Introducing Tryssh — SSH made agentic, not reckless

Giving an agent your servers is easy. Trusting it is harder.

Tryssh is the native Mac SSH workspace where the copilot does the work — and you stay the operator. It reads logs, provisions packages, hunts vulnerabilities, and cleans up disks over SSH. Anything that mutates state renders the exact command and waits for your click.

Why we built it

Every "AI ops" tool we tried made the same trade: hand the model root and hope. That's fine in a demo and terrifying in production. We wanted the leverage of an agent without the 3am pager.

So the risk gate is default-deny. Only read-only, metacharacter-free commands auto-run. Everything else pauses for approval:

$ journalctl --vacuum-time=7d
  [ Run ]  [ Skip ]

Local-first, by default

Your infrastructure map never leaves home:

• Hosts, chats, and history live in SQLite under ~/.tryssh.
• SSH keys and passphrases live in the macOS keychain — never in a database, never on our servers.
• The agent's exec channel is separate from your terminal. It can't read or type into your session.

Delete the folder and it's gone.

Try it

Download for macOS, add a host, and ask for something. The first 200 credits are on us.