meshTerm SSH FTP via Tailscale

Persistent SSH Terminal. Connect to multiple Tailnets, SSH or QUIC. Optimised for agentic coding agents. Docker/Podman UI. Sessions survive with persistent scrollback.

A fast, private SSH and SFTP client for engineers. meshTerm brings its own Tailscale with it, so your servers are reachable from anywhere without a separate app and without exposing a port. And with built in persistence your sessions keep running when your phone does not: roam from cellular to WiFi, background the app, or come back tomorrow, and your shell and scrollback are still there.

BUILT-IN TAILSCALE, MULTIPLE TAILNETS meshTerm has its own Tailscale stack, running entirely in-app. No separate Tailscale app to install, and no conflict with any other VPN you use. Sign in to your Tailscale account, or add an auth key, and your device joins your tailnet over WireGuard; SSH, SFTP and port forwarding all route through the encrypted tunnel natively. Browse your tailnet and add a device as a host in one tap. Tailscale SSH nodes need no passwords and no keys at all. Multiple profiles switch between work and personal tailnets, and a host can bind to one so it switches on connect.

SESSIONS THAT SURVIVE Out of the box meshTerm is tmux-aware, so you get solid reconnect with nothing extra to install. If you want more, mtroamd is an optional open-source service for your own server: one tap to install, just as easy to remove, and it lets a session follow you from phone to laptop. Either way, backgrounding the app, losing cellular or switching devices does not end your session.

MULTI-CLIENT, NAMED SESSIONS Open named sessions per host: dev, logs, tests. Attach exclusively, or read-only to watch a session someone else is driving. Per-host idle timeouts from 1 hour to Never. A Sessions tab keeps every live session one tap away.

AI AGENTS, NATIVE Run Claude Code, Codex, and Gemini on your own servers and drive them from a native chat: streaming replies, per-tool approvals that stay pinned until you answer, plan mode, token-usage chips, slash commands, and file attachments from iOS. Agent sessions survive app restarts, and you can resume any past conversation, including ones you started in the terminal.

DOCKER AND PODMAN Manage containers on any host you have already added: browse containers, images, volumes and networks, start and stop and remove, bring Compose stacks up and down, follow logs or exec into a shell, and prune. Nothing to install and nothing to expose, just the docker or podman CLI already on your server, over SSH.

A KEYBOARD BUILT FOR THE TERMINAL A three-page palette: features, a keys page built from your own key groups, and one-tap session switching. Assign actions to the volume buttons. A predictive strip suggests commands from your remote shell history as you type, and a floating pill jumps you back to the live prompt in full-screen tools.

PORT FORWARDING AND SFTP Local forwards and SOCKS5 proxies per host with live status. Browse, upload, download, rename and delete files on any server, with iOS Files integration.

SNIPPETS, MACROS, SECRETS A searchable Snippet Vault and a one-tap macro bar. Secret macros back values with the iOS Keychain, optionally gated by Face ID. Secret Profiles inject your environment and keys into a running session on tap, with nothing typed and nothing left on screen. Mark a key hidden and its value is brokered only to the commands you allow, so an agent can use it without ever reading it.

SSH KEYS, SEARCH, TAGS Generate Ed25519 or ECDSA keys on-device, import passphrase-protected keys, and install public keys in one tap. Search scrollback with a live match count. Tag and filter hosts. Full Spanish throughout.

PRIVACY BY DESIGN No analytics, no telemetry, no tracking SDKs. Credentials and keys live in the iOS Keychain, hardware-encrypted and device-only. Nothing routes through us.

meshTerm Pro Every feature works in the free tier. Pro lifts the 1-host, 1-session and 1-agent limits to unlimited and adds Docker and Podman, Secret Profiles, and iCloud Sync, which keeps hosts, keys, macros and preferences on every device, end-to-end encrypted.