Open Source · AGPL-3.0

SSH, reimagined.

A modern SSH client built entirely in Rust. Fast, encrypted, native. No Electron, no webview, no cloud servers. Just a single binary.

100% Rust
0 Telemetry
3 Platforms
11 Languages
Oryxis host editor with folder navigation and credentials

Everything you need.
Nothing you don't.

Powerful SSH workflows, beautiful interface, zero bloat.

Native GPU UI

Built with Iced and wgpu. Hardware-accelerated rendering, instant startup, minimal memory. No Electron, no webview.

Encrypted Vault

Argon2id key derivation + ChaCha20-Poly1305 encryption. Per-field unique salts. Your secrets never leave your machine.

AI Chat Assistant

Integrated sidebar with Anthropic, OpenAI, or Gemini. Streams responses token-by-token, runs bash commands in the active terminal, gets context-aware help in every session.

Full SSH Pipeline

Direct, SOCKS4/5, HTTP CONNECT, ProxyCommand, jump-host-via-proxy stacking. SOCKS5 RFC 1929 + HTTP Basic auth. Reusable Proxy Identities, port forwarding, agent forwarding. RSA-SHA2, TOFU, smart auto-auth.

P2P Sync

Sync your vault between devices over QUIC. LAN via mDNS, internet via self-hostable signaling + STUN, optional HTTP relay fallback. End-to-end encrypted, no central server. Ed25519-signed signaling with TOFU pubkey pin, per-source pairing cap, race-free Cloudflare Durable Object back-end.

MCP Server

Expose SSH hosts to AI assistants like Claude Code via the Model Context Protocol. List, inspect, and execute remotely. Distributed as a signed plugin — downloaded on demand, never bundled in installers.

Plugin Subsystem

Cloud providers and the MCP server run as separate signed binaries (Ed25519, verified before execution). JSON-RPC over stdio, on-demand download into ~/.oryxis/plugins/, sha256 integrity. New providers ship without touching the app.

Workspace Mode

Sidebar hides when a connection tab is open so the terminal fills the canvas; areas and connection tabs unify into one top bar with a burger menu. Customizable host icons (Circular / Square / Outline / Initials), dynamic accent on the chrome, contextual vault sub-nav. Classic mode stays a one-click opt-out.

Windows System Tray

Tray icon with Show / Hide / Quit, Active sessions submenu (jump to any open tab), Recent hosts submenu (top 10 by last_used). Opt-in close-to-tray and minimize-to-tray. Single-instance mutex with file-based primary/child IPC.

Themes & i18n

13 global themes (Oryxis, Termius, Darcula, Islands, Dracula, Monokai, Hacker Green, Nord, Solarized Dark / Light, Paper Light), 13 terminal palettes, 11 languages including Persian and Arabic with full RTL layout. Per-theme button colors, contrast tested in CI.

Session Recording

Full terminal output saved to the encrypted vault. Browse session history and review past commands anytime.

SFTP Browser

Dual-pane local/remote layout. Drag-and-drop uploads, multi-select transfers, edit-in-place, chmod properties, parallel channels (1–8), bulk queue with progress.

Cloud Accounts (AWS)

Discover EC2 instances and ECS services from your AWS profile, access key, or SSO. One-click connect via SSH, EC2 Instance Connect, SSM Session, or ECS Exec into a live container. Imports nest under a provider folder; ECS services materialize as dynamic groups.

See it in action.

A UI designed for people who live in the terminal.

Hosts dashboard with cards, groups, and quick search

Cards grid with groups (manual and dynamic cloud-backed), distro auto-detection, inline quick connect.

SFTP dual-pane browser, local on the left, remote on the right

Dual-pane SFTP. Drag-and-drop uploads, multi-select transfers, edit-in-place, parallel channels (1–8).

Terminal session with streaming AI Chat sidebar

Streaming AI sidebar. Token-by-token responses, per-code-block Copy / Play, terminal context, bash tool execution.

ECS dynamic group expanded with running container task

Cloud Accounts (AWS). Dynamic ECS groups expand to live tasks; multi-container Lens, region badge, Copy CLI per row.

Keychain with keys and reusable identities

Keys and Identities side by side. Reusable credential bundles linked to many hosts; encrypted-key passphrase import.

Terminal theme picker with 13 palette previews

13 terminal palettes with mini swatches. Oryxis Dark / Light, Termius, Darcula, Islands, Dracula, Monokai, Hacker Green, Nord, Solarized, Paper Light.

Settings Interface section with workspace mode and tab options

Settings → Interface. New Workspace layout mode (sidebar-less, top-tab unified), customizable host icons, dynamic accent on the chrome, layout direction.

Security is not an afterthought.

Your credentials deserve better than plaintext config files.

  • Argon2id + ChaCha20-Poly1305 Memory-hard KDF + AEAD encryption for every secret
  • Per-field encryption Unique 32-byte salt + 12-byte nonce for each credential
  • Zero telemetry No data leaves your machine. Ever. Verify it yourself — it's open source.
  • Pure Rust cryptography No C dependencies in the crypto path. Memory safe by design.
  • TOFU host key verification Fingerprints verified on every connection, alert on changes

Why Oryxis?

The best of all worlds.

Oryxis Termius PuTTY Tabby
Modern UI
Native (no Electron)
Open source
Encrypted vault
AI assistant
P2P sync (no cloud)
MCP integration
AWS cloud accounts (EC2 + ECS)
Free forever

Get Oryxis.

One binary. All platforms. No account required.

Or build from source: git clone https://github.com/wilsonglasser/oryxis.git && cd oryxis && cargo build --release