Hatoba

Open-source desktop SSH client with an AI assistant and end-to-end encrypted sync through your own Cloudflare account

Download for WindowsView on GitHub

Version 0.2.0 for Windows, Linux, and macOS

Hatoba with the AI assistant beside a terminal, after it found and fixed an nginx 502 error

An AI assistant beside every terminal

Describe the problem in the panel next to your terminal. The assistant reads the screen, runs commands, and reads and edits files on the host to find the cause and fix it.

  • Each command waits for your approval, and you can edit it before it runs. In Auto mode, a model you choose approves the safe ones.
  • Every file it changes shows a diff that you can revert.
  • Type / for commands and skills, and @ to attach files from the host. Add your own skills and MCP servers.
  • Use any model with an OpenAI-compatible or Anthropic API, including local ones.
The approval card for a command the assistant wants to run

Sync through your own Cloudflare account

Hatoba deploys a Worker and a D1 database to your Cloudflare account, then keeps your hosts, keys, and AI conversations in sync between your devices. The free plan usually covers personal use.

  • End-to-end encrypted: data is encrypted on your device before it leaves, so the Worker and the database hold only ciphertext.
  • No Hatoba server: sync runs entirely in your account.
  • Optional: everything works offline without it.
The Cloud Sync page with the connection, the devices, and the encryption notice

Everything you need from an SSH client

The dashboard with the CPU, memory, and disk usage of every host
Hosts
Groups, tags, favorites, and fuzzy search. Import ~/.ssh/config, connect through ProxyJump or a SOCKS5 or HTTP proxy, or type ssh user@host to connect without saving a host.
Dashboard
The status, CPU, memory, disks, and network of every saved host on one page, read over SSH with nothing to install on the servers.
Terminal
Tabs, truecolor, CJK input methods, search, clickable links, and a confirmation before a multi-line paste.
SFTP
A file panel beside the terminal, with drag-and-drop upload and downloads that you can cancel.
Port forwarding
Local forwards that can start with the connection.
Keys
Passwords, Ed25519, ECDSA, and RSA keys, ssh-agent, and keyboard-interactive 2FA. Import OpenSSH, PEM, and PuTTY keys, or generate new ones.

Encrypted on your device

A master password unlocks your vault. Keys are derived from it with Argon2id, and every item is encrypted with AES-256-GCM before it is stored or synced. If you forget the master password and lose the recovery code, your data cannot be recovered.

Hatoba is open source under the MIT license, so you can check how it handles your data.

Read the security model

Get Hatoba

Free and open source, for Windows 10 and 11, Linux on x86_64, and Apple Silicon Macs (experimental).

Download for WindowsAll downloads