Conduit
by
Manages SSH, RDP, VNC, and web sessions across macOS, Windows, and Linux with an encrypted credential vault and a built‑in MCP server that AI agents can drive through tool calls.
Conduit Overview
What is Conduit about?
Conduit provides a single cross‑platform UI for connecting to remote servers via SSH, RDP, VNC, and browser‑based portals. Every connection, session, and credential operation is exposed through a local Model Context Protocol (MCP) server, enabling Claude Code, Codex, or any MCP‑compatible agent to control the UI programmatically.
How to use Conduit?
- Install – Download the latest
.dmg(macOS),.exe(Windows) or.AppImage/.deb(Linux) from the GitHub releases page orconduitdesktop.com/download. - Run the app – Launch the Electron application; set up a master password for the AES‑256 vault.
- Add connections – Create SSH, RDP, VNC, or Web entries, store credentials in the vault, and open sessions in tabbed panes.
- Register the MCP server with your AI client. Example for Claude Code:
(Similar commands are provided for Windows PowerShell and Linux.)# macOS claude mcp add conduit -- node "/Applications/Conduit.app/Contents/Resources/mcp/dist/index.js" \ --env CONDUIT_SOCKET_PATH="$HOME/Library/Application Support/conduit/conduit.sock" \ --env CONDUIT_ENV="production" - Interact via AI – In a Claude Code or Codex session, issue natural‑language commands such as
run uptime on the prod-db-1 SSH sessionortake a screenshot of the Windows RDP box and click the Start menu. - Approve tool calls – Conduit displays an approval dialog for each agent request; trusted tools can be marked “always allow”.
Key Features
- Unified management of SSH, RDP, VNC, and web sessions with split‑view panes and tabbing.
- Local AES‑256 encrypted credential vault (zero‑knowledge, optional cloud sync).
- Built‑in MCP server exposing 60+ tools (terminal execution, GUI interaction, credential reads, document edits, etc.).
- AI‑first design: Claude Code and Codex connect directly to their providers using your own subscription; no proxy or key leakage.
- Cross‑platform Electron client with native macOS, Windows 11, and Ubuntu themes.
- FreeRDP 3.x engine with dynamic resizing, clipboard sync, and drag‑and‑drop file transfer.
- VNC full‑mouse/keyboard support and screenshot capture.
- Chromium webview with multi‑tab browsing, autofill, and DOM‑aware actions.
- Team vaults: zero‑knowledge, real‑time sync, role‑based access, key rotation.
- Import from Devolutions RDM (
.rdm) and Conduit export files. - Extensive safety controls: per‑tool approval, argument masking, auto‑deny timeout, audit logging.
Use Cases
- DevOps & SRE automation – Let Claude Code execute maintenance scripts over SSH, rotate secrets, or deploy changes via UI‑driven workflows.
- IT help‑desk – Automate repetitive RDP/VNC tasks such as screenshot capture, file transfer, or UI navigation.
- Security audits – Programmatically enumerate credentials, read vault entries with approval, and generate audit reports.
- Hybrid infrastructure management – Manage mixed Linux/Windows fleets from a single interface while agents drive both CLI and GUI actions.
- Team collaboration – Share encrypted credentials and connection definitions across a distributed ops team without exposing secret keys.
FAQ
Q: Do I need an AI subscription to use Conduit? A: No. Conduit itself is free and open source. You only need your own Claude Code (Anthropic) or Codex (OpenAI) subscription if you want AI‑driven automation.
Q: Does Conduit store my API keys? A: No. The AI binaries run locally and authenticate directly with their providers. Conduit never sees your API keys or tokens.
Q: Can I use Conduit without the MCP server? A: Yes. The UI works independently; the MCP server is optional and only needed for AI integration.
Q: Is the credential vault cloud‑based? A: By default it is local‑first and encrypted with AES‑256. Cloud sync is an optional, zero‑knowledge feature available in the paid Team/Pro tier.
Q: Which operating systems are supported? A: macOS (Apple Silicon & Intel), Windows 10/11 (x64 & ARM64), Linux (x64 & ARM64) via AppImage, .deb, or source build.
