A high-performance, native, cross-platform SSH client written in Rust, with a GPU-rendered interface: Xshell-style host management, WinSCP-style SFTP and port forwarding, all in one window.
ShellRS brings Xshell-style host management and tabbed terminals, a WinSCP-style dual-pane SFTP browser and SSH port forwarding together in one cross-platform app, which bastion hosts such as JumpServer can launch the way they launch Xshell and WinSCP. It is written in Rust, and its UI is built on GPUI, the GPU-accelerated UI framework of the Zed editor (through gpui-kit). There is no Electron and no JVM.
Hosts, groups, credentials and forwarding rules live in a local SQLite database. Passwords and key passphrases go only into the system keychain (macOS Keychain, Windows Credential Manager, Linux Secret Service); the database never holds a secret. ShellRS also ships a shellrs command that lets AI agents such as Claude Code or Codex run commands and transfer files on your saved hosts without ever seeing a password.
Features
Hosts
Groups nest to any depth; drag to rearrange, type to search.
The remote OS is detected on connect and shown as a badge in the host tree and on tabs (Linux distributions, the BSDs, macOS, Windows).
Three ways to log in: password; no password (the server's none auth, then the SSH agent, then the default keys in ~/.ssh); or a saved credential.
Three ways to connect: directly, through a chain of SSH jump hosts, or through an HTTP or SOCKS5 proxy. Terminals, SFTP, port forwards and the CLI all follow it.
"Test connection" performs a real login and explains any failure.
Terminal
Tabbed remote and local terminals (built on alacritty_terminal); full-screen programs like vim and htop work as expected.
Each tab shows the SSH round-trip latency live.
Find (smart case) and local clear; configurable font, size and line height.
Drag tabs into side-by-side or stacked splits to watch a terminal and SFTP together.
Right sidebar tools
They follow the current remote terminal and read and run on that terminal's own connection, with no second login. ⌘⌥B (Ctrl+Alt+B elsewhere) shows or hides them.
System monitor: system details, CPU (per core too), memory, network rates and disk use, refreshed every 2 seconds.
Network connections, processes and services: search and filter, process details, ending processes, starting, stopping and restarting systemd services, switching them on at boot, and their logs. These three and the monitor are for Linux only.
Docker: containers grouped by compose project, with start, stop, restart, details and logs, plus volumes, images and networks. When not root, passwordless sudo is used (for services as well).
Command history reads ~/.bash_history on the host, and snippets, shared by every host, can be sorted into categories; click one to type it into the terminal, or run it straight away.
SFTP
A dual-pane browser modeled on WinSCP Commander: symmetric local and remote panes with WinSCP's columns, path labels, bookmarks and shortcuts (F5, F2, F7, F8…).
Upload and download by dragging or by shortcut, recursively. Start new transfers while one runs; they wait in a per-tab transfer queue.
Resumable transfers: data goes to a .filepart first, dropped connections are retried after 1, 3 and 10 seconds, and after a restart ShellRS offers to resume the same transfer.
Delete (local items go to the Trash), rename, create, and change permissions (a 3×3 grid plus octal, optionally recursive).
Built-in editor: double-click a text file to edit it, ⌘S writes it back in place, after checking nobody else changed it; syntax highlighting for common formats. Images and Markdown can be previewed.
Each SFTP tab has its own connection and asks only for the SFTP subsystem, so no shell is needed on the server.
Opening from a bastion host
Launched the way Xshell and WinSCP are: in the client of a bastion host such as JumpServer, set ShellRS as the SSH or SFTP client. An ssh:// link opens a terminal, an sftp:// link an SFTP tab.
Understands Xshell's -url and -newtab and WinSCP's /sessionname=. When ShellRS is already running, the link opens there.
What opens is an unsaved external connection: it stays out of the host list, keeps the link's password in memory only and goes away with its tabs. Each connection uses a single channel, so bastion hosts that allow no more still work. See the user manual.
Port forwarding
Local (-L), remote (-R) and dynamic (-D, SOCKS5 / SOCKS4) forwards.
