Roadmap#

Priorities informed by a July 2026 survey of the SSH-manager landscape (Termius, XPipe, Tabby, sshs/wishlist, CtrlOps, Termix and the MCP-SSH ecosystem). Ordered by expected impact.

  1. ~~Published packages — PyPI release~~ Done (0.2.0): pipx install ssh-server-manager is live on PyPI, and the Trusted-Publishing workflow (.github/workflows/publish.yml) automates future releases. Still open: a Homebrew tap and winget manifest.
  2. ~~Host-bound Agent Skills~~ Done (0.6.0): the local registry attaches one Skill to one or many saved hosts and resolves only the guidance in scope for the target hosts. The first version is deliberately local and explicit: it discovers installed Skills but never downloads or installs them.
  3. ~~Remote file workspace and transfer helpers~~ Done (0.7.0): serverctl cp / get / put move single files over the same SFTP path and vault credentials, the web browser gained explicit download and upload actions, and per-host saved working directories (serverctl path) let people and agents recall where the work happens. Also shipped: serverctl mount for sshfs, gated behind a doctor capability check because the FUSE layer cannot be installed for the user. Still open: recursive transfer of a whole tree.
  4. Port forwarding profiles — saved -L/-R/-D tunnels per server (serverctl tunnel open db1-local), with status and teardown.
  5. Audit log — local, append-only record of secret reveals and agent-invoked exec commands; serverctl audit list --json.
  6. Git-friendly export — serverctl export of host metadata (never secrets) for versioning and moving between machines; paired import.
  7. Optional MCP wrapper — a thin MCP server over the same core for agents that only speak MCP: read-only by default, command allowlists, no secret-bearing tool results. The Skill remains the recommended path.
  8. Session logging for connect — opt-in local transcript with secret redaction.
  9. Mosh support — detect availability. The 0.9.0 Hosts details already render managed and external ProxyJump hops from the backend route.
  10. Local GeoIP and optional desktop shell — separate follow-up work after the 0.9.0 six-page Web UI. Neither is required by the browser or CLI.

Non-goals: cloud sync of secrets, telemetry, subscriptions, Electron.

Edit this page on GitHub