Session persistence
Close the client, suspend the laptop, lose the network — agents keep running. Reopen and you're back in the same pane with scrollback intact. A four-hour migration no longer depends on one SSH connection staying up.
Operate Claude Code, Codex, Gemini CLI, Aider, and more — on build servers, GPU boxes, staging hosts, and this computer. Every agent runs inside a tmux session on its host: close the client, suspend the laptop, lose the network — work continues.
AgentMux never owns the agent process — it attaches to a tmux session on the host. Persistence is guaranteed by construction, not by the client staying online.
Close the client, suspend the laptop, lose the network — agents keep running. Reopen and you're back in the same pane with scrollback intact. A four-hour migration no longer depends on one SSH connection staying up.
Every agent's pane is a full terminal — colour, mouse reporting, selection, search — not a transcript view. Step in mid-task, correct the agent, and hand control back without restarting the run.
Split the terminal area into up to nine panes — a 3×3 wall across hosts, each independently interactive. Drag the seams, double-click a tab to zoom, and the layout reflows with the window and is restored on next start.
Send one instruction to any selection of agents; each returns a receipt confirming delivery. Fan-out to a fleet is auditable rather than assumed.
A local model served by Ollama can take an objective — say, working out why an agent stalled — one tool call at a time. Every mutating operation is held for your explicit approval; scheduled patrols are strictly read-only.
Project facts, preferences, and agent activity are indexed for retrieval by wording or by meaning. Embeddings are computed locally; nothing leaves the machine. Credentials matching known patterns are redacted before storage.
Everything below is an actual application screenshot — no concept renders.
Attach to any agent's tmux pane: full colour, mouse reporting, search and selection. The side panel shows process state, recent output, and lifecycle controls.

Send the same instruction to any selection of agents, across projects and hosts. Each agent returns a delivery receipt, turning fan-out from "assumed" into "confirmed, one by one."

The install panel inspects a host first and offers only the agent CLIs and runtimes it can actually support, stating why others are unavailable. Installation runs inside tmux, so a dropped connection can't leave a partial package tree.

Apple's system palette by default, with six alternative themes including Nord, Solarized, and a light theme. Information density tuned for long supervision sessions.

These aren't settings. They're design decisions, and most of them cannot be switched off.
Passwords and key passphrases are encrypted with AES-256-GCM before storage; the key lives in the OS keychain (Keychain, Credential Manager, Secret Service). If the keychain is unavailable, a 0600-file fallback is reported in the status bar.
Host keys are pinned on first connection. Any subsequent mismatch aborts the connection with an explanation — a man-in-the-middle swap cannot pass silently.
No secret crosses into the UI process. The interface learns only whether a secret is set — never its value.
The orchestrator can only call a fixed whitelist of tools, each carrying a risk tier fixed at declaration. Execution passes through a single gate combining tier, host trust level, and the run's trigger.
Scheduled patrols are refused every non-read tool unconditionally — and that restriction is not configurable. A patrol can report a stalled agent, but has no authority to act on it.
Every step of every run is recorded — including proposals that were refused, rejected, or left unanswered. Remote output enters the model marked as data; instruction-shaped text raises a flag on the approval card.
Migrations, refactors, and test campaigns that outlast a working session or a network link.
Three to fifty hosts with concurrent agent activity, presented as one tree with per-agent status.
Instruct an entire fleet in one action, with confirmation of what was delivered.
Bring a new host to a working state without assembling install commands by hand.
Scheduled read-only patrols that report stalled agents — without authority to act on them.
Planning, embeddings, and memory run locally. No proxying of agent model traffic, no reading of API keys.
Remote hosts need only tmux and an SSH account — AgentMux can install tmux where it's missing. This computer is even simpler: no credentials at all.
Read the full docs→Remote: address, user, and one of ssh-agent / key / password, with jump hosts supported. Local: nothing but a name.
A working directory on that host. Or browse the host's files and add the directory in place — its name, path, and host are already known.
A name and the command that starts it. Hit Start and it's running inside tmux on the host.
claude --dangerously-skip-permissionsAttaching to an agent, opening a shell, installing a CLI, changing theme — the fastest route to all of it.
Ctrl / ⌘ + KEvery file ships with a .sha256 alongside.
xattr -dr com.apple.quarantine);
on Windows, "More info → Run anyway". Downloading with
curl -L -O avoids the macOS quarantine attribute.
No. Objectives, prompts, and repository conventions remain yours. The orchestrator investigates and proposes; any action that modifies a host executes only after your explicit approval.
A POSIX shell and tmux on every host (AgentMux can install tmux where it's missing), plus SSH on remote ones. This computer qualifies directly on Linux and macOS; on Windows the same machine offers two local hosts — the WSL distribution (where tmux lives) and native Windows (PowerShell, persisted by a built-in session daemon, so closing the window does not stop native work either). Remote Windows hosts are not supported.
No. Only local orchestration and semantic memory search need Ollama (one chat model plus one embedding model). Without it, everything else is fully functional.
No — deliberately. Agent traffic goes straight from the host to whichever provider the agent CLI is configured for. AgentMux does not proxy it and does not read the keys, so it can neither report cost nor enforce a budget.
One operator per installation. State, credentials, and the decision log live on the workstation — no shared server, no team account, no central audit sink. Two people working the same fleet see the same tmux sessions but keep separate histories.
Never. Removing a workspace or agent record only removes the local record — the tmux session keeps running. The one control that destroys a running session is named Kill, and it confirms first, stating what is lost.
One binary, one SQLite file, zero servers. Download and go — MIT licensed.