purple

KO | EN

gitlite — search

#javascript #python #hacktoberfest #react #ai #typescript #llm #go #golang #android #machine-learning #rust #deep-learning #linux

(★ 421)

Free, open-source terminal SSH manager and SSH config editor in Rust for macOS and Linux that keeps ~/.ssh/config in sync with 16 cloud providers, monitors live SSH tunnels and manages Docker and Podman containers fleet-wide. Plus scp, Vault SSH certs and an MCP server for AI agents.

purple Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

Your ssh config, synced with your cloud.

**purple is a free, open-source terminal SSH manager and SSH config editor in Rust for macOS and Linux that keeps `~/.ssh/config` in sync with 17 cloud providers, monitors live SSH tunnels and manages Docker and Podman containers fleet-wide.**

Spin up a VM on AWS, GCP, Azure, Hetzner, Proxmox or 11 other cloud providers and it's in your host list before the console catches up. Kill one and purple marks it stale, so your list never lies. No more hand-editing `~/.ssh/config` after every Terraform run, no more digging through cloud consoles for the right IP.

Everything else you do over SSH lives in the same terminal: fuzzy search across hundreds of hosts, visual file transfer, multi-host SSH key push, short-lived HashiCorp Vault SSH certificates and an MCP server for AI agents. Keyboard-driven. Single binary. MIT licensed.

![purple terminal SSH client demo: searching hosts, monitoring live tunnels, managing containers, running snippets and inspecting keys](https://raw.githubusercontent.com/erickochen/purple/master/demo.gif)

## Install

```
curl -fsSL getpurple.sh | sh
```

<details>
<summary>brew, cargo, nix, AUR or from source</summary>

```
brew install erickochen/purple/purple
```
```
cargo install purple-ssh
```
```
nix profile install github:erickochen/purple
```
```
paru -S purple-bin
```
```
yay -S purple-bin
```
```
git clone https://github.com/erickochen/purple.git
cd purple && cargo build --release
```
</details>

Claude Desktop users can install the [.mcpb bundle](https://github.com/erickochen/purple/releases/latest) for one-click MCP integration (read-only by default). Setup details on the [MCP Server wiki](https://github.com/erickochen/purple/wiki/MCP-Server). No data leaves your machine. See [PRIVACY.md](PRIVACY.md).

Run `purple`. Press `?` on any screen for help. That's it.

## Contents

- [Why I built this](#why-i-built-this)
- [What you get](#what-you-get)
- [How purple compares](#how-purple-compares)
- [How it works](#how-it-works)
- [Links](#links)

## Why I built this

My SSH config was fine. Proper aliases, ProxyJump chains, organized by provider. Not the problem.

The problem was everything around it. Need to check a container? `ssh host docker ps`. Copy a file? `scp` with the right flags. Run the same command on ten hosts? Write a loop or boot up Ansible for a one-liner. Spin up a VM on Hetzner? Open the console, grab the IP, edit config, save. Someone asks which box runs what? Good luck.

I wanted one place for all of that. So I built it.

## What you get

### Your ssh config tracks your infra

Drop in one API token per provider. New machines land in `~/.ssh/config` the moment they boot, IPs follow instances as they move and decommissioned hosts grey out instead of lingering. 17 providers including AWS, GCP, Azure, Hetzner, DigitalOcean, Proxmox and Teleport, multiple accounts each. See the [wiki](https://github.com/erickochen/purple/wiki/Cloud-Providers) for the full list.

![purple cloud provider list close-up: per-provider sync status with host counts and stale markers](https://raw.githubusercontent.com/erickochen/purple/master/assets/png/zoom-providers.png)

One panel answers the questions you actually have. Is it up. How do I reach it. When was I last on it. What runs there. Connection info, jump route, a year of SSH activity, tags, tunnels and containers per host, with live health dots.

![purple host list with the detail panel: connection info, jump route, activity sparkline, tags, tunnels and containers](https://raw.githubusercontent.com/erickochen/purple/master/assets/png/hosts.png)

### Jump to anything with one keystroke

Press `:` and type four letters. Any host, tunnel, container, snippet or action, ranked by how often you use it. It searches the SSH `User`, `ProxyJump` and Vault SSH role too, so typing your username finds every server you log in as. Field prefixes (`user:`, `proxy:`, `vault:`, `tag:`) cut straight to one directive. Like Linear's `Cmd+K`, but in your terminal.

![purple Jump bar close-up: universal fuzzy search across hosts, tunnels, containers, snippets and actions](https://raw.githubusercontent.com/erickochen/purple/master/assets/png/zoom-jump.png)

### Manage Docker and Podman on every server, over SSH

Your whole fleet's containers in one list, grouped per host. Shell in, stream logs, restart, stop, exec or kick a whole compose stack member by member. No agent on the remote, no web UI, no extra ports. Just SSH.

