A native macOS console for your
servers
Nexus Shell — a native macOS SSH client. Terminal, SFTP, Docker, keys, and live server monitoring, all in one pane.
A SwiftUI macOS SSH client.
Terminal, SFTP, Docker, keys, live monitoring — all in one place.
- OpenAI
- Anthropic
- DeepSeek
brew install --cask viewer12/tap/nexus-shell
Agent Bridge
Let Claude Code run your servers
Nexus Shell is an MCP server. The agent you already use — Claude Code, Codex, any MCP client — drives your connections through it: running commands in real, visible terminal tabs, moving files over SFTP, managing keys.
-
Keys never leave the app
The agent gets capabilities, not credentials. It refers to a server by its connection_id and never sees a password or a private key.
-
You watch every step
Terminals the agent opens are real, badged tabs. Commands run in front of you and you can take the keyboard back at any moment.
-
You decide
Off by default. Each agent is approved on its first call and revocable whenever you like; only local processes running as you can connect, and every action is logged.
Settings → Agent Bridge
- 📁src—drwxr-xr-x5/9/26, 12:13 AM
- 📁public—drwxr-xr-x5/9/26, 12:09 AM
- 📁tests—drwxr-xr-x5/8/26, 2:39 AM
- 📁node_modules—drwxr-xr-x4/29/26, 1:53 AM
- 📁dist—drwxr-xr-x4/29/26, 1:51 AM
- 📄.env1.4 KB-rw-------5/8/26, 11:19 PM
- 📄Dockerfile682 B-rw-r--r--4/28/26, 11:19 PM
- 📄docker-compose.yml1.1 KB-rw-r--r--4/28/26, 6:51 PM
- 📄package.json2.3 KB-rw-r--r--3/8/26, 9:13 PM
- 📄package-lock.json184 KB-rw-r--r--3/8/26, 9:13 PM
- 📄tsconfig.json624 B-rw-r--r--2/14/26, 4:02 PM
- 📄deploy.sh948 B-rwxr-xr-x2/14/26, 4:02 PM
- 📄README.md3.8 KB-rw-r--r--1/29/26, 6:00 PM
Pin servers, see status at a glance.
Favorites with live up/down status. Click a host and the dashboard fills in instantly — CPU, memory, network, load, top processes.
Every connection, fully observable.
From SSH terminals to container management — every daily op in a native macOS workspace.
Live server monitoring
See CPU, memory, network, load, swap, processes and disk as soon as you connect — no manual top check required.
Continuous network path monitoring
Schedule bandwidth, loss, jitter and RTT tests from this Mac or between servers, keep 7-day trends, and compare routes traced from the Mac and server.
SSH security monitoring
Read-only parsing of the server’s SSH auth log: where failed logins came from, when they cluster, which usernames get tried most. An IP that fails repeatedly and then succeeds is flagged separately as a suspected successful brute force. Nothing on the server is reconfigured and the raw log never leaves it.
Multi-tab SSH terminal
Jump between tabs with ⌘1–⌘9 and tune fonts and palettes; ⌘J opens command history, rz / sz transfers files, and multiline or risky pastes ask for confirmation.
Terminal-integrated AI assistant
⌘L opens the AI panel — diagnose errors and explain output based on what's on screen; ⌘K turns natural language into a ready-to-run command.
Bring your own AI service API key
Session recording, search & replay
Terminal output is recorded automatically and can be titled by AI, searched in full text, and replayed at any speed. It is encrypted locally without capturing keystrokes; retention and per-connection recording are configurable.
Dual-pane SFTP & remote editing
Drag between local and remote panes, compare directories and track jobs. Open remote text in VS Code, Cursor or another local editor; saves sync back safely with conflict handling.
Read the safe remote editing guide →Docker & Compose management
See container state, resources, ports and logs in one place. Group and control Compose projects, pull updates, edit config, and deploy from iCloud-synced templates.
SSH keys in one place
Generate Ed25519 / RSA, inspect fingerprints, assign per host — and migrate a password login to key auth in one click: it generates, deploys, and verifies before switching anything.
