One disk image, one drag, no installer script. Everything you'd want to check before running a new binary on the machine that holds your SSH keys is on this page — including the checksum.
The exact build the button above serves, as of the 0.1.6 release.
The checksum is for this release only. Tryssh.dmg is a rolling pointer at the newest build, so the hash above changes every time we ship. If yours doesn't match, check the changelog for a newer version before assuming the worst.
Four steps, and the fourth is the one people ask about.
Double-click Tryssh.dmg in your Downloads folder. macOS verifies the signature and the stapled notarization ticket before it mounts — that check works offline.
The mounted volume contains Tryssh.app and an alias to your Applications folder. Drag one onto the other, then eject the disk image.
The first time you open an app downloaded from the internet, macOS asks you to confirm — and because this build is notarized, that dialog names Definable Ai Private Limited and says Apple checked it for malicious software. You should not see the "unidentified developer" refusal, and you should never need xattr -d or a right-click-Open workaround. If you do, something is wrong with the download; verify the checksum below and tell us.
Sign-in is single sign-on only — Google or GitHub — and comes with 200 agent credits to start. The app then starts its own backend on 127.0.0.1, and you can add your first SSH host.
You are about to give this app your SSH keys. Don't take our word for any of the above — every claim on this page is checkable from your own terminal in about ten seconds.
shasum -a 256 ~/Downloads/Tryssh.dmg
# 09f10faae4bcdec3b427a290110f89df889d1cedda3de4672bd49409bcc172e3
codesign -dv --verbose=2 /Applications/Tryssh.app
# Authority=Developer ID Application: Definable Ai Private Limited (85SD7BAFDN)
# TeamIdentifier=85SD7BAFDN
# CodeDirectory ... flags=0x10000(runtime)
spctl -a -vv /Applications/Tryssh.app
# accepted
# source=Notarized Developer ID
# origin=Developer ID Application: Definable Ai Private Limited (85SD7BAFDN)flags=0x10000(runtime) means the hardened runtime is on. source=Notarized Developer ID means Apple's notary service has seen this exact binary. If either line comes back different, stop and email us.
cloud.tryssh.com — see what the model sees.~/.tryssh.Tryssh updates itself with Sparkle: the app checks a signed appcast over HTTPS, downloads a binary delta when one applies (usually tens of kilobytes rather than 60 MB), verifies an EdDSA signature, and installs on relaunch. Every release is listed in the changelog, newest first — 0.1.6's release notes are the top entry.
Stated plainly so you don't go looking:
brew install --cask tryssh does not work. If you see one, it isn't ours.Download it, add a host, ask for something. The first 200 credits are on us.