> security

Built to be trusted with your servers.

  • Signed and notarized

    Signed with a Developer ID and notarized by Apple. macOS checks every build before it opens.

  • Sealed secrets

    Passwords are sealed with AES-256-GCM. The key lives in the macOS Keychain.

  • Locked when you step away

    Touch ID, a PIN or a password. Only a sealed hash of the PIN or password is kept.

  • Nothing on the command line

    Passwords never reach a command line or a process list.

  • System OpenSSH

    Sessions use the OpenSSH client of macOS as it is, with your config and keys.

  • No agent on your servers

    The Live Monitor reads metrics over the same SSH connection. Nothing to install.

  • Your Claude account stays yours

    Plan usage is shown without reading any credentials.

  • Nothing secret logged or shared

    The activity log and the MCP server never carry passwords or keys.