Connection groups & multi-hop access
Organize hosts with groups, favorites, search and drag-to-reorder. Reach a target through one or more jump hosts, each with its own authentication.
End-to-end encrypted iCloud sync
Optionally sync connections and credentials, SSH keys, groups, saved commands, preferences and Compose templates. Data is encrypted before leaving the Mac; leave sync off to keep everything local.
Native SwiftUI, not Electron
The system sidebar, native menus and shortcuts, light/dark appearance and window behavior all follow macOS — with no Electron runtime or cross-platform compromises.
See how it compares to Termius, Tabby, and iTerm2 → Looking for a WinSCP alternative?
This is what it actually looks like.
No renders, no mockups — these are screenshots of the app.
Free & Pro
Free for everyone. Pro is a one-time purchase — pay once, use forever, all future updates included.
Free
Free forever · personal use only
Basic SSH features. Just download and start using.
Free DownloadPersonal, non-commercial use only. For commercial use please purchase Pro.
Pro
Unlock every Pro feature
Pay once, use forever — all future updates included.
- SSH & load monitoring — CPU / memory / network / load dashboards
-
Terminal-integrated AI assistant — fast command generation & error diagnosis Bring your own AI API key
- SFTP & task panel — file management and batch operations
- Docker management — remote start/stop and log monitoring
- SSH key management — generate, import, one-click password → key migration
- Session logs — record, replay at any speed, full-text search
- Network monitoring & SSH security — scheduled bandwidth / loss / latency tests, brute-force alerts
- Priority email support and feature requests
Pro entitlement syncs across all your devices via your account
Frequently asked
Which macOS version do I need?
macOS 14.2 (Sonoma) and up, Apple Silicon. Apple-signed — opens directly after download.
Where does the AI assistant send my terminal contents?
Not to us. You bring your own OpenAI / Claude / DeepSeek API key; requests go from your Mac directly to that provider. We do not relay or read your terminal output.
Where are my private keys and connection configs stored?
Encrypted on your Mac (under macOS Application Support); nothing is uploaded to our servers. Optional iCloud sync across your Macs is available — credentials and private keys are encrypted before they ever leave the machine.
Can I use it on multiple Macs?
Yes. Sign in on multiple Macs and your Pro / trial status syncs automatically. With iCloud sync enabled, connections (credentials included), SSH keys, saved commands, and preferences also sync across your Macs — end-to-end encrypted. Leave it off and everything stays on each Mac.
How is it different from Termius, Tabby, and other SSH clients?
Nexus Shell is a native SwiftUI app rather than an Electron wrapper — faster launch, lower memory use, and a UI that feels like macOS. Pro is a one-time purchase instead of a subscription, and connection configs and SSH keys are stored encrypted, with optional end-to-end-encrypted iCloud sync across your Macs.
Which authentication methods are supported?
Password and SSH-key sign-in (Ed25519 / RSA, generated or imported in-app), plus multi-hop jump hosts. A password login can be migrated to key auth in one click. Private keys are stored encrypted and never uploaded to our servers.
Is there a Windows, Linux, or iPhone version?
No. Nexus Shell focuses on macOS (14.2+, Apple Silicon) in exchange for a fully native experience and performance. If you need cross-platform, consider Termius or Tabby.
What exactly separates Free from Pro?
Free covers the core SSH terminal, free forever for personal non-commercial use. Pro adds the live load-monitoring dashboard, terminal AI assistant, SFTP task panel, Docker container management, command history & favorites — and permits commercial use.
How do I get the 7-day Pro trial?
Register a new account and a one-time 7-day full-feature Pro trial starts automatically — once per email and once per device. It reverts to Free at the end: no card required, nothing charged.
Is Nexus Shell open source?
The app itself is not open source, but releases, changelogs, and issue tracking happen in the open on GitHub. All connection configs and SSH keys stay on your Mac, and the privacy policy spells out exactly what we never collect.