missuo / tamio

# Tamio
A native SSH client for macOS: a Ghostty terminal, a dual-pane SFTP browser,
live status for every server, end-to-end encrypted iCloud sync, and an MCP
server so AI agents can work across your hosts with your approval.
Tamio is in early development. The plan is in DESIGN.md. An
iOS version is planned, but work on it has not started yet.
## Install
With Homebrew:
 [code] 
Or download the disk image from Releases.
Tamio needs macOS 14 or later, and updates itself.
## Features
### Agents (MCP)
- **A built-in MCP server.** Claude Code, Codex and any other MCP client can
 work on your servers through Tamio. Settings › MCP sets up Claude Code, Codex
 and the Tamio skill in one click.
- **What agents can do:**
 - see your servers and their live CPU, memory, disk, load and traffic;
 - run commands or saved snippets on one server or many at once;
 - add or change servers, SSH keys, snippets and port forwards;
 - start and stop port forwards.
- **Every server operation leaves a history.** Each command an agent runs and
 each change it makes is recorded on that server's Activity: which agent, on
 which Mac, what it ran, and what came back. Agents also log what they did
 outside Tamio (their own `ssh`, `scp`, a deploy).
- **One entry per task, not per command.** An agent names the goal of each
 step, such as "Install nginx", and every step toward it (the repository,
 `apt update`, the install, its config) is kept as one entry, with each step
 and its result under it. The next agent sees what was done at a glance.
- **Filter by server.** Settings › MCP shows the activity of every server, or of
 the one you pick.
- **The history outlives the session.** An agent's session may be lost when you
 switch agents, swap devices or change computers. The record stays with the
 server, and syncs across your Macs, so the next agent knows what the last one
 did there.
### Security
- **Agents never see a secret.** No tool returns a password, a private key or a
 passphrase. An agent can add a key, or have Tamio generate one, and gets back
 only the public half.
- **You approve first.** Every command, change and port forward an agent asks
 for waits for you, showing exactly what will run and where. Allow it once,
 for an hour, or always, for an agent left to work on its own; Settings › MCP
 lists the agents always allowed, and revokes them.
- **Only you can reach it.** The MCP server listens on a Unix socket that only
 your own user account can open. It doesn't use a network port.
- **Encrypted on disk.** Servers and identities are stored encrypted, under a key
 kept in your Keychain.
- **End-to-end encrypted sync.** Data is encrypted on your Mac, under a
 passphrase only your devices know, before it goes to iCloud. Apple cannot read
 it.
- **Host keys are checked.** A server's key is trusted once, and a changed key
 is refused.
### Servers and terminal
- A fast terminal, built on Ghostty.
- Servers with labels, groups and tags; a password or an SSH key to sign in.
-