Infrastructure Monitor
SSH Keys
Broadcast
Groups
Teams
A team has its own shared vault — any accepted member can connect to a team's servers, add or remove them, and invite others. Every session on a team server is automatically recorded and visible to the whole team.
Snippets
Workflows
Known hosts
Recordings
AI Runs
Every command Ask AI ran on your servers — read-only ones it ran itself, fix commands you clicked ▶ Run for — grouped by session, server, and time.
Settings
rm -rf) always needs a manual click, even while this is on.🛠 AI Ops Agent
rm -rf) is always refused.Admin
Route SSH connections through a bastion (SSH), SOCKS5, or HTTP-CONNECT proxy. Credentials stay on this admin account; users just pick a gateway when adding a server.
Proxies marked "In relay pool" below are the default route for any server that has no explicit proxy/jump of its own. TConnect probes each pool member's latency every 5 minutes and always uses the fastest reachable one — add, remove, or swap a relay's IP here and the next connection just uses it, no per-server changes needed.