ShellYard
One secure desktop app. Five tools you used to keep open.

The infrastructure operations workspace for terminals. APIs. databases. networks. runbooks.

AI-native. Space-scoped. On-device. Built for engineers, MSPs, and DevOps teams.

Download free See what it unifies →

The math

Most teams pay $50–120 per seat per month across five vendors.

ShellYard is one app, one subscription, one audit trail.

$24 / month, billed annually.

Bundle range covers separate Postman, DataGrip, Termius, IT Glue, and a network-tools utility. Published pricing varies by plan and billing term — directional, not a formal quote.

Remote access

Every protocol you use, in one tab strip.

  • 8 connection types
  • · Vault auto-fill
  • · Multi-window

SSH, RDP, Telnet, serial, AWS SSM, embedded browser, and a local shell — same window, same auth model, same audit trail.

  • OpenSSH-compatible: keys, certs, password, jump-host chains, agent forwarding
  • RDP via the platform-native client; embedded browser for switch / firewall web UIs
  • AWS SSM Session Manager — no open ports, no public IPs, no SSH keys
  • Vault auto-fill into every session type; credentials never visible in the UI
ShellYard Connections — folder tree with SSH, RDP, and embedded-browser entries; details panel showing host, port, username, and vault auth method for the selected entry.

HTTP / GraphQL / Realtime

API client that knows your infrastructure.

  • SSH-tunneled requests
  • · 4 import paths
  • · GraphQL · WebSocket · SSE · MQTT

Full HTTP REST workflow — collections, environments, scripts, tests, and a runner that does sequential or parallel iterations with HTML and JSON reports. Imports from Postman v2.1, OpenAPI 3.x, cURL, and HAR. The differentiator is routing: any request can flow through an active SSH session, so internal-only APIs are reachable without staging port forwards.

  • Pre-request and post-response scripts; assertions on status, headers, body
  • Auth presets — Basic, Bearer, API key, OAuth2 (auth code / client creds / password), Digest, AWS SigV4
  • GraphQL with query + variables editors; WebSocket, SSE, MQTT for realtime
A REST request open in ShellYard with response body, headers, and timing breakdown visible.

Data Inspector

Five engines. One workspace. SSH-tunneled.

Engine-aware query editor, schema browser, and live Health dashboards on every supported database. Routing inherits the connection — point a database at a saved SSH host and the connection tunnels automatically.

Postgres

pgx · jsonb · pg_stat_*

MySQL

go-sql-driver · processlist

SQLite

any .sqlite file

Redis

SCAN-paged · SLOWLOG · INFO

MongoDB

JSON spec · serverStatus

ShellYard Data Inspector listing saved connections across Postgres, MySQL, SQLite, Redis, and MongoDB.

Network diagnostics

32 tools, one Ask Magellan button.

Probes, capture, decode, calc, and device-side workflows — every diagnostic surface attaches its current output to Magellan with one click. The point is not the count; the point is no tab-switching.

  • Probes — Host probe, ping sweep, port scanner, Nmap, network discovery
  • Trace + capture — pure-Go MTR (loss, latency, ASN, reverse DNS), libpcap, TLS Inspector
  • Lookup + decode — DNS, WHOIS / RDAP, NTP, SNMP v1/v2c/v3, JWT, base64, hex, hash, JSON / YAML
  • Math — Subnet, PoE budget, cron
  • Device — AD browser, AV control, bulk command, batch SSH, config backup + diff, syslog, AP scanner, file transfer (TFTP / FTP / SFTP)
ShellYard network diagnostics tool grid — MTR, DNS, packet capture, TLS inspector, and more.

Documents, IPAM, and Spaces

Per-client Spaces. Documentation that lives next to the tools.

  • Team isolates per Space
  • · IT Glue + Hudu importers
  • · Per-Space CMK on Enterprise

A Space is an isolation boundary for credentials, connections, documents, IPAM, HTTP collections, database connections, and audit trails. Personal Spaces stay private. Shared Spaces unlock multi-user collaboration on Team. Enterprise mints a customer-managed KMS key per Space and cryptographically erases on client offboarding.

  • Documents, runbooks, IPAM (subnets + hosts), snippets, password-protected share links — Team and above
  • IT Glue and Hudu importers — bring the docs you already maintain
  • Per-Space audit-log export, filterable by actor / action / target on Enterprise
ShellYard IPAM view showing subnets and host inventory for a Space.

Magellan

Every tool's output,
one click from AI.

Magellan is ShellYard's AI assistant. Bring your own Anthropic, OpenAI, or Ollama / OpenAI-compatible key. ShellYard does not meter, mark up, or proxy AI usage.

