Termalin News

Internal sites: reach a private dashboard from any browser

Sat, 24 Oct 2026 00:00:00 GMT

Some things live where only your private network can reach them — a Grafana dashboard, a router's admin page, Home Assistant, Portainer, an app on a server's localhost. Until now, opening one from somewhere else meant a port forward, a VPN, or a reverse proxy. This release adds internal sites: point a Connector at the service and get a private web address of your own.

Open a private app in any browser — no port forwarding

Point a Connector at a web service it can reach — anything on localhost or a private address — and Termalin gives it an address of its own, https://<10 characters>.termal.ink. Nothing is opened on the server and no port is forwarded: the Connector dials out. Connectors on Linux, Windows and macOS all do this, and an app on the Connector's own localhost works on Windows and macOS too.

Most apps need nothing changed on their side. WebSockets pass through, so live panels and live updates behave as they do on the LAN; turn on "the internal site uses https" if the app inside speaks HTTPS with a self-signed certificate. The visitor's address arrives in X-Real-IP, so apps that refuse an unknown proxy still open. Only private addresses can be opened.

To start: open Internal sites in the cabinet, add a site, pick a Connector and enter the service's address (say localhost:3000). The internal sites page has the full tour, and this guide walks through Home Assistant and Grafana.

Yours alone, or shared with a few people

You open a site from the cabinet or the app, already signed in. To let someone else in, share it by email for 24 hours or 7 days — they confirm their address with a one-time code, with no account to create. Take access away at any moment and their open pages close at once.

Each invitation link is personal to the person you invited; anyone else who opens it sees only "This link doesn't work", and a site you didn't name shows visitors just "Internal site". Opening a site works on Pro, Team and the trial; sharing needs a paid plan.

Now a section of its own, with an Edit button

Internal sites have their own section in the cabinet's menu. Each site has an Edit button, and when a site doesn't answer, an address check explains why rather than leaving you guessing.

Easy on the limits

There's no cap on how many sites you add. A soft daily traffic brake — 5 GB per link, 20 GB per account — resets at midnight UTC.

Back up Windows and macOS servers

Server backups were Linux only; now they run on Windows and macOS servers too, through a Connector. On Windows, files that are open during the backup (databases, mail stores) are copied consistently from a Volume Shadow Copy when the Connector's login user is an administrator (Windows 10 1803 / Server 2019 and newer); without that right it reads the live drive and the archive says so — more on how that works. On macOS it packs at the lowest priority; if macOS blocks a folder, turn on "Allow full disk access for remote users" under Remote Login. The backup form shows example paths for each server's OS.

Trial backups use up to 5 GB of Termalin storage; a paid plan gives them the full pool. See the server backups page for the full picture.

Alert settings for each server

Each server can keep its own alert settings. Per server, choose Account defaults, Custom or Off — and Off only stops the alerts, it keeps collecting that server's metrics, so you no longer have to switch monitoring off to quiet one noisy machine. Every threshold is editable, down to how long a server must be gone before it counts as offline, how long the host may take the CPU, how many days before a certificate expires count as critical, and the inodes-critical mark. In the cabinet and the app — the server monitoring page explains what's collected.

New account-wide alerts

You're now told when your Termalin storage is nearly full, when a scheduled backup quietly stops succeeding, when your balance falls below a figure you set, and before an auto-renewing storage pack renews if your balance won't cover it.

An Android app is on the way

An Android app is coming to Google Play — it isn't released yet. It's the same app as on iPhone and iPad: open sessions stay connected while it's in the background, and it receives your server alerts like the iPhone does.

Open a Mac's Screen Sharing

The app now speaks macOS Screen Sharing's sign-in, so a Mac opens with its own account — the Mac's user name and password, not an Apple ID — as it already did in the web cabinet.

Team invitations

Adding someone to a team now sends an invitation they accept. They join only when they accept it — from the email or in the cabinet, signed in with that confirmed address — and take no seat until then. Pending invitations are listed and expire after 14 days; the owner can cancel or resend one.

Let an AI assistant add internal sites

Three new tools — web_link_create, web_link_list and web_link_delete, 21 in all — let a connected assistant set up an internal site for you. Ask it to expose a dashboard that only listens inside a server and it appears under Internal sites, marked "Added by" with the app's or key's name. Only you open it, signed in. Adding and removing need full access on a Connector open to AI. See SSH for AI agents for how that access works.

Remote desktops in a tab, and Connectors on Windows and macOS

Thu, 22 Oct 2026 00:00:00 GMT

A terminal isn't always enough — sometimes you need the actual desktop. This release opens Windows and Linux desktops in a tab over RDP and VNC, brings the Connector to Windows and macOS, extends monitoring and encrypted backups to more systems, and adds a browser extension.