The rule dialog draws a live diagram and a one-line explanation of where connections enter and where they go.
Every rule keeps its own SSH connection and reconnects three times after a drop; rules can start with ShellRS.
Credentials
Password, key and SSH agent credentials that many hosts can share. Change a credential and every host using it follows.
Keys can reference a file on disk, be pasted in, or be generated on the spot (Ed25519 or RSA 4096), with the public key one click away.
A CLI for AI agents
shellrs hosts / credentials / exec / upload / download / sync: manage hosts and credentials, run commands, move and sync files. The running ShellRS logs in on the command's behalf, so the command itself never reads a password or private key.
Install shellrs into your PATH and an Agent Skill for Claude Code, Codex, OpenCode or WorkBuddy from the settings page.
Security and updates
Secrets stay in the system keychain. Host keys are recorded in ShellRS's own known_hosts, never in ~/.ssh.
In-app updates: the update manifest is minisign-signed and each package is checked against its SHA-256. Updates download in the background and install on restart or quit. There are stable and beta channels, and an update check sends only the version, OS and CPU architecture.
Anonymous usage statistics: sent to Aptabase with only the version, OS, CPU architecture and how often each feature is used, never hosts, credentials, commands or any identifier. Turn them off in Settings › About.
Screenshots
Dock splits: a remote terminal and SFTP stacked in one window
Right sidebar tools: Monitor, Processes, Services, Docker and Network
WinSCP-style SFTP: highlight selection and a transfer queue with progress, speed and time left
Port forwarding: the diagram shows where each connection goes
Download
Download from shellrs.com/download, which offers the package for your system, or from GitHub Releases. Betas are marked Pre-release there; to get new features early, switch the update channel to Beta in Settings › About.
System
Package
Notes
macOS 11+ (Apple Silicon)
ShellRS-<version>-macos-aarch64.dmg
Signed and notarized. Open the DMG and drag ShellRS into Applications
macOS 11+ (Intel)
ShellRS-<version>-macos-x86_64.dmg
Signed and notarized. Open the DMG and drag ShellRS into Applications
Windows x64
ShellRS-<version>-windows-x86_64-setup.exe
Installs per user, no administrator rights needed. The installer is not signed yet; if SmartScreen stops it, choose "More info › Run anyway"
Linux x64
ShellRS-<version>-linux-x86_64.AppImage
chmod +x and run. Needs glibc 2.35 or newer (Ubuntu 22.04, Debian 12 and later)
Every package comes with a minisign signature (.minisig), and each release has a SHA256SUMS file.
Once installed, ShellRS keeps itself up to date: it checks, downloads and verifies new versions in the background, then shows an icon in the top-right corner of the title bar; click it and choose "Restart to update", or just quit and the update is installed on the way out. Automatic updates are unavailable when ShellRS runs from inside the DMG or outside the Applications folder, or on Linux when it isn't run as the AppImage.
Getting started
Click "New host…" in the title bar (⌘N, or Ctrl+N on Windows and Linux) and fill in the address, port and login. Passwords go into the system keychain.
Double-click a host to open a terminal. On the first connection you're asked to confirm the host key.
Right-click a host and choose "Open SFTP", or click "SFTP" at the right of the terminal's tab bar. Drag files between the two panes to transfer them.
The three icons after "ShellRS" in the title bar switch the sidebar between hosts, port forwards and credentials.
⌘T (Ctrl+T) opens a local terminal. Drag a tab to the top, bottom, left or right edge of the tab area to split it.
For AI agents
In Settings › External CLI, turn on Enable external CLI, then install the shellrs command and the Agent Skills. Your agent can then use the hosts you have saved:
shellrs hosts list -q web # list hosts and their IDs
shellrs exec <ID> "uptime && df -h" # run a command; the exit code is the remote one
shellrs upload <ID> ./dist/app.tar.gz /opt/app/ # upload
shellrs download <ID> /var/log/syslog ./logs/ # download
shellrs sync <ID> ./dist /opt/app --delete # sync a folder, skipping unchanged files
The command hands each request to the running ShellRS, which logs in with the saved settings and keychain. An unknown host or a missing password fails right away with a stable error code instead of a prompt that would hang the agent. See the user manual for details.
