The SSH client for macOS that does the whole job.

01  /  one window, whole job

One app instead of a stack of them.

A common Mac setup stitches the job together — a terminal like iTerm2, a hand-edited ~/.ssh/config, and a separate transfer app like Cyberduck. All fine tools; the seams between them are yours to manage. Termalin puts the whole workflow in one window: an encrypted host vault with folders, tags and colors, one-unlock keys, and an SFTP panel with a real editor right next to the terminal.

• ▸Every server in one window — browser-style tabs with a hosts sidebar, snippets, and session restore with scrollback.
• ▸Edit remote files in place — syntax highlighting, search & replace and in-place save, no round-trip to a local copy. Open images, PDFs, Markdown, CSV and archives too.
• ▸A live stats bar — CPU, memory, disk, network, load and uptime for the box you're on, always current.
• ▸Recording, replay and the watch grid — scroll back through what happened on a host, or mirror every open session at once.

02  /  native on your mac

A universal build that stays light.

The macOS download is a universal .dmg — native on Apple silicon and Intel, for macOS 11 or later — with a Rust core and tab hibernation that keep it light on RAM even with a wall of hosts open for weeks. It's signed with an Apple Developer ID and notarized by Apple, so it opens normally — no Gatekeeper workaround — and the app updates itself.

• ▸Universal build — one .dmg, native on Apple silicon and Intel, macOS 11 or later.
• ▸Light on RAM — a Rust core and tab hibernation instead of leaking memory.
• ▸Signed auto-updates — every update is verified against a built-in key before it installs.

03  /  sealed sync

Your Mac and your other machines, one encrypted vault.

On Pro, your hosts, keys and command history follow you across Windows, macOS and Linux — encrypted on your Mac with a key derived from your master password before anything is uploaded. The server stores only ciphertext it can't read, and the master password can't be reset by design. Read the security model →

• ▸Encrypted blobs only. The sync server never sees a hostname, a key or a password in the clear.
• ▸Versioned vault + recycle bin. Deleted hosts are recoverable for 30 days, and an accidental overwrite can be rolled back server-side.
• ▸Works offline. The Free tier is local-only and fully functional without an account — the cloud is an add-on, not a requirement.

04  /  for your agents

An MCP server, built in.

Termalin ships a real MCP server over the hosts you choose. The AI agent you already use lists them and works through Termalin — opening its own sessions or stepping into yours — while a key custodian signs on its behalf, so the agent never holds a key. You watch every move in the grid, and each agent action is marked in the recording. See how it works →