Skip to content
bestonehxhPublic

Repository files navigation

SheepTerm app icon

SheepTerm

The terminal built for network engineers.
SSH, Telnet, serial and local shell with highlighting that knows your vendor — plus file transfer (SFTP, SCP, FTP, TFTP), SSH port forwarding, Ping, device web UIs and an AI that reads the output with you.

English · 简体中文 · 日本語 · 한국어 · Español · Português (Brasil) · Français · Deutsch · Русский

Download SheepTerm for macOS Download SheepTerm for Windows Download SheepTerm for Linux

Website · All features · ♥ Support SheepTerm · Release notes · SheepTerm for Windows · SheepTerm for Linux

SheepTerm with three panes: Cisco, Aruba CX and FortiGate output highlighted per vendor, beside a sidebar of saved hosts in nested groups

Features

The short version, by area. Every feature is on sheepterm.com/features.

Connections

SSH, serial, Telnet and a local shell, each in its own tab. One box takes user@host, a URL, ping 10.0.0.1 or sftp://…, and ssh:// / telnet:// links from GNS3 or EVE-NG open a tab. Sign-in happens on a card inside the tab; jump host, local / remote / SOCKS port forwards, auto-reconnect and legacy ciphers for old gear are built in.

Sidebar & groups

Groups inside groups (a site, a building, a floor) in one searchable sidebar. Drag to reorder. Each host keeps its own device family, credential, logging and paging choice.

Tabs & split panes

Up to nine panes in one tab, in a tidy grid, every pane a full session. Drag a pane header or a tab chip to move or merge; zoom a pane, even them out, or unsplit it back to a tab.

Four panes: Aruba CX, Cisco, FortiGate and Juniper sessions Nine panes in a 3 by 3 grid, each a different device

Terminal

Our own emulator with one highlight pack per device family: Cisco, Aruba, Huawei, H3C / HPE, Juniper, Palo Alto, Fortinet, Check Point and Linux. The family is detected from the stream or set per host, and a device's own colours are never overridden.

Huawei, Cisco NX-OS, Palo Alto and Juniper output, each with its own highlight pack

Safe Multi-line Paste previews a paste and sends it line by line, waiting for the device's prompt. Danger Command Guard holds reload, write erase and the like until you press Send. Also: session logs with Search Logs, Auto-page, six themes, bundled monospace fonts and Network Info with the ARP table.

Safe Multi-line Paste listing six lines, with reload in red

Ping tab

Many hosts at once, in a tab or split beside the console while a device reloads: Status, latency, OK / Failed, rate, a last-minute graph and a packet log to save as CSV. Nothing pings until you add a target.

A terminal rebooting a switch beside a Ping tab where that switch shows Fail

File Server & Files tab

TFTP, SFTP, SCP and FTP servers in the bottom bar, off until you start them: pick a file and copy the command for your device family. The Files tab browses a device over SFTP, SCP, FTP or TFTP and rides an open SSH tab: no second login, through a jump host too.

The File Server card with TFTP on and an Aruba CX copy command for the chosen firmware file

Web tabs & login key

A device's web page in a tab or pane, next to its console. Self-signed certificates are confirmed like host keys. A key inside the login field fills a saved credential; nothing is submitted for you.

A console beside its device web page, with the key inside the Username field

Snippets, Broadcast, Command History

Saved commands with {{variables}}, one line typed into every tab you tick, and each host's own history of up to 500 commands with secrets filtered out.

Sync & security

Passwords stay in the macOS Keychain. Sign in with Google to sync hosts, groups, credentials, snippets and settings between Mac and Windows, end-to-end encrypted with your passphrase, in your own Drive. Off until you sign in.

AI panel

Ask about the output in front of you with the Claude, ChatGPT or Gemini subscription you already have, through the vendors' own CLIs. Secrets are removed first, you can see exactly what is sent, and it never runs a command.

Console cable

Plug in a USB console cable and a card offers Connect at the right speed. The speed is a menu on the open port, wrong-speed text gets a Garbled? Try 115200 hint, and Send Break and XMODEM / YMODEM are there for a recovery.