Open a Windows or Linux desktop in a tab

Two new connection types sit next to SSH: a Windows desktop over RDP, or any VNC desktop. It opens in a tab, scaled to fit or at actual size, with mouse, wheel, keyboard, Ctrl+Alt+Del and the clipboard both ways. Connect directly to an address, or through a Connector to a desktop on its private network — an empty address means the Connector's own machine. On the Connector path the encrypted session is opened by the app itself; termal.in only passes bytes along.

To start: add an RDP or VNC host (or right-click a Connector → Remote desktop), choose Directly or Through Connector, and it opens in a tab. The remote desktop client page has the details, and remote desktop without port forwarding explains the Connector route.

A direct RDP or VNC connection from the app is free — your computer dials the desktop and our servers aren't involved. Opening one through a Connector uses the backend relay and needs a plan (Pro, Team or the trial).

Files, certificates and Mac keys

When a desktop is opened through a Connector on the Connector's own machine, a file panel docks beside it — that machine's files through the same Connector, with no key. The app remembers a desktop's certificate on first connect and stops with both fingerprints if it changes, before any password is sent; trusting the new one is a click. On a Mac, ⌘ is the Windows key, common ⌘ shortcuts arrive as Ctrl, and the clipboard syncs both ways.

Add a Connector on Windows and macOS

The Connector is no longer Linux-only. One line installs it:

Linux and macOS: curl -fsSL https://termal.in/i/<token> | sudo sh
Windows (PowerShell, as administrator): irm https://termal.in/i/<token>.ps1 | iex

Get install command in the cabinet gives the line under the Linux / macOS and Windows tabs; the link works once, for an hour. On macOS the Connector turns on Remote Login; on Windows it adds the built-in OpenSSH Server if missing, runs as a service, and leaves port 22 closed — sshd listens on the machine itself only. The web terminal, remote desktops, AI apps and monitoring all reach those servers too. The Connector page covers it.

Monitoring for Windows and macOS servers

A server's metrics and alerts now work on Windows (CPU, memory, page file, drives, network, disk traffic, processes, uptime) and macOS (load, CPU, memory, swap, volumes, network, processes, uptime), not only Linux.

See Windows server monitoring and the server monitoring page.

Encrypted backups of your servers

Pick a Linux server, the folders, how often (hourly, daily, weekly or by hand), how many copies to keep, and a read-speed limit so a backup never hogs the disk and network the server needs. Nothing is installed on the server — it packs the folders at the lowest CPU and disk priority, through the Connector.

Each backup is encrypted with a key made in the cabinet or the app, so only you can open an archive. Store it in Termalin storage, any S3-compatible bucket (AWS, Backblaze B2, Cloudflare R2, Hetzner, MinIO…), or another of your own servers that has a Connector. The server backups page has the full description.

Termalin for Chrome

A browser extension is now in the Chrome Web Store. On ChatGPT, Claude, GitHub and Stack Overflow, every code block gets Run on server: pick a server, check the command, run — nothing runs until you press the button, and risky commands ask twice. After a run, Insert into chat puts the output back into the ChatGPT or Claude composer so the agent sees the real result. The side panel shows your servers, open alerts and server metrics; the toolbar badge counts open alerts. In nine languages.

It signs in to your account like any AI app and follows the same command rules. Managing servers from Claude and ChatGPT shows how that fits together.

Backups, monitoring and alerts in the desktop app

The same features reach the desktop app under Settings → Account: Backups (jobs, archives, your own S3 buckets, another of your servers, and the storage bar), Monitoring (an overview of every Connector server with 1h / 24h / 7d charts), and Alerts (open and recent alerts, mute, and the settings — email, push, webhook, Telegram, thresholds, test). Signed-out and Free accounts see what the feature is and where to sign in or pick a plan, instead of an error. Session recordings the app saves are now encrypted on your computer with a key kept in your system keychain.

An AI assistant for your terminal: summarize, explain, suggest

Fri, 09 Oct 2026 00:00:00 GMT

This release adds an AI assistant to the terminal and the replay player. It reads what you point it at, and it never runs anything on its own — every command it writes waits for you.

What a session did, in plain words

In the replay player, the Summarize button tells you what a recorded session did, what went wrong and what's left. It works for your own sessions and for ones an AI agent ran, and it's in the web cabinet too — right-click a recording. See the session recording page for how recordings work.

Explain terminal output

Select some output, right-click → Explain with AI, and you get what it means, the likely cause and what to do about it.

A command from a request

Press Ctrl+Shift+K (or the AI key on a phone), say what you want, and the command is typed at the cursor. It's never run for you — you read it and press Enter yourself.

Describe a server

In a Connector's settings, Describe this server runs a few read-only commands and gives you a short card of what the machine is, plus a suggested note for AI apps that work there.

Your allowance, or your own key

Each paid plan includes a monthly number of requests — Settings → AI assistant shows how many. Add your own Anthropic API key to lift the allowance; your own key works on every plan, including Free.

The text a feature works on goes to Anthropic through Termalin's server and isn't stored or logged by Termalin; recordings stay encrypted and are decrypted on your device only when you ask for a summary. Every answer has a report button. The privacy page spells out what's sent and kept.

