In development · Windows and Android

Your servers, one tap away, on every device.

Rooteus is an SSH client built for people who look after their own servers. A fast terminal, file transfers, tunnels and an encrypted vault, the same on your PC and your phone.

Get early access See what it does

# Agent · Can use: web-01, db-01
you › why is the disk on web-01 almost full?

web-01 · Read-only · approved
$ du -xh /var --max-depth=2 | sort -h | tail -3
 4.1G  /var/lib/docker
 9.8G  /var/log/journal
  15G  /var

agent › The systemd journal uses 9.8 GB.
Limiting it to 1 GB frees about 8.8 GB:
  journalctl --vacuum-size=1G
Destructive · waiting for your approval

Everything you reach for over SSH

Built in Rust, drawn with its own lightweight interface: quick to start, light on battery.

Terminal tabs

A real terminal with colors, mouse support and tabs. On the phone, an extra row of keys for Ctrl, Esc, Tab and arrows.

⇅

Files over SFTP

Browse, upload and download files and whole folders. Transfers pick up where they left off if the connection drops.

⇄

Tunnels and jump hosts

Local, remote and SOCKS forwarding, and hosts reached through a bastion, set once per host and started on connect.

🔑

Encrypted vault

Passwords and private keys are encrypted with your master password (Argon2id and XChaCha20-Poly1305) and never stored in plain text.

☁

Sync through Google

Sign in with Google on each device and your hosts, keys and trusted servers follow you, encrypted end to end before they leave the device.

✦

An agent that asks first

Ask in plain language; the agent proposes commands with a risk label and runs them only when you approve. Bring your own key from Anthropic, OpenAI, Google, OpenRouter and others.

Your data stays yours

Rooteus has no servers and no accounts of its own. Read the full privacy policy.

Local first

Hosts, keys and settings live on your device. Connections go straight from your device to your servers.

No analytics, no tracking, no ads.

Encrypted before it syncs

Sync stores one encrypted file in a private Rooteus folder in your own Google Drive. Google keeps it but cannot read it, and Rooteus cannot see any of your other files.

Your AI key, your provider

The agent talks directly to the AI provider you choose, with your own key. Passwords and keys are removed from command output before anything is sent.

Open where it matters

The SSH engine, terminal, vault, sync and the agent's safety rules are open source under the Apache 2.0 license, so anyone can check them.