure. We built like it.
Hosts, chats, and history in SQLite on your Mac — not on our servers.
Default-deny execution. Mutating commands need your explicit approval.
Keys and passphrases never touch a database, ours or yours.
The agent's exec channel is separate — it can't read or type into your terminal.
Credits meter agent chat only — 1 credit = 1 agent turn. SSH, terminal, and SFTP are never metered.
Prefer your own Anthropic API key? Paste it in Settings — chat runs on your key, nothing metered.
~/.tryssh. SSH keys and passphrases live in the macOS keychain and never leave your device.Download the app, add a host, and ask for something. The first 200 credits are on us.