Q: How do I contribute?
A: Open issues or pull requests on the GitHub repository. A CONTRIBUTING.md will be added soon; for now follow the standard Contributor Covenant guidelines.
Conduit's README
Conduit
The remote-connection manager Claude Code can drive.
What is Conduit?
Conduit is a cross-platform remote connection manager for SSH, RDP, VNC, and web sessions with an encrypted credential vault. It runs on macOS, Windows, and Linux.
What makes it different: Conduit ships a Model Context Protocol (MCP) server that exposes every connection, every session, and every credential operation as a tool. Point Claude Code or Codex at it and your AI agent can open an SSH shell, click through an RDP desktop, fill out a web form, read credentials with approval, or manage a fleet of servers — through the same connections you already use.
Conduit does not ship its own AI. You bring your own: Claude Code (Anthropic) or Codex (OpenAI), using your own subscription. Conduit never proxies your AI calls and never sees your API keys or tokens.
Who is Conduit for?
- DevOps & SREs who want their AI agent to operate real infrastructure, not just generate text about it
- System administrators managing mixed SSH / RDP / VNC fleets
- IT professionals who need one tool for shells, remote desktops, and web portals
- AI-first engineers already using Claude Code or Codex daily
- Teams that need shared, zero-knowledge credential vaults
Why Conduit
- MCP-native. The MCP server is not an add-on — it is the product's first-class interface. Anything you can do in the UI, an agent can do through a tool call.
- Bring your own subscription, no proxy. Claude Code and Codex authenticate directly with Anthropic and OpenAI using your own account. Conduit never sees your API keys, tokens, or prompts.
- Local-first. Credentials live in a local AES-256 vault. Cloud sync is optional and zero-knowledge.
- Open source client. The Electron app, protocol handlers, FreeRDP helper, and MCP server are Apache 2.0. You can read exactly what AI agents can see and do.
- Multi-protocol. SSH, RDP, VNC, web — one app, one vault, one MCP endpoint.
MCP Quick Start
Register Conduit's MCP server with Claude Code:
# macOS
claude mcp add conduit -- node "/Applications/Conduit.app/Contents/Resources/mcp/dist/index.js" \
--env CONDUIT_SOCKET_PATH="$HOME/Library/Application Support/conduit/conduit.sock" \
--env CONDUIT_ENV="production"
# Windows (PowerShell)
claude mcp add conduit -- node "C:\Users\<you>\AppData\Local\Programs\Conduit\resources\mcp\dist\index.js" `
--env CONDUIT_SOCKET_PATH="\\.\pipe\conduit" `
--env CONDUIT_ENV="production"
# Linux
claude mcp add conduit -- node "/opt/Conduit/resources/mcp/dist/index.js" \
--env CONDUIT_SOCKET_PATH="$XDG_RUNTIME_DIR/conduit/conduit.sock" \
--env CONDUIT_ENV="production"
Then in any Claude Code session:
> list my active connections
> run `uptime` on the prod-db-1 SSH session
> take a screenshot of the Windows RDP box and click the Start menu
Codex and other MCP-compatible clients work the same way — Conduit exposes a standard MCP endpoint over a local Unix socket (or named pipe on Windows).
Key Features
Remote connection management
Tabbed sessions, split-view panes, and side-by-side work across protocols.
| Protocol | Highlights |
|---|---|
| SSH | xterm.js terminal, key + password auth, multi-session tabs |
| RDP | FreeRDP 3.x engine, dynamic resize (RDPEDISP), clipboard sync, drag-and-drop file transfer, High DPI / Retina |
| VNC | Full mouse/keyboard interaction, clipboard sync, screenshot capture |
| Web | Native Chromium webview, multi-tab browsing, autofill, DOM-aware interaction |
| Commands | Run local scripts as managed entries with timeout and shell selection |
- Bidirectional clipboard for RDP and VNC
- Shared folder redirection with per-drive read-only enforcement
- Edge / WebView2 on Windows for native SSO against M365, ServiceNow, SharePoint
- Up to 12 tabs per web session with address bar and navigation controls
MCP server — the differentiator
The MCP server exposes 60+ tools covering every corner of the app. Agents connect over a local socket; nothing leaves your machine unless you tell it to.