The Console cable card at the bottom right of the terminal, with a 9600 baud menu and Connect

Backup, import & export

Add Hosts from a spreadsheet or CSV, one Backup file (never with passwords), .sheepterm group files, and Share Link: a group sealed with a passphrase, kept in your own Drive.

What's New & updates

Updates are checked against an Ed25519 signature and install only when you press the button. What's New opens once per release, and any time from the menu.

Shortcuts

Action Keys
Quick Connect ⌘K
New Terminal Tab ⌘T
New SSH Connection ⇧⌘N
Split Right / Split Down ⌘D / ⇧⌘D
Close Pane / Close Tab ⌘W / ⇧⌘W
Next / Previous Tab ⇧⌘] / ⇧⌘[
Tab 1 to Tab 9 ⌘1 to ⌘9
Find ⌘F
Toggle Sidebar ⌘0
Command History ⌘Y

No bare ⌃ letter belongs to the app: ⌃A, ⌃R, ⌃W and the rest reach the shell or the device CLI, and ⌥ works as Meta. Every shortcut, Mac and Windows.

Languages

Nine languages on both Mac and Windows: English, 简体中文, 日本語, 한국어, Español, Português (Brasil), Français, Deutsch and Русский.

The interface follows your Mac's system language. If the system language is not supported, SheepTerm falls back to English. To switch manually, open Settings → General → Language → App Language, choose a language, then quit and reopen SheepTerm.

All translations live in one Xcode String Catalog (SheepTerm/Localization/Localizable.xcstrings) instead of separate .strings files. See LOCALIZATION.md for details, including how to add another language.

Install

Homebrew:

brew install --cask bestonehxh/tap/sheepterm

Or manually:

  1. Download SheepTerm-6.1-13.dmg, open it and drag SheepTerm onto Applications (already installed? choose Replace).
  2. Signed with Developer ID and notarized by Apple: it opens like any other app.
  3. Updates are built in and verified with an Ed25519 signature.

Requires macOS 26.4 (Tahoe) or later, Apple Silicon. Windows 10/11 x64: SheepTerm for Windows. Linux x86_64 or arm64, GTK 4: SheepTerm for Linux.

Privacy & security

  • 🔑 Passwords live only in the macOS Keychain — never in files, backups or exports.
  • 🛡️ New host keys and certificates are shown and confirmed before anything is sent.
  • 🔒 Sync is encrypted with your passphrase before upload; nothing syncs until you sign in.
  • 🤖 The AI sees only what you attach, with secrets removed, and can't run commands.
  • 🍎 Own SSH and terminal emulator; crypto from macOS itself (CryptoKit, CommonCrypto, Security). No tracking.

See PRIVACY.md and TERMS.md.

The Sheep family 🐑

SheepTerm is one of a few small native apps for network engineers:

App What it does macOS Windows Linux
SheepTerm SheepTerm SSH / Serial / local-shell terminal for network engineers ⬇️ Download ⬇️ Download ⬇️ Download
SheepText SheepText Fast text editor with tree-sitter highlighting and a JavaScript plugin system ⬇️ Download Coming Soon Coming Soon
SheepDrop SheepDrop SFTP / SCP / FTP / TFTP file transfer — client and built-in server ⬇️ Download Coming Soon Coming Soon
SheepTap SheepTap Menu-bar viewer for your Mac's network interfaces with click-to-copy ⬇️ Download Coming Soon Coming Soon
SheepPing SheepPing Continuous multi-host ping monitor with per-host logs and CSV export ⬇️ Download Coming Soon Coming Soon

The Lab family 🧪

The servers and hypervisor control a network lab needs, native on the Mac:

App What it does macOS Windows Linux
LabDC LabDC Active Directory–compatible domain controller with RADIUS for 802.1X and a lab CA ⬇️ Download Coming Soon Coming Soon
LabDock LabDock VM control and console for standalone ESXi hosts — power, snapshots, guest files and scripts, no vCenter ⬇️ Download Coming Soon Coming Soon

Building

xcodebuild -project SheepTerm.xcodeproj -scheme SheepTerm -configuration Release build

Links only Apple frameworks and the local packages in Packages/. Needs Xcode 26+.

License

MIT © 2026 bestonehxh