noxed — every server, one window

noxed

Search connections… ⌘K

New Connection

Dashboard prod-web-01 db-primary k8s · staging prod-web-01 · sftp

deploy@prod-web-01 00:12:47 CPU ▂▂▃▅▃ 23% MEM 2.1 GB / 7.8 GB Broadcast ⚡ Snippets Files Split

Run Explain Watch 5s ⌘+Enter Save Clear

SELECT u.id, u.email, count(o.id) AS orders FROM users u JOIN orders o ON o.user_id = u.id WHERE o.created_at > now() - interval '7 days' GROUP BY u.id ORDER BY orders DESC LIMIT 50;

Results50ExplainHistory12Saved4 3 cols · 12ms

#	id	email	orders
1	8841	mira@castell.io	14
2	8623	jon@harlow.dev	11
3	8512	ana@quintero.co	9
4	8390	sam@ferris.net	8
5	8217	kei@tanaka.app	7

Filter pods…

Pods

Namespace: default · 6 pods

Name	Ready	Status	Restarts	Age
api-7d9f6c44-2xkql	1/1	Running	0	12d
api-7d9f6c44-9mztr	1/1	Running	0	12d
worker-5b8dd47-ltzzv	1/1	Running	2	4d
worker-5b8dd47-pq2c8	1/1	Running	0	4d
queue-6f4b59-x7jw4	0/1	Pending	0	2m
redis-0	1/1	Running	0	30d

Upload Download Diff

Local

/Users/sean/deploy

Name	Size	Modified
dist	—	Jun 12 18:02
config	—	Jun 10 09:14
docker-compose.yml	1.2 KB	Jun 12 17:55
release-v2.4.1.tar.gz	48.3 MB	Jun 13 11:47
deploy.sh	2.8 KB	Jun 9 16:30

prod-web-01

/srv/app/releases

Name	Size	Modified
v2.4.0	—	Jun 1 10:22
v2.3.9	—	May 24 08:15
current → v2.4.0	—	Jun 1 10:24
.env.production	412 B	May 30 12:01

release-v2.4.1.tar.gz 73% 5 items

All connections healthy | 7 connections configured · 4 active sessions 1 tunnel active Credentials encrypted

features

Your whole fleet, without leaving the keyboard.

Everything rides over plain SSH — no agents to install, no daemons to babysit on the remote side.

SSH terminal

Tabbed sessions with per-host colors, favorites, and project groups. Split into four panes with keystroke broadcast. Import hosts straight from ~/.ssh/config.

Jump hosts, chained

Reach servers behind a bastion with ProxyJump — chains resolve automatically, exactly like your ssh_config already does.

Live metrics

CPU, memory, disk, and load streamed over the connection you already have, right in the session header.

Tunnels & SOCKS5

Local and remote port forwarding plus a SOCKS5 proxy over any saved connection. One-click start/stop, live status in the status bar.

Mission-control dashboard

Reachability, CPU sparklines, memory, disk, load, and uptime for every server at once — with alerts when CPU pins or a disk fills up. Then run one command across the fleet and compare outputs and exit codes side by side.

Docker — no agent

Containers, images, live stats, and streaming logs on any host with the docker CLI, all over plain SSH. Start, stop, restart, remove.

SFTP, beside your shell

A standalone browser or a drawer attached to the live session. Upload, download, rename, chmod, and edit files inline with CodeMirror.

Databases & Redis

Postgres, MySQL, and MariaDB with a schema browser, query history, and EXPLAIN. Redis with a key browser and a guarded CLI — destructive commands are blocked.

Kubernetes

Multi-context dashboard for workloads, services, config, nodes, and events. Streamed pod logs, exec, port-forward, scale, and restart.

⌘K command palette ⌘T new connection ⌘F search scrollback ⌘1…9 jump to tab ⌃Tab cycle tabs

security

Paranoid by design.

The UI is treated as untrusted. Your secrets never touch a config file.

OS keychain onlyCredentials live in the system keychain — macOS Keychain, Windows Credential Manager, or libsecret — never in config files.

Sandboxed rendererContext isolation everywhere. Every IPC handler validates its input, and the main process treats the UI as untrusted.

Lock screenOptional Touch ID, PIN, or password with auto-lock when you step away.

Allowlisted file accessSSH keys and kubeconfigs are only readable from allowlisted directories.

install

Up and running in a minute.

Grab a build from the releases page, or compile it yourself — it's your code now.

macOS.dmg · .zip

→

WindowsNSIS installer

→

LinuxAppImage · .deb

→

build from source

$ git clone https://github.com/Meanski/noxed.git
$ cd noxed
$ npm install
$ npm run dist   # installers land in dist/

Needs Node.js 20+. macOS builds aren't notarized yet — if the app is reported as damaged, run xattr -cr /Applications/noxed.app. On Linux, install a keyring service (e.g. libsecret-1-0).

Every server.
One window.