Building from source
Install rustup. The repository's rust-toolchain.toml pins Rust 1.98.1, which rustup installs on the first build.
git clone https://github.com/since2006/shell-rs.git
cd shell-rs
cargo run
The first build compiles the whole GPUI stack and takes a while. See development notes (in Chinese) for the Linux system packages and how to run the tests.
Documentation
Apart from the user manual, the documentation is in Chinese for now:
User manual: every feature in detail, with shortcuts
Development: building, testing, the data directory
Releasing: packaging, signing and publishing updates
Directory sync, filtering, file search and a directory tree in SFTP
Keeping the Dock layout across restarts
Combining a jump host chain with a proxy, and HTTPS proxies
Managing port forwards and credentials through the external CLI
Code signing for the Windows installer
Contributing
Issues and pull requests are welcome on GitHub. Architecture notes and code conventions are in CLAUDE.md (in Chinese). Before sending a change, make sure these pass:
Simple Icons: the OS logos on host badges and the Docker logo in the right sidebar (CC0)
WinSCP and Xshell: the interaction designs ShellRS follows
License
ShellRS is licensed under the GNU General Public License v3.0. You may use, modify and redistribute it, commercially or not, but any modified version you distribute must come with its complete source code under the GPL-3.0 as well.
What is this?ShellRS is a native, cross-platform SSH client that combines Xshell-style host management, tabbed terminals, a WinSCP-style dual-pane SFTP browser and SSH port forwarding in one window.
Is this built on Electron like most cross-platform desktop apps?No. It's written in Rust with GPUI, the GPU-accelerated UI framework from the Zed editor, instead of Electron or a JVM.
How do I get it running?Download the package for your OS from shellrs.com/download or GitHub Releases (DMG for macOS, EXE installer for Windows, AppImage for Linux), then click 'New host' to add a server and double-click it to connect.
Any rough edges I should expect right now?The Windows installer isn't code-signed yet, so SmartScreen may need 'More info > Run anyway'. The system monitor, processes, services and Docker sidebar tools only work against Linux hosts, and directory sync/search in SFTP is still on the roadmap.
Does it need Apple Silicon, or does it work on Intel Macs and Linux too?Both Mac architectures are covered with separate signed, notarized DMGs, plus a Windows x64 installer and a Linux x64 AppImage.
Where do my saved passwords and connection data actually go?Passwords and key passphrases are stored only in the OS keychain (macOS Keychain, Windows Credential Manager, Linux Secret Service) and never in the local SQLite database. Anonymous usage stats (version, OS, CPU architecture, feature usage) go to Aptabase and can be turned off.
What does the GPL-3.0 license mean if I modify ShellRS?You can use and redistribute ShellRS freely, commercially or not, but any modified version you distribute must ship its complete source code under GPL-3.0 as well.
What does the shellrs CLI let AI agents like Claude Code do?It exposes hosts, credentials, exec, upload, download and sync commands; the running ShellRS app logs in on the agent's behalf, so the command itself never sees a password or private key.
Can SFTP transfers survive a dropped connection?Yes. Data is written to a .filepart first, drops are retried after 1, 3 and 10 seconds, and after a restart ShellRS offers to resume the same transfer.
How does port forwarding work here?It supports local (-L), remote (-R) and dynamic SOCKS (-D) forwards, each shown as a live diagram, with its own SSH connection that auto-reconnects up to three times if dropped.
Can ShellRS be launched from a bastion host like Xshell or WinSCP is?Yes, it understands Xshell's -url/-newtab flags and WinSCP's /sessionname= so a bastion such as JumpServer can open ShellRS directly, using an unsaved connection that stays out of the host list.
ShellRS is a native, cross-platform SSH client that combines Xshell-style host management, tabbed terminals, a WinSCP-style dual-pane SFTP browser and SSH port forwarding in one window.