Fewshell — SSH Copilot for On-Calls
Fewshell is an SSH copilot for on-call engineers, sysadmins, DevOps and MLOps teams. Fearlessly use AI to troubleshoot and run commands on your infrastructure from any phone or desktop — every command approved by you, every secret redacted from the model.
Features
Security
Secrets stored in your device's keychain, automatically redacted from AI. Never stored on disk. Learn how secrets work →
Privacy
No cloud services, no sign-ups. Works with your existing infrastructure. Use self-hosted models or frontier providers.
Ergonomics
Turn "clean up old Docker images" into docker images --format '{{.Repository}}:{{.Tag}} {{.CreatedSince}} {{.Size}}' | grep -E 'months|years' | awk '{print $1}' | xargs -r docker rmi — reviewed and approved before anything runs.
Safety
Every command requires your explicit approval. There is no way to turn this off. No accidents or surprises. Designed for critical infrastructure.
Transparency
Every interaction recorded on your device and your server. Know exactly what changed and when.
Control
Organize projects, prompts, context, and snippets. Keep your workflows at your fingertips. Set up on your desktop and seamlessly sync to your phone. Configure Fewshell →
Collaboration
Connect multiple devices and share real-time sessions. Share with your team or seamlessly switch between desktop and mobile - securely over your SSH tunnel.
Simplicity
Easy to set up. Minimalist interface. Designed to do one thing and do it well. Quick start guide →
Frequently asked questions
Can the AI run shell commands without my approval?
No. Every command the model proposes is staged for your review in the terminal UI and only executes after you explicitly approve it. This behavior cannot be disabled.
Which LLM providers does Fewshell support?
Fewshell is BYOM — bring your own model. It works with OpenAI, Anthropic (Claude), Google Gemini, DeepSeek, xAI, Groq, OpenRouter, and any OpenAI-compatible endpoint including self-hosted Ollama.
Is Fewshell self-hosted?
Yes. The Fewshell agent runs on a server you control (any Linux or macOS host with SSH). Clients connect over your SSH tunnel — there is no Fewshell cloud service in the data path.
Does Fewshell send my secrets to the LLM?
No. Secrets are stored in your device keychain and held only in server memory. Their values — in both plaintext and base64 — are redacted from the context sent to the LLM.
What devices does Fewshell run on?
Fewshell has native clients for iOS, Android, macOS, and Linux (x86_64 and ARM64). Windows support is planned.
Is Fewshell open source?
Yes. Fewshell is licensed under AGPL-3.0. Source on GitHub.