Fewshell: A Self-Hosted SSH Copilot That Refuses to Run Commands Without Human Approval
Fewshell is a collaborative, self-hosted mobile+desktop SSH copilot designed for on-calls, DevOps, MLOps, AI researchers, sysadmins, and self-hosting enthusiasts. Its core design principle: AI will never run any command without human approval. There is no setting to enable command auto-approval – by design, to eliminate any risk of accidental misconfiguration.
Why It Exists
The author, an ex-Amazon Sr. SDE for Alexa AI now working on AI safety research for agentic RLVR, created Fewshell after seeing high-profile incidents where an AI agent deleted a production database. The tool is intended to be the opposite of an autonomous agent. Use cases include:
- Quickly restart, fix, or update an autonomous agent (e.g., OpenClaw) remotely, without using the agent itself (e.g., if it fails to start).
- Start a long-running command from desktop and check on it from mobile.
- Manage a self-hosted server and run admin commands on the go.
- Run serverless infrastructure and fix things remotely via a bastion.
- Keep a full transcript of every command you've ever run on your infrastructure, useful for postmortems.
- Share a terminal with a collaborator (e.g., two-person rule).
Architecture & Security
Fewshell is self-hosted, with no cloud dependency. Communication between client and server uses an SSH tunnel. Secrets are stored in the system keychain and are redacted before being sent to the LLM. The server holds secrets in memory for command use and replication across authenticated devices, and the private SSH key never leaves the client device.
Optional features include push notifications for long-running commands via a relay service, and SSH public key provisioning during initial device pairing.
Features
- Cross-platform GUI clients: iOS, macOS, Linux, Android (Windows planned).
- Built in Flutter – low memory footprint, native execution.
- Secret management: user and per-project secrets stored in keychain with per-secret LLM visibility control.
- Cross-device sync using your own server.
- Command snippet library for reusable commands injected into LLM context.
- Session archival – full transcripts for postmortems.
- BYOM (Bring Your Own Model): supports OpenAI, Anthropic, Google, DeepSeek, Ollama, Groq, xAI, OpenRouter, and more.
- Custom agent instructions: user and per-project system prompts with template variables.
Quick Start
tl;dr – Using SSH on mobile is painful. Modern AI is really good at shell commands, but letting AI control infrastructure is dangerous. Fewshell's three core principles: secure defaults (mandatory SSH and secrets management), must be self-hosted (cloudless desktop-mobile sync), and human-first (AI will not run any command without approval).
To get started, visit the GitHub repo or get.fewshell.com for download links.
📖 Read the full source: HN AI Agents
👀 See Also
Claude Code Plugin for D&D Campaigns Using Markdown State Tracking
A Claude Code plugin uses markdown files to track campaign state and lets Claude act as Dungeon Master for solo D&D sessions. The system is free and open-source, requiring installation as a plugin followed by the /claude-dnd:new-campaign command to start.
Skillware adds prompt_rewriter for deterministic token compression in Claude API agent loops
Skillware has merged a new prompt_rewriter skill that compresses prompts by 50-80% before sending to Claude API, reducing costs in agentic loops while maintaining stable behavior through deterministic compression.
ZuckerBot MCP Server Enables OpenClaw Agents to Run Meta Ads Campaigns
ZuckerBot is an MCP server that gives OpenClaw agents direct control over Meta Ads, allowing them to execute full campaign loops without human intervention. Over 50 unique agents are now live using it to pull competitor ads, generate targeting, launch campaigns, and adjust performance in code.
Holisto Seed: A Local LLM Framework with Persistent Identity and Consensual Memory Consolidation
Holisto Seed is a Relational Individuation Framework that gives LLM agents persistent identity, biographical memory, and co-evolutionary relationships with users. It runs fully local with a Git-based versioning system and features a consensual sleep cycle for memory consolidation.