Terminal execute commands, read output, send keystrokes, create local shells
RDP screenshot, click, type, drag, scroll, resize remote desktops
VNC screenshot, click, type, drag, scroll remote sessions
Web screenshot, navigate, click by CSS selector, fill forms, execute JS
Web tabs list, create, close, switch tabs in web sessions
Credentials list, create, read (with approval), delete stored credentials
Connections list, open, close SSH / RDP / VNC / web sessions
Documents read, create, update markdown documents in the vault
Entries get metadata, update notes on any vault entry
Supported agents:
| Agent | Integration |
|---|---|
| Claude Code (Anthropic) | Full MCP tool access. Runs under your own Claude subscription. |
| Codex CLI (OpenAI) | Full MCP tool access. Runs under your own OpenAI subscription. |
| Any MCP-compatible client | Standard MCP over local socket / named pipe. |
Conduit does not proxy AI requests and does not see your API keys, tokens, or conversation content. Claude Code and Codex connect directly to their respective providers using credentials you manage.
How it works
- Connect to your servers via SSH, RDP, VNC, or web in Conduit.
- Ask Claude Code or Codex to perform a task against those connections.
- Approve tool calls through the universal approval gate (or mark trusted tools "always allow").
- Watch the agent work — executing commands, driving GUIs, reading screens.
Safety controls
- Per-tool and per-category approval with color-coded badges (read, execute, write, credential)
- Sensitive argument masking (passwords and tokens redacted in prompts)
- 120-second auto-deny timeout for unattended prompts
- Rate limiting and full audit logging
Agent chat panel
Conduit's in-app chat panel hosts Claude Code and Codex sessions side-by-side with your connections. The chat UI is a thin shell — the agent binaries run locally, authenticate with their own providers, and drive Conduit through the same MCP endpoint an external agent would use.
No built-in models. No proxied API calls. No subscription bundled with Conduit.
Encrypted credential vault
All credentials live in a local, AES-256 encrypted vault — not in plaintext config files, not in the cloud (unless you opt in to Pro sync).
- AES-256 with master-password key derivation
- SSH key storage with fingerprint display and key generation (Ed25519, RSA, ECDSA)
- TOTP / MFA codes with countdown timer
- Password generator with configurable length and character sets
- Auto-lock on inactivity
- Auto-type into active sessions (right-click a credential)
- Global credential picker —
Cmd+Shift+Spacefrom anywhere, even when tray-minimized - Passphrase-encrypted
.conduit-exportfiles
Team vaults (Pro/Team, optional)
Zero-knowledge credential sharing. The server stores ciphertext; keys never leave the client.
- X25519 key exchange, per-vault encryption keys
- Realtime sync across devices
- Folder-level roles (admin / editor / viewer)
- VEK rotation when members are removed
- 2-year audit retention, offline change queue
- 6-word BIP39 recovery passphrase
Platform themes
Four OS-native themes with matching icon sets.
| Theme | Style |
|---|---|
| Default | Conduit Classic |
| macOS Tahoe | Liquid-glass translucency, SF Pro, backdrop blur |
| Windows 11 | Fluent, Mica surfaces, Segoe UI, WinUI 3 controls |
| Ubuntu | GNOME / Libadwaita, Ubuntu font |
Dark + light modes, plus Ocean, Ember, Forest, Amethyst, Rose, Midnight, and OS-native color schemes.
Import from other tools
- Devolutions Remote Desktop Manager (
.rdm) — SSH, RDP, VNC, web, credentials, folders, secure notes, documents. Automatic decryption, duplicate detection, folder preservation. - Conduit vault export (
.conduit-export) — encrypted transfer between vaults.
Installation
Download the latest release from GitHub Releases or conduitdesktop.com/download.
