Feature · Host organization

Your fleet stays readable as it grows.

Organize SSH hosts in the same local list you connect from. Groups hold the hierarchy. Tags cover the labels that cut across it, so managing multiple SSH connections does not depend on scrolling.

Download SSH connection manager Add an SSH host Where host data is stored
Bastion Terminal · hosts
Bastion Terminal
Local-first SSH workspace
Search hosts, tags, groups…Ctrl+K
Filters
tag: us-east
clear all
Production3
  • Contabo Serverroot@10.2.44.18
    #web#us-east2 min ago
    key
  • Scanner Serverdeploy@10.4.18.22
    #web#us-east14 min ago
    key
  • Harbor Gateops@10.8.30.41
    #edge#us-east1 hour ago
    key
Staging2
  • Clinic APIapp@10.6.44.9
    #api#us-eastyesterday
    key
  • GATE-014P02ubuntu@10.0.14.2
    #edge#us-east3 days ago
    key
Kubernetes2
Local1

Groups

Nest hosts into logical buckets by team, environment, region, or any axis that fits your fleet.

Tags

Cross-cutting labels that complement groups. A host can be `prod`, `web`, and `us-east` at the same time.

Search

Fuzzy search across name, hostname, group, and tags. Filter as you type from anywhere in the app.

Sort

Sort by name, last connected, or any custom field. Your most-used hosts surface first.

Drag reorder

Reorder hosts and groups with the mouse. The order you set is the order you see next session.

Bulk operations

Multi-select to apply tags, move hosts, or run a snippet against the whole selection.

Edit host

Edit everything in one place.

Label, group, address, port, user, auth method, identity, tags, and notes are all editable inline. Nothing hides behind a modal you have to remember to open.

  • Auth method stored per host, not per app.
  • Tag chips inline, with type-and-Enter to add.
  • Host key and persistence summary on the right.
Bastion Terminal · edit host
Bastion Terminal
Local-first SSH workspace
Host details
Label
Contabo Server
Group
Production
Address
10.2.44.18
Port
22
User
root
Authentication
id_ed25519_laptop
Ed25519 · SHA256:8a72…e1d0 · keychain
Tags
type and press Enter
webus-easttls-1.3add tag
Notes
Primary east-coast web. Behind elastic LB. Re-image via ops-pipeline.
Host key trusted
ED25519 SHA256:8a72…e1d0
First seen 2026-01-04
Persisted
  • bastion.db· local SQLite on this device
  • Credential Manager· private key material only
Delete host
Removes the host, its tag bindings, and the trusted fingerprint. Cannot be undone.
Bulk operations

Tag, move, run on a selection.

Multi-select hosts and apply a tag, move them to a group, run a snippet against the whole selection, or delete. Multi-select auto-clears on tab change.

  • Apply tag → writes to every selected host in one SQLite transaction.
  • Run snippet → opens one tab per host with the snippet pre-filled.
  • Delete → requires a separate confirmation per host.
Bastion Terminal · hosts
Bastion Terminal
Local-first SSH workspace
3 selected· Production · web · us-east
  • Contabo Serverroot@10.2.44.18
    #web#us-east
  • Scanner Serverdeploy@10.4.18.22
    #web#us-east
  • Clinic APIapp@10.6.44.9
    #api#us-east
  • GATE-014P02ubuntu@10.0.14.2
Auto-clear on tab changeesc to clear

Every field at hand.

Open a host and you see the same view across the app: connection details, last seen, fingerprint, and the tags and group it belongs to. Nothing is hidden behind a modal you have to remember to open.

  • Edit the name, group, tags, default user, and default auth method inline.
  • Auth method stored per host, not per app.
  • All edits persisted to local SQLite instantly.
host · Contabo Server
name:        Contabo Server
group:       Production
tags:        web, us-east
hostname:    10.2.44.18
port:        22
user:        root
auth:        Private key (keychain)
identity:    ~/.ssh/id_ed25519
fingerprint: ED25519 SHA256:8a72...e1d0
last seen:   2 minutes ago