ターミオ·Tāmio
A native Mac terminal, file manager and live monitor for every server — with an MCP server that lets Claude Code, Codex and any agent work across your hosts. You approve every change, and every change is written down.
brew install --cask owo-network/brew/tamio
Free · macOS 14 or later · Apple silicon and Intel
01 — Agents
Tamio runs an MCP server on your Mac. Claude Code, Codex and any MCP client can list your servers, read their live load, run commands on one host or a hundred, and manage keys, snippets and port forwards — signed in with Tamio's saved credentials, never their own.
Set up in one line
claude mcp add tamio -- /Applications/Tamio.app/Contents/Resources/tamio-mcp
Codex and other clients take the same command. Settings › MCP installs the Tamio skill, which teaches an agent the rules.
You approve first
Every command and change waits for you. Allow it once, for an hour, or always — for an agent left to work while you are away. Revoke it any time.
02 — History
Unlike a terminal, Tamio writes down every operation an agent performs on every server: which agent, on which Mac, what it ran and what came back. Switch agents, swap devices, change computers — the next agent reads what the last one did, and picks up from there.
One entry per task
An agent names the goal of each step. Adding a repository, apt update, the install and its config become one entry — “Install nginx” — with every step and its result under it.
Read before you work
Agents call get_activity before touching a server, and log_activity for anything they change over their own SSH, so nothing happens off the record.
On every Mac
The history syncs through iCloud with your servers, end-to-end encrypted. Filter it by server in Settings, or open any server's Activity tab.
03 — Security
Secrets only go in
No tool returns a password, a private key or a passphrase. An agent can add a key or have Tamio generate one, and gets back only the public half.
Only you can reach it
The MCP server listens on a Unix socket that only your user account can open. There is no network port.
Host keys checked
A server's key is trusted the first time and checked every time after. A server answering with another key is refused before any password is sent.
Encrypted on disk
Servers and identities are stored encrypted, under a key kept in your Keychain.
End-to-end encrypted sync
Everything is sealed on your Mac before it goes to iCloud, under a passphrase only your devices know. Apple cannot read it.
Open source
Every line is on GitHub under the MIT license. Releases are signed, notarized by Apple, and updates are verified before they install.
04 — Everything else
Ghostty terminal
A fast, GPU-drawn terminal with Ghostty's themes and every one of its settings.
Live status
CPU, memory, disk and network of every server, with processes and containers.
Dual-pane SFTP
Drag files between your Mac and any server, or out to Finder. Folders go whole.
Transfer queue
Progress, speed, time left, cancel and retry — and a notification when it's done.
Identities
Paste a key, load one, or generate Ed25519. A private key is never shown again.
Snippets
The commands you run often, one click away — for you and your agents.
Port forwards
Local and remote tunnels through any server, started when you need them.
iCloud sync
On by default, so nothing is lost with a Mac. Each kind of data has its own switch.