termal.in

Platform · Linux

The SSH client for Linux made by people who live on servers.

A native AppImage with a Rust core — browser-style tabs, a live stats bar for the box you're on, session recording & replay, and end-to-end encrypted sync between your laptop and your workstation. Your agents get an MCP server too. Free tier — plus a 14-day Pro trial.

Free tier · 14-day Pro trial · Windows, macOS, Linux & iOS

01  /  native

A native build that respects your machine.

Termalin ships as a single AppImage for x86_64 — chmod +x and go, no package manager fights. Under it sits a Rust core with tab hibernation, so it stays light on RAM and quick with a wall of hosts open for weeks. Real xterm-256color sessions, browser-style tabs, a hosts sidebar, snippets, and session restore with scrollback. Prefer the terminal-purist route? We weighed OpenSSH + tmux vs GUI clients.

  • ▸Your ~/.ssh/config comes with you — import it in a click, along with CSV, and export back any time. No lock-in, either direction.
  • ▸Signed auto-updates — every update is verified against a built-in key before it installs.
  • ▸More than SSH — SFTP with a built-in editor, plus RDP and VNC desktops, FTP, Telnet, Serial and S3 as first-class hosts.
  • ▸Encrypted backups of your Linux servers — scheduled, nothing installed on the box, encrypted before they're stored, to Termalin storage, your own S3 bucket or another of your servers. How backups work →

02  /  live stats

The status bar that already ran top for you.

Every session carries a live status bar for the box you're on: CPU, memory, disk, network, load, uptime, processes, logged-in users and open ports — always current, with details on hover. You see a box struggling before you go digging, without leaving the prompt or keeping a monitoring tab open.

03  /  recording

Record the session, replay the incident.

Sessions can be recorded and played back later — commands, output and agent actions on a scrubbable timeline with markers. When something broke at 2 a.m., you scroll back through what actually happened on the box instead of reconstructing it from shell history.

  • ▸Output only — never your keystrokes — passwords at hidden prompts are never echoed, so they never land in the tape.
  • ▸Replay anywhere — in the app, or from the web cabinet on paid plans.
  • ▸Watch grid — every open session mirrored side by side as a live tile; sessions an agent is driving glow.

04  /  laptop ↔ workstation

One vault across your laptop and your workstation.

Hosts, keys, snippets and per-host command history follow you across devices — end-to-end encrypted. Your vault is encrypted on your device with a key derived from your master password before anything is uploaded; the server stores only encrypted blobs, and the master password can't be reset by design. And your agents come along too: the built-in MCP server lets Claude Code and friends open SSH sessions through Termalin — never holding your keys, every action marked in the recording. Read the security model →

Questions

Is Termalin free?

Yes — the Free tier is the whole desktop app with no host limits, local-only. Pro adds the encrypted cloud (sync, cloud recordings, the browser cabinet, Connectors) at $8/mo billed yearly or $10 monthly. Every new account starts with a 14-day Pro trial — no card required. See pricing →

How do I install Termalin on Linux?

Download the AppImage (x86_64), make it executable with chmod +x, and run it. The AppImage isn't signed, and the app keeps itself updated with signed auto-updates — every update is verified against a built-in key before it installs. Download →

Does session recording capture my keystrokes?

No — recordings capture output only, never your keystrokes. Passwords at hidden prompts (sudo and the like) are never echoed, so they never appear in a recording. You replay sessions on a scrubbable timeline with markers, in the app or, on paid plans, from the web cabinet.

Can I sync between my laptop and my workstation?

Yes — on Pro, hosts, keys, snippets and per-host command history follow you across devices, end-to-end encrypted. Your vault is encrypted on your device before anything is uploaded; the server stores only encrypted blobs, and the master password can't be reset by design. More on security →

Which SSH clients have a built-in MCP server?

As of October 2026, a few do, and they run on Linux. Conduit bundles one (SSH, RDP, VNC and web, around 60 local tools, Apache-2.0) over a local socket only. XPipe ships a local HTTP MCP server, off by default and read-only until you enable changes. Termalin is an SSH client with its own MCP server — 22 local tools in the desktop app, plus a hosted endpoint (https://termal.in/mcp, 23 tools) that claude.ai, ChatGPT, Claude Code, Codex and Cursor sign into and that reaches your servers keylessly through an outbound Connector, with per-connection command rules (full, allowlist or read-only) and an audit log. How Termalin's works →

Get Termalin for Linux — free.

The Free tier is the full desktop app — no host limits, as an AppImage for x86_64. New accounts get Pro free for 14 days.

Free tier · 14-day Pro trial · all features · pricing