sshm

module

v0.4.0 Latest Latest Go to latest Published: Jun 16, 2026 License: MIT

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/michael-ltm/sshm

Links

Open Source Insights

README ¶

sshm

A pretty, AI-friendly SSH connection manager.

Single binary on Win/Mac/Linux. Pretty ls with live status. Wizard add. Built-in MCP server for AI assistants (Claude Code, Cursor, Codex, Gemini CLI).

Install

Platform	Command
macOS / Linux (Homebrew)	`brew install michael-ltm/tap/sshm`
Windows (Scoop)	`scoop bucket add michael-ltm https://github.com/michael-ltm/scoop-bucket && scoop install sshm`
Anywhere (Go)	`go install github.com/michael-ltm/sshm/cmd/sshm@latest`
Direct download	GitHub Releases — tar.gz / zip per OS+arch

Quickstart

sshm add               # interactive wizard
sshm ls                # see all servers + status
sshm c my-host         # interactive shell
sshm exec my-host 'uptime'
sshm test --all        # parallel reachability check

Features

TOML config at ~/.config/sshm/config.toml (XDG) or %APPDATA%\sshm\config.toml (Windows)
add (huh wizard) / edit / rm / show / ls
connect (interactive shell) / exec (one-off) / test (single + --all)
status (remote resource snapshot) / init (baseline hardening)
gen-key (ed25519) / copy-id (one-shot password, never stored)
mcp — built-in MCP server so AI assistants (Claude Code, Cursor, Codex, Gemini CLI) can manage your servers — including file transfer (upload/download) and host-key verification (TOFU). See docs/ai-integration.md.
--json on every command for scripting and AI integration
Pretty list with unicode/ascii icons (auto-detected)
Proxy/jump-host connections: per-host SOCKS5 (proxy), ProxyJump (proxy_jump), ProxyCommand (proxy_command); SOCKS5 auto-detected from ALL_PROXY/HTTPS_PROXY env vars (zero-config); failed proxy attempts fall back to direct

AI integration

claude plugins marketplace add michael-ltm/sshm
claude plugins install sshm-skill@sshm

Then ask your assistant to "check the status of my prod server" or "deploy the latest code to staging". sshm's MCP tools are audited, mask secrets, and block dangerous commands. See docs/ai-integration.md and docs/security.md.

Roadmap

v0.3 ✓ — Host-key TOFU verification (strict known_hosts still v1.0), parallel exec_multi, upload/download single files, exec timeout + detach — shipped
v0.4 ✓ — Proxy/VPN-aware dialing: SOCKS5 (proxy), ProxyJump, ProxyCommand; SOCKS5 auto-detected from env; automatic direct fallback — shipped
v0.5 — Import/export ~/.ssh/config, tags/groups, OS keychain
v1.0 — Port forwarding, SFTP browse, signed release artifacts, strict known_hosts enforcement

See docs/specs/2026-05-13-sshm-design.md for the full design.

Release Process (maintainers)

Releases are automated by GoReleaser on tag push:

git tag v0.1.0 && git push origin v0.1.0

Required repo secrets: HOMEBREW_TAP_TOKEN, SCOOP_BUCKET_TOKEN — PATs with contents:write on homebrew-tap and scoop-bucket.

License

MIT — see LICENSE.

Directories ¶

Path	Synopsis
cmd
sshm command
internal
bootstrap Package bootstrap runs an embedded baseline-hardening script on a remote server: it installs jq/curl/fail2ban, enables fail2ban, and reports the sshd auth configuration.	Package bootstrap runs an embedded baseline-hardening script on a remote server: it installs jq/curl/fail2ban, enables fail2ban, and reports the sshd auth configuration.
commands Package commands wires every CLI subcommand to the cobra root.	Package commands wires every CLI subcommand to the cobra root.
config Package config holds the persistent configuration model for sshm.	Package config holds the persistent configuration model for sshm.
keys Package keys manages SSH keypair generation and remote installation.	Package keys manages SSH keypair generation and remote installation.
mcp Package mcp exposes sshm's functionality as Model Context Protocol tools over stdio so AI assistants can manage servers.	Package mcp exposes sshm's functionality as Model Context Protocol tools over stdio so AI assistants can manage servers.
safety Package safety gates dangerous remote commands, masks sensitive data in output, and records an audit trail.	Package safety gates dangerous remote commands, masks sensitive data in output, and records an audit trail.
ssh Package ssh wraps golang.org/x/crypto/ssh with sshm-specific construction helpers and a small Client that owns one connection.	Package ssh wraps golang.org/x/crypto/ssh with sshm-specific construction helpers and a small Client that owns one connection.
status Package status provides cheap reachability probes for the server list.	Package status provides cheap reachability probes for the server list.
ui Package ui holds rendering primitives — icons, color styles, and table formatting — used by CLI commands.	Package ui holds rendering primitives — icons, color styles, and table formatting — used by CLI commands.
wizard Package wizard implements interactive forms for sshm add/edit.	Package wizard implements interactive forms for sshm add/edit.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL