Kolibri（蜂鸟）是一款 SSH / 终端客户端：在 iPhone、iPad、Mac、Android 与 Windows 上连接你自己的服务器，管理终端会话与文件，并对开发机上的 AI 编码 agent 做远程审批。
Kolibri is an SSH and terminal client: connect to your own servers from iPhone, iPad, Mac, Android and Windows, manage terminal sessions and files, and approve what an AI coding agent does on your development machine — remotely.
需要帮助？直接写邮件就好。
先确认在电脑上用普通 ssh 命令能连上同一台主机、同一个端口。能连上但 app 里连不上，请把 app 里的报错原文发给我们——错误信息是按失败原因分类写的，通常一眼能看出是网络、认证还是主机密钥的问题。
在主机的凭据设置里选择从文件导入，挑你本地的私钥文件（例如云服务商给的 .pem）。私钥导入后存在系统钥匙串里，不会离开你的设备。
不会。凭据只保存在设备的系统安全存储中，并且只在你发起连接时发给你指定的那台主机。详见隐私政策。
用主机的二维码分享：一台设备生成二维码，另一台用系统相机扫，识别出链接后点开就会拉起 Kolibri 并带入这台主机的信息。
语音输入需要「麦克风」和「语音识别」两项授权，在系统「设置 → 隐私与安全性」里检查是否都已允许。识别由系统的语音识别服务完成，因此它支持哪些语言、在什么条件下可用，取决于系统本身。
一份订阅的「恢复购买」名额有上限（当前为 10 个），按「谁在恢复」算：没登录时在哪台设备上恢复，就由那台设备占一格；登录着 Kolibri 账号恢复时，名额记在账号上，同一账号下的 iPhone / iPad 共用账号那一格。Mac / Windows 等平台凭账号领取权益的，按台另计一份名额（当前上限同为 10 台）。换新设备时，在 app 内使用「恢复购买」即可。如果提示设备数已满，可登录 Kolibri 账号后在 app 设置 →「设备」或账户门户 kolibri.work/account/ 自助解绑不再使用的设备，释放名额；仍解决不了，再邮件联系我们处理。
订阅由 Apple 管理：系统「设置 → Apple 账户 → 订阅」里可以查看、更改或取消。退款同样由 Apple 处理。
本机终端与会话宿主（让另一台设备接回这台机器上的会话）在桌面端（Mac、Windows）提供，手机与平板是接入端；部分跨设备接续能力仍在逐平台完善。
安装包目前尚未做代码签名，所以 Windows SmartScreen 会先拦一下。这不代表包有问题。点「更多信息」→「仍要运行」即可继续安装。（占位草稿：正式代码签名证书到位后，本条会更新为"不应再出现此提示"。）
在「访达」里右键点 Kolibri 图标 → 选「打开」→ 在弹窗里再点「打开」，即可放行；此后正常双击打开。或到系统设置 → 隐私与安全性，在底部点「仍要打开」。（占位草稿：正式公证（notarization）到位后，本条会更新。）
在登录页点「忘记密码」，或到网页账户门户 kolibri.work/account/ 用注册邮箱发起重置，按邮件里的链接设置新密码。用 Apple 登录的账号没有独立密码，直接用 Apple 登录即可。（占位草稿：以正式上线的找回流程为准。）
你可以随时删除 Kolibri 账号，无需先安装 app 也能看到删除方式：
删除会移除你的邮箱与个人数据、撤销该账号名下的 Pro 权益，只保留一条不含个人信息的匿名记录用于防止标识被复用。保存在设备本地的主机簿、密钥等数据不受服务端删除影响，可通过在设备上删除 app 或在 app 内逐条删除来清除。详见隐私政策第十节。
app 不会自动收集或上传崩溃日志与诊断信息（见隐私政策），所以我们完全依赖你告诉我们发生了什么。发邮件时如果能附上下面这些，排查会快很多：
请不要在邮件里附上密码、私钥或任何凭据——排查问题从来不需要它们。
Kolibri 不含任何分析、埋点、广告或崩溃上报 SDK，也不会上传你的终端内容与凭据；跨设备功能所需的账号只收集运行它所必需的最少数据（邮箱、推送令牌、购买记录），保险库端到端加密、我们只见密文。完整说明见隐私政策。
Need help? Just send an email.
