PairAdminGet it

Open-source operator terminal

The terminal for the agentic age

PairAdmin puts expert administration in front of a human operator without handing a model your credentials, your topology, or your shell. It reads the terminal you point it at. It recommends. You execute — or you don't.

All of the capability. None of the handover.

PairAdmin terminal with AI assistant reading the output
PTY · SESSION 04AI reads along

The comparison

Four ways to work a terminal

Every operator is already making a choice — usually by accident. Here is the choice, made explicit.

Bare terminalPaste into a chatbotAutonomous agentPairAdmin
Who executesYou, alwaysYou — the model only reads what you pasteThe agent, faster than you can readYou. The AI has no path to the shell.
What the model receivesNothingWhatever you selected and pastedYour credentials, endpoints, a shellSystem prompt + last N lines of the terminal you're looking at + your question. Nothing else.
Where it goesNowhereA third-party endpoint, retention and training defaults you don't setThe agent's platformYour configured provider — can be fully local.
Usable contextWhat you can see and rememberOnly as wide as what you selectedFilesystem, credentials, topologyOne tab, one question.
Time to a correct answerMeasured in yearsFast, but every paste is a judgment callFastest, but it acts faster than you readThe speed of the agent, the exposure of the terminal.
Record of what was sentNothing sentTheir history and retentionTheir logsA local rotating JSONL audit log — every prompt and response.
Blast radius of one bad suggestionYour own typingOne command you runAlready ran — productionNothing runs until you click Execute in Terminal.
Can be switched offAlways offDon't open the tabDisconnect it (and hope)Disable Pair LLM — refused in the backend, amber Disabled.

The three ways people work today

Every other option is a tradeoff

Learn it the long way

Books, forums, trial and error against production. Safe, and measured in years.

Paste it into a chatbot

Fast, and every paste is a judgment call about what's in those lines — made in a hurry, against an endpoint whose retention and training defaults you don't set.

Hand an agent the keys

Genuinely effective, and it means giving a model your credentials, your internal endpoints, and a shell — then watching it act faster than you can read.

PairAdmin is the fourth option: the speed of the third, with the exposure profile of the first.

The control boundary

The user IS the loop

Every command the model recommends arrives as text, with exactly three buttons. Stage it, study it, or run it — each one a deliberate click on a command you have read.

There is no execution interface in the product to disable, because there was never one to begin with. The only writes into a terminal come from a human keystroke, a human paste, or a human click on one of those three buttons.

Save to CommandsCopy to TerminalExecute in Terminal

No fourth option.

What the model is allowed to know

One tab. One question. Nothing else.

A request contains the system prompt, the last N lines of the terminal you are looking at, and what you typed. It does not contain your other sessions, earlier turns in this one, your filesystem, or your saved connections. Terminal content is read only when you press send — there is no ambient streaming, no background capture. Switch tabs and the assistant knows nothing about where you just were.

Before anything is sent, fifteen credential patterns are scrubbed in-process — plus any regexes you add yourself with /filter. The scrubbing happens before transmission, not after receipt.

And you can keep the whole thing on your own machine: point PairAdmin at Ollama or LM Studio and nothing crosses the network. Both default to loopback.

aws-access-key-idgithub-tokengitlab-personal-access-tokenopenai-api-keyanthropic-api-keyslack-tokengoogle-api-keygoogle-service-accountazure-account-keybearer-tokenjwtpem-private-keypassword-assignmentgeneric-api-keyconnection-string-credentials

The off switch

Or switch it off entirely

Set the provider to Disable Pair LLM and no model is constructed and no endpoint is contacted. The request is refused in the backend — not hidden in the interface. The status bar reads Disabled for the entire session, in amber, not red: this is a chosen posture, not a fault.

It's the belt-and-suspenders for the moment you need to work against a system you will not reason about out loud.

StatusDisabledpair-llm · off

Why PairAdmin

A frictionless path between the error and the answer.

Built to make people start loving the terminal (or start loving it again). Four things it does better than anything you're running today — and one assistant that reads along the whole time.

A real terminal

Not a toy emulator. A full PTY with tabs, scrollback, and every keybind your fingers already know. It feels like home on day one.

full PTY · tabs · scrollback

AI that read the output

Don't paste the error — Ask "why did that fail?" It sees the why at the same time as the question. Get an answer grounded in your actual shell history.

live context · no copy-paste

Command a fleet

SSH and WinRM into every host from one pane. Saved hosts, saved sessions, zero context-switching between your boxes.

SSH · WinRM · saved hosts

Never retype

Save, name, and rerun the commands that matter. Your best incantations live one click away, forever.

save · name · rerun

See it in action

The moments that make PairAdmin worth switching for.

Real captures are landing here shortly.

Terminal + AI side-by-sidecoming soon
Fleet admin viewcoming soon
Saved commands sidebarcoming soon

No account. No trial.

Get PairAdmin

Free and open source, Apache-2.0. Verify your download with install.sh --sha256.

Verify your download against the published checksums: SHA256SUMS