A cross-platform credential manager and terminal. Your hosts, keys, and passwords live in one encrypted vault on your machine - never on a server, never in plaintext.
Signed builds, with a signed checksum list and a GitHub build attestation beside them.
Every release also carries the per-file signatures and SHA256SUMS - how to check them. Older versions are on the releases page.
The parts worth knowing about. Snippets, jump hosts, SFTP, cron, metrics, session recording, themes and the rest are in there too - the full list is on GitHub.
Asks every host what packages it has waiting and which are security updates, and sorts the fleet by what matters. The answer comes from each host's own package manager - apt, dnf, zypper, apk or pacman - never a third-party vulnerability feed. Apply opens a terminal with the upgrade ready rather than running it for you.
Expose chosen hosts to an AI assistant over the Model Context Protocol. A newly ticked host is read-only. Anything no rule covers stops and asks you, with the command on screen and a countdown. Every call is recorded - the refusals too - and one switch stops the lot. It can ask a whole group of hosts at once and get one summary back rather than fifty replies, and change them only as a rollout: one host first, a health check, then batches, stopping itself if too much fails. Production is left out unless you put it in, and the previous version of every file it writes is kept on the host. The assistant never sees the rest of your vault, and the headless binary never gets your master password.
Mark a host production and its terminal gets a frame and a label. A dangerous command pressed there opens a confirmation naming the host in large type, and it won't dismiss for five seconds. Long pastes are held for a look; broadcast input skips production entirely.
Asks each host what cryptography it would actually use - exchanging banners, reading its algorithm lists, never logging in - and grades the fleet weakest-first. OpenSSH 9.9+ warns when it can't negotiate a post-quantum key exchange; this finds which hosts are responsible. Exports as CSV or JSON.
Finds the private keys lying around in ~/.ssh, ranked by exposure - no passphrase is critical, world-readable is high. Move one into the vault and off the filesystem in two deliberate steps, and write it back out when the command line needs it. Never decrypts anything.
Checks every stored key for weak algorithms, reuse across hosts and age - entirely on your machine. One click rotates a host to a fresh ed25519 key: install, prove it authenticates on a second connection, then remove the old one.
Argon2 key derivation and AES-256-GCM. One master password unlocks every host, key, and snippet. Sync it to a private GitHub repo or to a folder in your Documents that OneDrive, iCloud Drive, Dropbox or Syncthing already carries - either way only the ciphertext leaves the machine, and a new computer needs your master password and nothing else.
A full xterm.js terminal per host, with split panes, broadcast input, adjustable font size, and scrollback configurable up to 200,000 lines.
Local (-L), remote (-R) and dynamic SOCKS5 (-D) tunnels, started and stopped per session - each drawn as a diagram showing which end opens the port and which way traffic flows.
List and control containers, images, volumes and networks over the SSH connection - with live log streaming and one-click container shells.
Optionally reach hosts with no inbound port - behind NAT, CGNAT or a firewall - through a relay. The agent dials out; nothing is exposed. Use Kino Cloud's relays or run your own. Off by default.
Pulls the shell history of the account you connect as into an encrypted archive per host. It accumulates - the commands HISTSIZE has already trimmed off the server survive here. Never part of an exported profile.
A Rust backend behind a React interface, packaged as a lightweight Tauri 2 desktop app.
Free and open source under the GPL-3.0 license. Download a build, or compile it yourself in minutes.