Alchementary Link · Desktop connection workspace
SSH, Telnet, RAW TCP, VNC, GitHub and a local shell — in tabs and split panes, not five separate apps. Credentials live in your OS keychain or an encrypted vault, and files move over a built-in SFTP browser without ever leaving the terminal workspace.
A terminal for SSH, another for the one Telnet device nobody has replaced, a VNC client for the box without a proper remote-access story, a browser tab for GitHub, and a separate tool entirely when a downloaded binary needs a closer look. Link is what happens when those are one application instead: tabbed, organised, and built so credentials never sit around in plaintext.
It is not trying to be an IDE, a cloud dashboard or a fleet manager. It is a fast, focused desktop workspace for the actual moment-to-moment work of connecting to things, moving files, and occasionally figuring out what a file really is.
The design choices that make Link feel like one tool rather than five apps stapled together.
SSH, Telnet, RAW TCP, VNC, GitHub and a local shell share the same tabbed interface, the same profile list and the same keyboard shortcuts — so switching target types is not switching applications.
The OS keychain is used first on macOS, Linux and Windows; an AES-256-GCM vault with Argon2id key derivation steps in where there isn't one. TOTP codes generate automatically, and host-key policy is a per-profile choice, not a global gamble.
Split panes, pinned tabs, broadcast input across connected sessions and a one-click reconnect overlay — because real operational work rarely happens in a single terminal window.
A disconnected overlay with one-click reconnect, and auto-reconnect for SSH, Telnet and RAW TCP profiles that support it — so a flaky link doesn't mean re-typing everything from scratch.
Snippets, trigger rules that watch terminal output, and expect-style login scripts cover the repetitive parts of the job — configured in the UI, not hidden in a config file you have to remember the syntax for.
Six connection types, a proper file browser, and the operational tooling that turns a terminal into a working session.
Connections
SSH, Telnet, RAW TCP, VNC, GitHub repository browsing and a local shell, each as a saved profile or a one-off quick connect — organised with groups, tags, favourites and search.
~/.ssh/config.link bundles for exporting and sharing profilesSSH
Password, public key, keyboard-interactive and agent authentication, with agent forwarding, jump hosts, SOCKS5 and HTTP CONNECT proxies, and local or remote port forwarding you can manage while the session is live.
SFTP
A resizable panel beside the terminal, with breadcrumbs, bookmarks, multi-select batch actions and a permission-aware directory picker for uploads.
RAW TCP & Telnet
Direct socket sessions with text, hex and split views, payload presets, quick-insert control bytes and captures — plus full Telnet option negotiation for the legacy estate that never went away.
VNC & GitHub
A noVNC-based viewer with scale-to-fit, view-only mode and optional SSH tunnelling, next to a GitHub browser that groups repositories by owner, sorts by activity, and works against GitHub Enterprise too.
Terminal
A fast, configurable terminal — font, size, scrollback and cursor style all yours to set — with in-terminal search (regex and whole-word options included), and alternate-screen handling that gets tmux, screen and byobu right.
Recording & playback
Start and stop a recording per session in asciicast v2-compatible format, then browse, play back and manage saved recordings from a dedicated panel.
Automation
A snippet library with folders and variables, a broadcast mode for running one command across every connected session, and trigger rules that watch terminal output for a notification, a highlight, a sound, or all three.
Credentials & audit
The OS keychain is used first — macOS Keychain, Linux Secret Service, Windows Credential Manager — with an AES-256-GCM, Argon2id-derived vault as the fallback, and a per-profile choice of Saved, Session-only or Ask-every-time.
Link is not a cloud service — there is no server component, no team sync and no shared state; your profiles, vault and recordings live on the machine you installed it on. It is not an IDE and does not try to replace one. There is no mobile build, and the macOS and Windows binaries below are not yet code-signed, so your OS will ask you to confirm the first time you open one (see the FAQ).
Free to download, version 3.0.0. Pick the build for your machine below.
| Platform | Architecture | Size | Download |
|---|---|---|---|
| macOS | Apple Silicon (arm64) | 7.8 MB | Download |
| Windows | 64-bit (x64) | 8.7 MB | Download |
| Windows | ARM64 | 7.9 MB | Download |
| Linux | 64-bit (x64) | 8.4 MB | Download |
macOS on Intel and Linux on ARM64 are on the way. Get in touch if you need one sooner.
The macOS and Windows builds are not code-signed yet, so Gatekeeper and SmartScreen flag them as coming from an unidentified developer. On macOS, right-click (or Control-click) the app and choose Open the first time rather than double-clicking it. On Windows, click More info, then Run anyway. Signed builds are on the roadmap.
In your OS keychain by default — macOS Keychain, Linux Secret Service, or Windows Credential Manager. If none is available, Link falls back to a local vault encrypted with AES-256-GCM using an Argon2id-derived key from a master password you set. Nothing is sent anywhere; there is no server component.
Yes. Settings → About has an Import ~/.ssh/config action that reads your existing OpenSSH Host blocks — hostnames, usernames, ports, identity files and jump hosts — and turns them into connection profiles.
Link can check for updates in the background or on demand from Settings, and reports the current and latest version, release notes, the release URL and when it was published. Nothing is downloaded or installed without you choosing to.
Alchementary Link is proprietary software. It's free to download and use today; get in touch if you would like to talk about rolling it out across a team or organisation.
Independent products, built because they should exist.
4ensics Leviathan
A complete binary analysis, reverse-engineering and digital-forensics workbench, running inside a browser tab with your artefacts kept local.
See LeviathanBlackwall
OAuth 2.1 and OpenID Connect with passkeys only, an integrity-chained audit log and signed project licences — in a single binary.
See BlackwallFury
Post-quantum file encryption, a documented file format and a Go library, for material that must stay unreadable long after the mathematics has moved on.
See FuryAsk about team rollout, a feature that isn't there yet, or whether Link is the right fit for the estate you actually run.
hello@alchementary.co.uk