Install, licensing, connections, AI integration and security, answered.
SSHive is on the App Store. On a Mac, open the Mac App Store and search for SSHive, or use the download page. On iPhone and iPad, open the App Store. It is a Universal Purchase: buying Pro once covers all three platforms. A direct download is also offered for macOS outside the App Store.
macOS 13 Ventura or later on Mac, iOS 17 or later on iPhone, and iPadOS 17 or later on iPad. The Mac build is a Universal Binary that runs natively on Apple Silicon (M1, M2, M3, M4) and on Intel x64.
No. SSHive has no account, no sign-up and no login. Nothing about your servers is sent to us. The app works fully offline apart from the connections you open yourself.
The MCP server for AI assistants, broadcast mode, remote (-R) and SOCKS5 (-D) tunnels, jump hosts, the built-in OTP authenticator, shared accounts and session logging are macOS features. SSH, SFTP, RDP, VNC, local tunnels, snippets and the network tools run on all three platforms. The VPN client is specific to iPhone and iPad.
The SSH terminal, the SFTP file manager with uploads up to 10 MB per file, 2 simultaneous sessions, 5 saved profiles, 1 local SSH tunnel (-L), the built-in snippet library plus 3 custom snippets, 3 OTP tokens and the dark theme. There is no trial period and no expiry: the free tier stays free.
Unlimited sessions and profiles, unlimited SFTP transfer size, RDP and VNC, remote (-R) and SOCKS5 (-D) tunnels, broadcast mode, the MCP server, jump hosts, shared accounts, encrypted profile export and import, session logging, opt-in iCloud sync, unlimited custom snippets and OTP tokens, and every theme.
Pro is a one-time purchase of $9.99 on the App Store. There is no subscription and no recurring fee. It is a Universal Purchase, so buying it once unlocks Pro on Mac, iPhone and iPad with the same Apple ID.
Open Settings, go to Purchases, and tap Restore Purchases. This re-confirms your existing purchase with Apple and costs nothing. It happens when the StoreKit receipt has not refreshed yet on the first launch after an update. A permanent fix is on the roadmap; if restoring does not work, email contact@netmesafe.com with your App Store country.
In the connection dialog, use the import button and pick Import from ~/.ssh/config. SSHive parses Host, HostName, User, Port, IdentityFile and ProxyJump entries and creates one profile per host, preserving your folder hierarchy. It also imports PuTTY registry exports, Royal TSX .rtsz files and cleartext MobaXterm.ini files.
Yes, two ways. Pro users can turn on opt-in iCloud sync, which keeps profiles in step across Mac, iPhone and iPad through your own private iCloud database. Alternatively, export an encrypted .sshive file protected by a passphrase (scrypt key derivation and AES-256-GCM) and import it on the other device.
Tunnels are configured per profile in the Advanced section of the profile dialog and start automatically when the connection is established. Local forwards (-L) map a port on your machine to a host reachable from the server. Remote forwards (-R) and the SOCKS5 dynamic proxy (-D) are Pro features on macOS. The free tier includes one local tunnel.
Connection profiles live in the application support directory. Passwords and private key passphrases are never stored next to them: they go into the macOS Keychain through Electron's safeStorage, or the iOS Keychain behind Face ID or Touch ID on iPhone and iPad. Host fingerprints are kept in a known-hosts store you can review.
Yes, on macOS. SSHive runs a local MCP (Model Context Protocol) server on 127.0.0.1 port 49422, protected by a Bearer token, and exposes 11 tools covering SSH command execution and full SFTP file management. Turn it on in Settings, MCP: SSHive writes the configuration for Claude Code and Cursor itself, and shows a copy-paste block for Claude Desktop. MCP is a Pro feature.
No. The MCP server exposes sessions, not credentials. Your keys, passphrases and host configuration stay in the Keychain. An assistant can run a command on a session you have already opened, but it cannot read your secrets, and it can only reach servers you are currently connected to.
Yes, on macOS. Select some output and ask SSHive to explain an error, or ask a free-form question. It uses your own API key for Anthropic Claude, OpenAI or Google Gemini; the key is stored encrypted in the Keychain and requests go straight from your Mac to the provider you picked. Nothing passes through our servers.
Credentials are encrypted through the operating system Keychain, the app validates every internal call, and the renderer runs sandboxed with context isolation. There is no telemetry and no analytics inside the app, and no network traffic beyond the SSH, SFTP, RDP and VNC connections you open. You can also lock the app itself behind a master password.
Not unless you ask for it. The only optional network feature is iCloud sync, which is off by default, is a Pro feature, and uses your own private iCloud database rather than any server of ours; credentials travel through a separate end-to-end encrypted channel.
Yes. SSHive keeps a known-hosts store and prompts you the first time it sees a server, then warns you if a fingerprint ever changes, which is what protects you from a man-in-the-middle. You can review and remove stored fingerprints from the settings.