What makes Magellan useful is context. Every tool in ShellYard can attach its current output: a packet capture, a slow query, a 401 response, a switch config diff, a DNS trace, a Redis key, or a Mongo document sample.

No copy-paste into a separate AI browser tab. ShellYard shows what context is attached and redacts secrets before sending.

Five-stage flow: Explain → Suggest → Draft → Review → Execute. You always run the command. Magellan never executes autonomously.

Explore Magellan

Built for

Operators who carry too many windows.

Backend + DevOps

API testing, database inspection, SSH, Magellan in one window. Tunnel HTTP and database connections through any active SSH host.

Network engineers

MTR, packet capture, TLS, SNMP, AP scanning, config backup/diff, bulk command across switch fleets — and Magellan over each tool’s output.

MSPs

Per-client Spaces with audit trails, shared runbooks, vault-backed credentials, IT Glue + Hudu importers, audit export. Per-Space CMK on Enterprise.

SREs + platform

Live database Health dashboards, realtime clients for WebSocket / SSE / MQTT, API debugging, multi-window workflows, audit trails.

Pricing

Pick a tier. Or stay on Free forever.

Free is genuinely free, no card. Pro and Team start with a 14-day trial — credit card required, cancel before day 14 with no charge.

Free

For solo evaluation and local troubleshooting.

$0forever
  • Full remote-access stack — SSH, Telnet, RDP, serial, embedded browser, local terminal, AWS SSM
  • Network Tools (everyday kit) — DNS, WHOIS, NTP, ping sweep, port scanner, subnet calc, MAC/OUI, encoders, JSON/YAML, cert checker, cron, AP scanner, audit viewer, credentials manager, import wizard
  • SQLite Data Inspector with Health dashboard
  • HTTP REST client capped at 1 collection / 25 requests
  • Magellan AI — bring your own Anthropic, OpenAI, or Ollama / OpenAI-compatible key
  • Local credential vault (OS keychain) and Snippets
  • Personal Space, single user
Download free
Best for individuals

Pro

For solo professionals, consultants, DevOps, and full-stack operators.

$24/ month, billed annually
  • Everything in Free
  • Network Tools (advanced kit) — packet capture, MTR, SNMP browser, TLS inspector, bandwidth monitor, config backup + diff, AD, file transfer, syslog, Nmap, DHCP, MAC tracker, host probe, PoE budget
  • HTTP REST client — unlimited collections, environments, runner, scripts/tests, imports (Postman v2.1, OpenAPI, cURL, HAR)
  • GraphQL and Realtime (WebSocket, SSE, MQTT) clients
  • Data Inspector — Postgres, MySQL, Redis, MongoDB (plus SQLite from Free), all with live Health dashboards
  • SSH-tunnel routing for HTTP requests and database connections
  • Cloud-synced credential vault (KMS-encrypted) — connections, collections, environments, snippets, docs
  • 1 Shared Space

$24/mo billed annually ($288/yr). Or $29/mo billed monthly. 14-day free trial — credit card required, cancel any time before day 14 with no charge.

Best for growing teams

Team

For internal IT teams and MSPs running shared client operations.

$49/ seat / month, billed annually
  • Everything in Pro
  • Unlimited Shared Spaces with per-Space audit trail
  • Bulk + collaboration Network Tools — bulk command runner, batch SSH, IPAM auto-discovery
  • Shared Documents, runbooks, IPAM, snippets, HTTP collections, database connections
  • IT Glue and Hudu importers (Documents + IPAM)
  • Public document share links
  • Audit log export — CSV, per actor / action / target
  • 5 MiB / document, 1 GiB / Space, 90-day version history

$49/seat/mo billed annually ($588/seat/yr). 3-seat minimum. 14-day free trial — credit card required, cancel any time before day 14 with no charge.

Enterprise

For organizations that need stronger isolation, procurement support, and compliance-oriented controls.

From $99/ seat / month, billed annually
  • Everything in Team
  • Per-Space customer-managed KMS — KMS-encrypted vault and Documents per Space
  • Cryptographic erasure on client offboarding (kms:ScheduleKeyDeletion)
  • Per-Space audit-log filtering and export for client reporting
  • 10 MiB / document, 5 GiB / Space, unlimited version retention
Contact sales

From $99/seat/mo billed annually ($1,188+/seat/yr). 10-seat minimum. Custom annual contracts.
See the full comparison →

One window.
Whole incident.

SSH into the host. Test the API through the same session. Find the slow query. Trace the network path. Document the fix. Ask Magellan when you need a second set of eyes — without leaving the window.

Download free View pricing