XSSH

Extended SSH infrastructure and secure access tooling

Just SSH, extended properly.


A modular platform built on top of SSH to manage access, devices and remote systems in a simple, auditable and secure way.

Contact

What is XSSH

XSSH extends the traditional SSH model into a structured infrastructure layer.

It’s a professional workspace for operating servers, designed to reduce cognitive load, replace scattered tools, and give you full control over your infrastructure.

It provides controlled entry points, access policies and orchestration mechanisms while preserving the simplicity and transparency of SSH.

– No proprietary tunnels.
– No heavy agents.
– No opaque control planes.


What makes xssh different?


🧠 A workspace, not just connections

xssh remembers your infrastructure so you don’t have to.

  • Local host inventory with names, groups, tags, and notes
  • Instant search and filtering
  • Connect by host name instead of forgotten IPs
  • History and quick reconnect to the last host

👉 You work with context, not loose server lists.

🔐 Local-first, secure by design

xssh does not depend on any external service.

  • All data lives on your machine
  • No accounts, no mandatory cloud, no telemetry
  • No intermediate servers
  • Full user control at all times

Built for professional and corporate environments.

🔄 End-to-end encrypted sync

Sync your workspace across devices without giving up control.

  • True E2E encryption (Argon2id + ChaCha20-Poly1305)
  • Uses your own Git repository (GitHub, GitLab, or self-hosted)
  • Explicit push / pull — never automatic
  • The passphrase is never stored

👉 Your infrastructure, synced — on your terms.

🗄️ Built-in secrets vault

Robust secret and key management, without external tools.

  • Passphrase-encrypted vault
  • Device key recovery
  • Integrity verification
  • Passphrase rotation without data loss

Designed to survive lost machines and human mistakes.

🖥️ A real terminal, fully integrated

This is not a pseudo-terminal.

  • Terminal engine based on Alacritty
  • Full support for ncurses apps (vim, htop, top)
  • 256 colors, true RGB, large scrollback
  • SSH sessions and local shells in parallel panes

xssh is a real working environment, not a wrapper.

🧩 Host intelligence

xssh understands the server you connect to.

  • Automatic OS, kernel, uptime, and IP detection
  • Capability scanning based on what’s actually installed
  • Per-session caching for zero friction
  • No manual configuration required

👉 The tool adapts to the server — not the other way around.

⚡ Smart snippets

Run commands with intent, not from memory.

  • Curated library of professional snippets (Docker, PostgreSQL, systemd, networking…)
  • Automatically filtered by host capabilities
  • Interactive variable substitution
  • Risk levels: Safe / Warning / Danger

Less copy-paste. Fewer mistakes. More confidence.

🔎 Context-aware fuzzy UX

Autocomplete that actually helps.

  • Fuzzy matching for hosts, commands, flags, and capabilities
  • Ranked by recent usage
  • Smart synonyms (pg → postgres, k8s → kubernetes)
  • Suggestions adapt to the connected host

👉 Guidance without getting in your way.

📂 Integrated SFTP file browser

Manage files without leaving your workflow.

  • Dual-pane browser (local + remote)
  • Background transfers
  • Non-blocking progress indicators
  • Common file operations with minimal friction

Everything where you already work.

🌐 Built-in port forwarding and proxy

Daily SSH tunneling, done right.

  • Local tunnels (-L)
  • Dynamic SOCKS5 proxy (-D)
  • Managed directly from the TUI
  • List and stop active forwards

No external scripts. No extra terminals.

📤 Clean inventory export

xssh never locks you in.

  • Export hosts as JSON, YAML, CSV, or Ansible INI
  • Filter by group, tags, or free-text search
  • Streamed to stdout, fully pipeable
  • Secrets and internal IDs are never exported

Designed to coexist with your existing tooling.

🤖 AI assistant integration (MCP)

xssh acts as a structured source of truth.

  • Built-in MCP server
  • Access to inventory, facts, and capabilities
  • Read and write tools
  • JSON-RPC 2.0 over stdio

Ready for AI-assisted workflows without compromising security.

🧰 Full-featured CLI

Everything is scriptable.

  • All operations available without the TUI
  • Structured JSON output
  • –raw mode for non-mutating connections
  • Documented exit codes

Ideal for automation, CI, and advanced workflows.

🩺 Professional diagnostics

Less time debugging tooling.

  • Environment and dependency checks
  • Vault and sync health
  • SSH key permissions
  • Actionable error reports

Because professional tools should diagnose themselves.



    Who xssh is for

    Sysadmins and SREs
    DevOps working with real infrastructure
    Engineers who live in the terminal
    Teams that don’t want SaaS for server access

    What xssh is not
    ❌ Not a configuration management system (Ansible, Puppet…)
    ❌ Not a cloud service
    ❌ Not a simple SSH client

    xssh focuses on operating infrastructure, not imposing workflows.


    Product status
    xssh is currently in private beta.
    We’re looking for users who:

    – manage real infrastructure
    – care about security and control
    – want to help shape the product

    Why XSSH

    XSSH keeps remote access simple, explicit and under your control.

    Try it.