Run Termalin's AI assistant on your own model

Fri, 09 Oct 2026 00:00:00 GMT

Termalin's AI assistant — the one that summarizes a session, explains terminal output and turns a request into a command — now runs on a model you choose, including one on your own machine.

Your own model, any provider

Open Settings → AI assistant → Model provider → Own endpoint and point it at any OpenAI-compatible API (OpenAI, Gemini, OpenRouter, Groq, DeepSeek) or a local model through Ollama or LM Studio. Requests go straight from your device to that endpoint with Termalin's prompts; nothing passes through Termalin's server, and no allowance applies. The key is optional for a local server. It works the same in the web cabinet, under Account → AI assistant.

If you're running a model on your own hardware, giving a local LLM safe SSH access covers how to keep it to what you allow. The SSH for AI agents page has the wider picture.

Right-click in the web terminal

The web terminal's right-click menu now matches the desktop: Copy, Paste, Explain the selection and Ask for a command.

It asks first, on iOS and Microsoft Store builds

The first time you use a summary, an explanation, a command request or "describe this server", the app tells you where the text goes — the built-in provider or your own endpoint — and asks to allow it. Declining sends nothing, and you're asked once per provider. Desktop builds from the site pick this up with their next update.

Also fixed

AI answers that came back empty on desktop (Explain, the command from a request, the session summary and the AI settings page read the server's answer from the wrong place) now show up, and the assistant no longer slips an assumption onto the command line — the command and its note are kept apart.

A database client built into Termalin — 13 engines

Thu, 03 Sep 2026 00:00:00 GMT

Termalin now has a database client. The same app that holds your servers can browse and query the databases on them — reached the way you already reach the server, with no port exposed.

A database client for 13 engines

A new Data host type browses and queries PostgreSQL, MySQL/MariaDB, SQLite, MongoDB, Redis, ClickHouse, Elasticsearch, Cassandra/ScyllaDB, Neo4j, InfluxDB, RabbitMQ, SQL Server and Cloudflare D1. You get a schema tree of every database, table and column — with row counts, indexes, foreign keys and access — a SQL editor that runs on Ctrl+Enter, and a results grid that exports to CSV or JSON. The database client page has the tour; there are focused pages for the MongoDB GUI and the Redis GUI too.

Edit right in the grid

Open a table and click a cell to change it, right-click a row to delete it, add rows from a form, add columns, and create tables and databases. Tables without a primary key are editable too. Every generated statement is shown for review before it runs — nothing executes unseen.

Documents and brokers, not just SQL

MongoDB and Elasticsearch documents are edited by their id, with an "Add document" JSON form. RabbitMQ queues can be published to, purged and created. Redis keys are listed with type, TTL and a value preview — edit, expire or delete them in place.

Behind a firewall — no exposed port

Reach a private database through a saved SSH host, and in the web cabinet through a Connector. Nothing has to listen on a public port. Each statement lands in the per-host command history (encrypted like your terminal commands) and the activity log.

Your agents can query too, on your terms

The bundled MCP server adds database tools — list databases, tables, schema, run a query — off by default, read-only unless a connection grants full access, and every agent query is recorded and audited. claude.ai and ChatGPT connected over Termalin's hosted MCP can query your databases using the database's own local trust over the keyless tunnel, with no database password sent or stored. See give an AI agent database access and query your database from Claude Code or Cursor.

Command suggestions as you type, plus two-factor and passkeys

Wed, 26 Aug 2026 00:00:00 GMT

This release makes the terminal quicker to type in, locks down sign-in with two-factor and passkeys, and smooths out the full-screen tools people run inside it.

Command suggestions as you type

Start typing and the rest of the command appears as ghost text — drawn from your history on that host, the server's own shell history (fetched when you connect), your snippets and a built-in dictionary.

Right arrow accepts the suggestion.
Alt+Up / Alt+Down pick between matches.
Esc hides it.

Several matches open a picker panel with a full-command preview and a bookmark that saves any suggestion as a snippet. It works in the desktop app and the browser cabinet alike, and Settings has an on/off switch.

Two-factor sign-in and passkeys

Turn on two-factor authentication (TOTP) in the web cabinet and sign in with your authenticator code; backup codes are included, and the desktop app prompts for the code too. Passkeys let you sign in to termal.in with your device's screen lock instead of the password, and "Sign in with browser" in the desktop app approves a sign-in in your already-authenticated cabinet, so the password never touches the app. More on the security page.

A smoother terminal for Claude Code and other full-screen CLIs

Large pastes arrive whole and in order, Ctrl+C copies a selection without breaking the interrupt, and files can be dragged into the terminal to type their path. The underline and color glitches some TUIs triggered are gone, and a selection now grows with the wheel instead of sliding away as you scroll. Connecting Claude Code over SSH is a good place to put this to work.

Jump hosts

Reach a server through a bastion: pick a Jump host in the host form and Termalin connects through it. If you're new to the idea, what is a jump host explains it.