![purple Containers tab close-up: containers across multiple hosts grouped per host with state and uptime](https://raw.githubusercontent.com/erickochen/purple/master/assets/png/zoom-container-fleet.png)

### Monitor SSH tunnels in real time

Forwards run blind. purple doesn't: every Local, Remote and Dynamic SOCKS forward with live throughput, channel activity and uptime, down to the exact app behind each connection.

![purple tunnel detail close-up: per-client process roster with live throughput sparklines and a channel swimlane](https://raw.githubusercontent.com/erickochen/purple/master/assets/png/zoom-tunnel-live.png)

### Run one command across your fleet

Save a command once, run it on any set of hosts. purple shows the blast radius before you fan out and keeps the track record per snippet. "28 of 29 host runs ok" is a number you want to see before production.

![purple snippet detail close-up: command with parameters, a blast-radius impact card and a host-run track record](https://raw.githubusercontent.com/erickochen/purple/master/assets/png/zoom-snippet-impact.png)

### Push any SSH key to your fleet, no ssh-copy-id loop

Every key in `~/.ssh`, scored and fingerprinted, with the hosts it unlocks and the last time it was used. Push one to your whole fleet with `p`. Vault-managed hosts skip automatically, so cert-managed stays cert-managed.

![purple key detail close-up: randomart fingerprint, strength score, agent status and per-key activity](https://raw.githubusercontent.com/erickochen/purple/master/assets/png/zoom-key-randomart.png)

Short-lived certificates from the HashiCorp Vault SSH secrets engine get a TTL strip of their own, so an expiring cert never surprises you.

![purple Vault SSH close-up: signed certificates with remaining TTL bars per host](https://raw.githubusercontent.com/erickochen/purple/master/assets/png/zoom-vault-ttl.png)

### And more

- Visual file transfer with a split-pane local and remote explorer.
- Automatic password retrieval from OS Keychain, 1Password, Bitwarden, pass, the HashiCorp Vault KV secrets engine and Proton Pass.
- Short-lived SSH certificates signed via the HashiCorp Vault SSH secrets engine.
- MCP server for AI agents like Claude Code and Cursor, with a read-only mode and a JSON Lines audit log.
- Your own ssh wrapper for interactive logins, such as kitty's `kitten ssh`, via one preference or `PURPLE_SSH_COMMAND`.
- XDG Base Directory support: set `XDG_CONFIG_HOME` and friends (or `PURPLE_CONFIG_DIR` and friends) and purple splits its files into config, data, state and cache. Unset, everything stays in `~/.purple`.

See the [wiki](https://github.com/erickochen/purple/wiki) for details.

## How purple compares

| | purple | Termius | sshs | Lazydocker |
|---|---|---|---|---|
| Open source | Yes (MIT) | No | Yes | Yes |
| Language | Rust | Electron | Rust | Go |
| Multi-cloud SSH sync | 17 providers | Limited | No | No |
| Containers over SSH | Docker and Podman, fleet-wide | No | No | Local host only |
| Live tunnel monitoring | Yes | No | No | No |
| MCP server for AI agents | Yes | No | No | No |
| Account required | No | Yes | No | No |
| Price | Free | Freemium | Free | Free |

purple keeps your SSH config local and editable: it edits `~/.ssh/config` in place with round-trip fidelity. Use Lazydocker for single-host local Docker, purple for fleet-wide remote management.

## How it works

purple reads `~/.ssh/config` directly. No database, no daemon, no account. Comments, indentation, include files, unknown directives: all preserved through every edit, so the config you wrote stays the config you have.

Written in Rust. Single binary. 7300+ tests. MIT license.

## Links

[Wiki](https://github.com/erickochen/purple/wiki) · [Cloud Providers](https://github.com/erickochen/purple/wiki/Cloud-Providers) · [MCP Server](https://github.com/erickochen/purple/wiki/MCP-Server) · [FAQ](https://github.com/erickochen/purple/wiki/FAQ) · [Troubleshooting](https://github.com/erickochen/purple/wiki/Troubleshooting) · [Security](SECURITY.md) · [llms.txt](https://getpurple.sh/llms.txt)

## Credits

Screenshots and the demo are generated from the live TUI in [Berkeley Mono](https://usgraphics.com/products/berkeley-mono) by [U.S. Graphics Company](https://usgraphics.com/), recorded with [VHS](https://github.com/charmbracelet/vhs). They regenerate on release, so what you see here always matches the current build.

## Feedback

Bug or feature request? [Open an issue](https://github.com/erickochen/purple/issues).

purple

purple Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

purple

purple Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README