- macOS —
.dmg, Apple Silicon and Intel - Windows —
.exe, Windows 10/11 (x64 and ARM64) - Linux —
.AppImageor.deb, x64 and ARM64
Comparison
| Conduit | Devolutions RDM | Royal TS | Termius | MobaXterm | |
|---|---|---|---|---|---|
| SSH / RDP / VNC / Web | Yes | Yes | Yes | SSH + limited | Yes (Windows) |
| Built-in MCP server for AI agents | Yes | No | No | No | No |
| Claude Code / Codex integration | Yes (your own subscription) | No | No | No | No |
| macOS native app | Yes | Limited | No (Windows-first) | Yes | No |
| Zero-knowledge team vaults | Yes | Requires DVLS server | Requires server | Yes | N/A |
| Open-source client | Yes (Apache 2.0) | No | No | No | Partial |
| Free tier | Yes | Free for personal | Free (limited) | Free (limited) | Free (Home) |
| Pro pricing | 10 /mo | $200/yr (Team) | $70 one-time | $10/mo | $69 one-time (Pro) |
Conduit's angle: it is the only remote-connection manager built to be driven by an AI agent. If you already use Claude Code or Codex, Conduit is the bridge between your agent and your infrastructure.
What's open source
The desktop client is open source under Apache 2.0 — this entire repository, including the Electron app, protocol handlers, FreeRDP helper, MCP server, and credential vault.
Contributing
We welcome issues, discussions, and pull requests. A CONTRIBUTING.md with dev setup, code style, and PR conventions is in progress — watch this repo for it.
In the meantime:
- File bugs and feature requests at GitHub Issues
- Check open discussions before starting large changes
- Sign your commits and keep PRs focused
Documentation
Full documentation at conduitdesktop.com/docs:
- Getting Started
- SSH · RDP · VNC · Web
- MCP Server Setup
- MCP Tools Reference
- Claude Code Integration
- Codex Integration
- Vault & Credentials
- Team Vaults
- Import Guide
Support
- Bug reports — GitHub Issues or in-app via Help > Submit a Bug
- Feature requests — GitHub Issues or in-app via Help > Submit Feedback
- Website — conduitdesktop.com
License
This repository is licensed under Apache License 2.0.
The Conduit backend API and marketing website are proprietary and live in separate repositories. Conduit, the Conduit logo, and associated branding are trademarks of the Conduit project maintainers.
Keywords
remote-desktop-manager ssh-client rdp-client vnc-client mcp-server model-context-protocol claude-code codex ai-agent-tools credential-vault password-manager connection-manager devops-tools sysadmin remote-access electron cross-platform team-vault zero-knowledge-encryption freerdp open-source apache-2
Conduit Reviews
Login Required
Please log in to share your review and rating for this MCP.
Similar MCP Servers like Conduit
Explore related MCPs that share similar capabilities and solve comparable challenges
Headroom
by headroomlabs-ai
Compress tool outputs, logs, files, RAG chunks, and conversation history before they reach the LLM, keeping answers identical while saving up to 95% of tokens for JSON payloads.
Git
Officialby modelcontextprotocol
A Model Context Protocol server for Git repository interaction and automation.
Zed
OfficialClientby zed-industries
A high‑performance, multiplayer code editor designed for speed and collaboration.
Everything
Officialby modelcontextprotocol
Model Context Protocol Servers
Time
Officialby modelcontextprotocol
A Model Context Protocol server that provides time and timezone conversion capabilities.
Cline
OfficialClientby cline
An autonomous coding assistant that can create and edit files, execute terminal commands, and interact with a browser directly from your IDE, operating step‑by‑step with explicit user permission.
Context7 MCP
Officialby upstash
Provides up-to-date, version‑specific library documentation and code examples directly inside LLM prompts, eliminating outdated information and hallucinated APIs.
Daytona
by daytonaio
Provides a secure, elastic infrastructure that creates isolated sandboxes for running AI‑generated code with sub‑90 ms startup, unlimited persistence, and OCI/Docker compatibility.
Continue
OfficialClientby continuedev
Enables faster shipping of code by integrating continuous AI agents across IDEs, terminals, and CI pipelines, offering chat, edit, autocomplete, and customizable agent workflows.