visionOS native SSH · pre-alpha

The SSH terminal Apple Vision Pro deserves.

A native visionOS terminal built from scratch for spatial computing. Float terminal windows in your space, run AI privately on-device, and connect to your entire Tailscale network with one tap.

  • Interactive PTY sessions
  • On-device AI
  • Tailscale auto-discovery
  • Secure Enclave keys
glas.sh terminal floating in a living room on Apple Vision Pro, running htop over SSH with a glass control ornament
A live htop session floating in your space — full PTY, truecolor, glass ornament controls.

Native stack

Swift + SwiftUI + SwiftTerm + Citadel, purpose-built for visionOS 26.

Private by design

On-device AI via Apple Foundation Models. No cloud, no subscriptions.

Your whole tailnet

Tailscale auto-discovery surfaces every device in one tap.

Feature set

Built for real shell work, not toy demos.

Interactive PTY sessions

Full PTY shells with ANSI/truecolor SwiftTerm rendering, dynamic resize, in-terminal search, and command snippets — not one-off command execution.

On-device AI

Apple Foundation Models power a command assistant, automatic error explainer, and session summaries. Everything runs on your Vision Pro — nothing leaves the device.

Tailscale auto-discovery

Add an API key or OAuth credentials once and glas.sh lists every device on your tailnet. Tap, authenticate, connect. Mobile devices are filtered out automatically.

SFTP file browser

Breadcrumb navigation, batch download and delete, streamed transfers with progress, file info sheets, and recursive server-side find search.

Port forwarding

Local (-L), Remote (-R), and Dynamic/SOCKS5 (-D) tunnels with full IPv4, domain, and IPv6 support.

Multi-hop jump hosts

Chain A → B → C with a reorderable hop list and cycle detection. Single-hop configs stay backward compatible.

Secure Enclave keys + host trust

P-256 keys generated inside the hardware chip with Optic ID gating, plus Ask/Strict/Insecure host-key verification and per-server fingerprint trust.

Spatial features

Immersive focus mode with Digital Crown depth, spatial server-health widgets, SharePlay session sharing, and per-window glass material and tint.

Session recording

Records to asciicast v2 (asciinema-compatible) with timestamps, plus AI-generated session summaries and an auto-record option.

Screens

Real captures from Apple Vision Pro.

glas.sh AI Assistant turning 'List files in my Downloads folder. Filter by images' into a find command tagged Safe, with Run and Copy actions
On-device AI: plain English in, a risk-rated shell command out.
glas.sh SFTP file browser open over a terminal session with breadcrumb navigation, a directory listing, and a filter field
The SFTP browser opens right over your session — filter, browse, batch transfer.

Workflow

From connection to command loop in seconds.

  1. 1. Pick a server

    Filter by favorites, recents, tags, search, or your live Tailscale tailnet.

  2. 2. Verify trust

    Review the host key fingerprint and choose your trust behavior.

  3. 3. Work in-terminal

    PTY shells with dynamic resize, on-device AI help, SFTP, and forwarding.

glas.sh Connections window showing the All Servers list with a sidebar for Favorites, Recent, Tags, and Tailscale
Connections: favorites, recents, tags, and one-tap Tailscale discovery.
Abstract Secure Enclave chip geometry with translucent interface layers and circuit traces
Secure Enclave-backed key generation and hardware trust.

Security posture

Direct about what ships now and what is in progress.

  • Live now

    Password auth, SSH key auth (RSA/Ed25519), and Secure Enclave-backed P-256 key generation gated by Optic ID.

  • Live now

    Host-key verification modes (Ask / Strict / Insecure) with trust prompts and per-server trust storage.

  • Live now

    Port forwarding (Local / Remote / Dynamic SOCKS5) and single- or multi-hop jump host chains.

  • Live now

    Credentials stored in Keychain with a shared access group; on-device AI keeps prompts and output off the network.

  • In progress

    SSH agent authentication path (UI present, not yet wired).

Try the project, shape the roadmap.

glas.sh is open source and actively iterating toward deeper SSH parity.