GitHub - scarletkc/Hatoba: Open-source desktop SSH client with an AI assistant and end-to-end encrypted sync through your own Cloudflare account

Hatoba is an open-source desktop SSH client combining host management, terminals, SFTP, port forwarding, an AI assistant, and optional end-to-end encrypted Cloudflare sync.

Visit Website
GitHub - scarletkc/Hatoba: Open-source desktop SSH client with an AI assistant and end-to-end encrypted sync through your own Cloudflare account

Introduction

Overview

Hatoba is an open-source desktop SSH client that brings saved hosts, keys, remote and local terminal sessions, and an AI assistant into one application. It is local-first, works offline, and makes synchronization optional.

The application is designed primarily for Windows, with Linux packages and an experimental macOS build also provided. Its Windows interface supports platform features such as Snap Layouts, Mica, Windows input methods, Segoe UI, and Cascadia fonts.

Key Features

  • Organizes hosts with groups, tags, favorites, fuzzy search, recent connections, online status, configuration import, ProxyJump, and proxy support.
  • Displays server CPU, memory, disks, network, load, and uptime over SSH without installing server-side software.
  • Provides tabbed remote and local terminals with truecolor, CJK input, search, clickable links, and multiline-paste confirmation.
  • Includes an SFTP panel for uploads, downloads, renaming, deletion, and folder creation.
  • Supports local port forwarding and a key vault for importing, generating, copying, and deploying SSH keys.

Security and Sync

Hatoba supports password, Ed25519, ECDSA, RSA, ssh-agent, and keyboard-interactive authentication. It confirms host keys on first connection, blocks connections when a key changes, and can protect the app with a master password, recovery code, and automatic locking.

Optional synchronization uses a Worker and D1 database deployed in the user’s own Cloudflare account rather than a Hatoba-operated server. Data is encrypted on the device before transfer, while incremental sync, reviewable conflict resolution, and device revocation help manage multiple installations.

AI Assistant

An AI assistant sits beside each terminal and can read the terminal screen, run commands, type into the shell, work with files, and search or read web pages. It can operate against a remote host or the user’s computer through a local terminal.

Users can approve actions individually, use an Auto mode in which their selected model approves safe actions, or use a bypass mode. The assistant works with a user-provided OpenAI-compatible or Anthropic API key and supports skills and MCP servers.