Reach JumpServer machines from your Mac
Sign in to your JumpServer account once and the machines granted to you sync in, ready to open with a click. Nothing to copy from the web page, and permissions and auditing still run through the bastion.
How it usually goes
The machines sit behind a bastion and the logins are issued on demand. To reach one you open the web console, find the machine, copy an address and a one-off password, switch to your terminal, paste, connect.
Five machines in a day means doing that five times. The password expires — do it again. Open a second tab — do it again.
The other way round
Fill in the JumpServer address and your account once, under Settings → Bastion. From then on the machines granted to you appear in Connections alongside the servers you saved yourself, just marked as synced.
Click one and MyShell fetches that connection’s login for you. The web console stays closed.
Once connected, the channel is held open: more tabs on the same machine, the file panel, the live load view — all of them run over it, with no second sign-in.
When your company uses QR or SSO sign-in
Account sign-in genuinely does not work everywhere: QR codes, single sign-on, or 2FA delivered by SMS or e-mail.
Use the other route: turn on "Allow pasting bastion details" on the same settings page, then pick "Paste bastion details" under New session and paste the whole block copied from JumpServer. Everything after that is the same — one channel you keep reusing.
Permissions, auditing and your password
You still only see the machines assigned to you; nothing else becomes visible. Connections still go through the bastion and are still recorded. This changes the door you walk through, not the rules.
The JumpServer password lives in the macOS Keychain. The first time it is needed macOS asks for your Mac password once — choose "Always Allow" and it stops asking. If you would rather avoid Keychain prompts entirely, the same page can store it in a local encrypted file instead.
If the account uses two-factor auth, put the authenticator secret (or the whole otpauth:// link) into the 2FA field and MyShell generates the codes itself, so you are not reaching for your phone each time.
Three steps to set up
Enter your account
Settings → Bastion: JumpServer address, username, password, plus the 2FA secret if you use one. Save.
Let it sync
Open Connections — the machines granted to you show up on their own.
Click to connect
Exactly like your own servers. Logins are fetched for each connection; you never handle them.
Try it
Free, macOS 12 and up. Install it, follow the three steps above, and you are on your first machine in five minutes.