First check that a plain ssh command from a computer reaches the same host on the same port. If that works but the app does not, send us the exact error text shown in the app — error messages are written per failure cause, so they usually make it obvious whether the problem is the network, authentication, or the host key.
In a host's credential settings, choose to import from a file and pick your private key (for example the .pem file a cloud provider gave you). Imported keys are stored in the system Keychain and never leave your device.
No. Credentials are kept only in your device's secure storage, and are sent only to the host you choose to connect to. See the Privacy Policy for details.
Use the host's QR-code sharing: one device shows a QR code, and you scan it with the system camera on the other. Opening the recognised link launches Kolibri with that host's details filled in.
Voice input needs both the Microphone and Speech Recognition permissions — check that both are allowed under Settings → Privacy & Security. Recognition is performed by the operating system's speech service, so which languages work, and when, is determined by the system itself.
The "Restore purchases" slots of a single subscription are limited (currently 10) and are counted per restoring subject: when you restore without being signed in, each device takes one slot; when you restore while signed in to a Kolibri account, the slot belongs to the account — iPhones / iPads signed in to that account share the account's single slot. Claiming the entitlement from your account on Mac, Windows and other platforms is counted per device against a separate limit (currently also 10). On a new device, use "Restore purchases" in the app. If you are told the device limit is reached, sign in to your Kolibri account and unbind a device you no longer use to free up a slot — in the app under Settings → "Devices", or in the web account portal at kolibri.work/account/. If that does not sort it out, email us and we will help.
Subscriptions are managed by Apple: go to Settings → Apple Account → Subscriptions to view, change or cancel. Refunds are also handled by Apple.
The local terminal and session hosting (letting another device pick up a session running on that machine) are available on desktop (Mac, Windows); phones and tablets are the client side. Some cross-device resume capabilities are still being completed per platform.
The installer is not code-signed yet, so Windows SmartScreen warns first. It does not mean the package is unsafe. Click "More info" → "Run anyway" to continue. (Placeholder draft: once a proper code-signing certificate is in place, this note will be updated to "this prompt should no longer appear.")
Right-click the Kolibri icon in Finder → choose "Open" → click "Open" again in the dialog to allow it; afterwards it opens normally on double-click. Alternatively, go to System Settings → Privacy & Security and click "Open Anyway" near the bottom. (Placeholder draft: to be updated once notarization is in place.)
On the sign-in page tap "Forgot password," or go to the web account portal at kolibri.work/account/ and start a reset with your registered email, then follow the link in the email to set a new password. Accounts using Sign in with Apple have no separate password — just sign in with Apple. (Placeholder draft: the finalized recovery flow governs.)
You can delete your Kolibri account at any time, and you can find out how without installing the app:
Deletion removes your email and personal data, revokes the Pro entitlements under that account, and leaves only an anonymous record (with no personal information) to prevent reuse of the identifier. Data stored locally on your device (host book, keys, etc.) is not affected by server-side deletion; clear it by deleting the app on the device or by removing items individually inside the app. See section 10 of the Privacy Policy.
The app does not automatically collect or upload crash logs or diagnostics (see the Privacy Policy), so we rely entirely on what you tell us. Including the following makes diagnosis much faster:
Please never include passwords, private keys or any credential in an email — diagnosing a problem never requires them.
Kolibri contains no analytics, tracking, advertising or crash-reporting SDKs, and does not upload your terminal content or credentials; the account needed for cross-device features collects only the minimum required to run it (email, push token, purchase records), and the vault is end-to-end encrypted so we only ever hold ciphertext. The full explanation is in the Privacy Policy.