The relay station
in your pocket.
Chapar carries a command from your phone to any server the way its namesake carried messages across an empire — fast, direct, and trusted at every hop. SSH, cloud, Kubernetes, a full network toolkit, and on-device AI, with nothing routed through us.
iOS 17+ · iPhone & iPad · no account, ever
command blocks · on-device diagnosis · zero servers of ours in between
Everything one relay carries.
Each stop does one job well — connect, look around, automate, understand, and stay out of anyone’s way but yours.
Connect
A real terminal that behaves — vim, htop, mouse reporting, all of it — plus the resilience mobile SSH usually gets wrong.
- SSH & Telnet, jump hosts
- Command blocks, not a text wall
- tmux resume across app kills
- Auto-reconnect & keepalive
- SFTP, port forwards, SOCKS5
- Multiple sessions, switcher
Discover
A full network toolkit that stays honest about what a phone actually can and can’t do — no fake ICMP, no wrapped APIs.
- Port scanner & live nmap
- Ping with a real latency graph
- TLS certificate inspector
- DNS lookup, real wire format
- SNMP for switches & routers
- Packet capture, IP calculator
Automate
Run one command across a fleet, or a whole runbook — interactively with a human confirming each step, or on a schedule when every step is provably read-only.
- Fleet execution with outlier detection
- Runbooks, scheduled or interactive
- Snippets with fill-in placeholders
- Shortcuts & Siri
- Scheduled health checks
- Home Screen widget, Live Activities
Understand
Apple’s on-device model reads your output so you don’t have to — explaining, summarising and diagnosing without a single byte leaving the phone.
- Explain a command before you run it
- Summarise a wall of output
- Diagnose a failed step
- Ask for a command in plain English
- An agent that plans read-only checks
- Redact secrets before you share
Protect
Hardware-backed keys, biometric lock, and a production guardrail that asks before anything destructive runs.
- Secure Enclave keys, unexportable
- Face ID / Touch ID lock
- Keyboard-interactive MFA
- Host key pinning
- Production guardrail on risky commands
- End-to-end encrypted sync, optional
“The relay carries the message. It doesn’t read it, keep it, or tell anyone it passed through.”
There is no Chapar server. Your commands and output never leave your phone and the box you’re connecting to.
Explanations, summaries and diagnosis run on Apple’s local model — nothing sent to a cloud provider.
Secure Enclave keys are hardware-bound and can’t be exported, ever.
Optional, off by default, and end-to-end encryptable with a key only your devices hold.
Carry the terminal with you.
Chapar is built for the admin who’s away from their desk more than on it — and who’d rather trust their own judgement than a server they’ve never heard of.