Reach Any Machine — No Public IP
Drop a tiny agent on any box behind NAT, CGNAT or a LAN-only address. It dials out to NebulaSSH over HTTPS, and you get a real interactive shell straight from the web terminal — no port-forwarding, no firewall holes, no static IP.
Download for your OS
Windows agents are a GUI app — just double-click, paste your enrollment token, and click Connect. No command line required.
Windows 7 / 8
.NET Framework 4 GUI app · needs .NET FW 4.5+ (ships with Win7 SP1)
Download (.exe)Android 7.0+
Universal APK (arm64, arm32, x86_64) · real PTY, foreground service
Download (.apk)Install scripts
Automated install + enroll + start-at-boot
install-linux.sh install-windows.ps1The APK is sideloaded, so allow “Install unknown apps” for your browser when prompted. The shell runs in the app’s own sandbox — not root — so it can write to the app’s private directory and read the usual system paths. To keep the tunnel up with the screen off, allow unrestricted battery use when the agent asks; heavily-skinned ROMs (ColorOS, MIUI, EMUI) may also need the app locked in recents.
Set up in three steps
Download & run
Grab the agent for the machine's OS. On Windows, double-click it — a small window opens.
Paste your token
Copy the one-time enrollment token from Dashboard → Agents & Connector, paste it in, and click Connect.
Open a shell
The machine appears online in your dashboard. Add a Connector session, pick it, and you're in — no SSH creds, no IP.
Prefer a headless agent?
The Command Connector runs commands on a machine via the REST API / CLI / MCP — great for automation and AI agents. Enroll it the same way.
Need an account first?
Sign in to NebulaSSH to grab your enrollment token and start connecting machines.
Open NebulaSSH