Mochi vs OSH

Mochi is the place to control your AI coding agents from your iPhone. The agents run in herdr on your server. Mochi shows what each one is doing and takes you to it when it needs you. CONTROL YOUR AGENTS WITH HERDR • Live Activity on the lock screen: which agents are working and which are waiting for you • A notification when an agent is blocked or done, even when Mochi is closed • Tap it to open that agent's pane and answer from the chat input • Swipe to switch herdr tabs A REAL TERMINAL UNDERNEATH Mochi is a fast, beautiful SSH client built on the Ghostty terminal engine — a real terminal emulator in your pocket, not a toy. SSH INTO ANY SERVER Save your connections and jump into any of them in a tap. Password and key auth, custom ports, works great over Tailscale. FIRE COMMANDS IN ONE TAP Build your own shortcut groups: tmux prefixes, Ctrl combos, slash commands, whole snippets with Enter. The keyboard toolbar puts esc, tab, ctrl and ⌘ right above the keys — no more fighting the mobile keyboard. MAKE IT YOURS 500+ built-in terminal themes with search and light/dark filters. Real monospace fonts (JetBrains Mono and more), adjustable size, pinch to zoom in session. LOCK KEYS BEHIND FACE ID Private keys live in the iOS Keychain. Flip one switch and every use of a key requires Face ID. BUILT FOR ENGINEERS • Ghostty-powered terminal emulation — fast, correct, modern • Multiple simultaneous sessions • Native iOS design that feels at home on iOS 26 • No accounts, no tracking — your servers are your business

OSH turns your iPhone into a hardware-backed approver for zero-trust SSH access. Instead of long-lived SSH keys scattered across laptops, your team's gateway issues short-lived SSH certificates only after a human approves each request. OSH is where that approval happens — on a device you carry, protected by Face ID and the Secure Enclave. HOW IT WORKS • Enroll your device by scanning the gateway's QR code. • When someone requests SSH access, OSH shows you who, what, and where. • Approve or deny with Face ID. Your approval is signed by a key that lives only in the Secure Enclave. • The gateway issues a short-lived certificate — no standing keys, no shared secrets. WHY IT'S SECURE • The signing key is generated inside the Secure Enclave and is non-exportable — it can never leave your iPhone. • Every approval requires biometric authentication. • OSH connects only to the gateway you configure. It has no analytics, no trackers, no ads, and no third-party SDKs. FOR TEAMS • Role-aware: signers, admins, and root see the controls appropriate to them. • Review access rules, approval history, and gateway logs from the app. OSH requires a compatible zero-trust SSH gateway to connect to. If your organization doesn't run one yet, contact us at ad@openlay.com.