Split panes, saved as a template
Tabs split side by side or stacked, panes dragged by their header, input broadcast to the panes you pick. Save the arrangement and open the whole thing again tomorrow.
Every server you run, in one window.
Terminal, SSH, SFTP, tunnels and an encrypted identity vault in a single app, on macOS, Windows and Linux.
Download ShellVibe
Every release carries a SHA256SUMS file to check the download against. iOS and Android build from the same codebase; there is no store release yet.
A workstation, not a tab with a prompt in it.
Anything, from one shortcut
Press ⌘K and search hosts, sessions, files and tools. Starred hosts lead the list.
Hosts that stay organised
Groups, tags and favourites, plus an import for the hosts you already keep somewhere else.
Port forwarding you can see
Local, remote and dynamic SOCKS5 rules, each one a row with live state and throughput. A forward opens its own connection, so it no longer waits for a terminal tab.
Move files without dropping the session.
A dual-pane browser with your workstation on one side and the host on the other, over a transfer queue that keeps running while you work.
- Atomic uploads
- Written to a temp file and renamed on commit, so a dropped link never leaves half a file behind.
- Editing in place
- Open a remote file in the app, change it, write it back to the host.
- Permissions
- chmod and chown from the row menu, without switching to a shell.
- Path checks
- Traversal attempts are rejected before a path is ever used.
Your keys never leave the machine you trust.
Identity vault
Passwords, private keys and passphrases are encrypted with a random data key, and that key is stored only in its wrapped form once you set a master password. Argon2id and AES-256-GCM.
Failed unlocks back off from 30 seconds to an hour, and the vault relocks when the app goes to the background.
Host keys
Every host key is checked by SHA-256 fingerprint against a known_hosts table, trusted on first use and pinned after that.
A key that changed is refused on the normal connect path. It is not waved through with a warning you would click past.
The network
No analytics, no telemetry, no crash reporting, and no account required. Signed out, it reaches the network in four places: the hosts you connect to, an update check you press, the font CDN if you choose a font we do not bundle, and Device Link over your own LAN.
The optional account adds cloud backup and sync. Our server keeps your name, email and device list, and your backups sealed with a passphrase it never sees.
Give an agent a server, not a password.
ShellVibe runs an MCP server on localhost, off by default in every workspace. Claude Code, Claude Desktop or any other MCP client connects to it and gets these tools:
- list_hosts
- describe_host
- request_host_access
- open_session
- run_command
- interrupt
- close_session
- list_sessions
The agent sees a host as an opaque id, never a hostname or a credential. You grant read-only or read-write per host, every call is written to an audit log, and one button cuts all of it off.
The parts you set up once and stop thinking about.
Snippets and runbooks
Parameterised commands with ${INPUT:name}, and multi-step runbooks checked against an exit code or a regex on the output.
Workspaces
Hosts, identities, tunnels and automation scoped to a context, switched by clicking its card.
One master password
Every stored secret sits behind a single unlock, and the app forgets it again when you leave.
Seven dark schemes
Palette, font, ligatures and cursor, applied to open sessions as you change them. OLED, Catppuccin, Nord, Dracula, Solarized, TokyoNight and Gruvbox ship in the box.
Fair source, and we say so.
Read it, change it, fork it, run it at work. The one thing the licence withholds is shipping ShellVibe, or something much like it, as your own commercial product. Every release turns into Apache 2.0 two years after we publish it.
That is fair source, not OSI-approved open source, and we do not call it open source.
- Licence
- FSL-1.1-ALv2
- Built with
- Flutter, Dart
- SSH engine
- Pure Dart, isolate KEX
- Local storage
- SQLite