Built for the people behind the servers

Your servers.
Under control.

Direct SSH, jump hosts and tunnels. Files, services and deployments. AI that waits for your approval. Bring remote infrastructure work into one focused workspace.

Get Runory Explore the workspace

Local-firstConnect without an accountEvery AI command is your call

Interactive workspace tourInteractive demo · Sample data, no live server connection

Runory / productionSSH

api-production ＋

Last login: Mon Sep 7 09:41:02 2026

deploy@api-production:~$ uptime

09:42:18 up 12 days, 3:21, 2 users
load average: 0.12, 0.08, 0.05

deploy@api-production:~$ docker ps

NAME          STATUS          PORTS
api-server    Up 12 days      0.0.0.0:3000
nginx         Up 12 days      0.0.0.0:80
redis         Up 12 days      6379/tcp

deploy@api-production:~$

ConnectedUTF-8 • bash

↑Switch tabs to explore different ways to work within one connection.

Familiar tools. One connected experience.

SSH / Jump / TunnelSFTP / DashboardDocker / Nginx / IncidentControlled AI / ChangeSetWindows / macOS / Linux

ONE WORKSPACE, THROUGHOUT YOUR DAY

Less switching. More getting things done.

From access paths to status, action and evidence—keep frequent remote work in one context.

Access paths that match reality

Beyond direct SSH: single-hop jump hosts, loopback TCP tunnels, and bastion providers such as JumpServer, Teleport and Boundary. Groups, search and multiple sessions keep production and staging in place.

Jump hostsLocal tunnelsBastion access

Files beside your terminal

Browse remote directories, upload, download and manage files. Follow transfers in a clear queue without opening another client.

SFTPDirectory navigationTransfer queue

Health and ops without another agent

Review CPU, memory and disk, then investigate services and logs. Work over your existing SSH service—no Runory monitoring agent to install.

DashboardService statusLog viewer

Common incidents, organized by scenario

Beyond everyday Docker, PM2 and Nginx actions, Website, Nginx, Docker, Disk and Service Incident Packs connect diagnosis, evidence and repair plans into a reviewable flow.

Incident PackDockerNginx

Deployments and fleet changes you can track

Organize Git deployments with environment, SSL, backups and Cron. Fleet writes run sequentially by default, pause for review, and bind approval to exact targets and versions.

Git deploymentFleetVerify / rollback

Make yourself at home

Keep familiar terminal input, search, copy and paste. English and Chinese, light and dark themes: a workspace that fits your habits.

English / 中文Light & darkTerminal search

AI COLLABORATION, YOUR CONTROL

Find answers together. Approve every step.

Describe the problem, review the suggestion and approve the next command. AI continues from real results; Skills and read-only MCP extend context, while writes still use ChangeSets, verification and truthful rollback where supported.

Review the exact command and its risk before execution
Choose Run or Cancel for every command
Verify the result after writes before finishing

Security

Runory AIYou lead. AI helps investigate.

Help me check why Nginx is not responding↵

Start by checking the Nginx service status to gather evidence.

Read-only · Awaiting your approval

systemctl status nginx --no-pager

Workflow illustration only. No commands are executed here.

TRUST, WITH CLEAR BOUNDARIES

Connect to your servers. Keep hold of your data.

Local-first from the start. Credentials, connections and permissions each have a clear home.

Your deviceCredential Vault

Encrypted SSH

Your serverSSH / SFTP

Credentials stay out of sync data

Credentials stay in your local vault

The Credential Vault manages passwords, passphrases and private keys. They never enter host profiles or cloud sync.

Every connection deserves a check

Unknown hosts need your explicit trust. A changed host key blocks the connection. Both ends of a jump path are verified independently.

Operations you can review

Approve AI commands before execution. Structured repairs use change sets and verification, with real rollback only where supported. Incident and audit records keep content-free metadata only.

OPTIONAL CLOUD SYNC

Another device. The same way of working.

Sync your host and group inventory when you need it. Encrypt before uploading and preview conflicts before merging. Your local client still makes every server connection.

End-to-end encryptionConflict previewsOrganizations & roles

Explore and enable sync

Local workspace

Encrypted hosts & groups

Encrypted cloud copy

Passwords, private keys and terminal output are never synced.

BEFORE YOU CONNECT

A few things you might be wondering

Do I need an account?

No. Host management, SSH, jump hosts, tunnels and your local workspace are local-first. Sign in only when you choose account services such as cloud sync.

Do I need to install anything on my server?

SSH, SFTP, basic monitoring and local tunnels use your existing SSH service. No Runory agent is needed. Docker, PM2, Nginx and bastion access depend on software and permissions already present on the server or bastion.

Will AI run commands automatically?

No. Every command is shown exactly before you choose Run or Cancel. Writes and unknown commands need a separately approved read-only verification. AI also requires the appropriate model configuration in the client.

Does the cloud store my passwords or private keys?

No. Optional sync uploads only locally encrypted host and group inventories. Passwords, passphrases, private keys and terminal output stay out of sync payloads. The website does not decrypt your server inventory.

Can I download it on every platform?

Runory ships desktop first. The download page links Windows, macOS and Linux installers; additional architectures and older builds are on GitHub Releases. Mobile interfaces and a shared core are in place, but app store downloads are not available yet.

YOUR NEXT CONNECTION STARTS HERE

Make remote work feel closer.

Choose your desktop platform and download the latest installer.

Download the Windows x64 .msi or .exe installer.

Download now

Additional architectures, signatures and older builds are on GitHub Releases.

Install the client that matches your system.

Add your server address and authentication method.

Verify the host fingerprint and start your first SSH session.

Mobile is on the way, too

Adaptive iOS / Android interfaces and mobile key support are implemented. App store downloads are not yet available.