Beta v1.0.0 (beta 5)

OpenVClient 1.0.0-beta.5

The fifth beta of OpenVClient, a free, open-source desktop app for databases, object storage and servers, for macOS, Windows and Linux. Website: openvclient.xyz.

This is a beta. Please report bugs. Back up anything important before running destructive actions against production systems.

What's new since beta 4

New tools

• ER diagram: right-click a schema (or a MySQL database) → ER diagram. Tables, columns, primary and foreign keys with arrows; drag boxes, zoom, highlight by name, double-click to open the data. PostgreSQL, MySQL/MariaDB, SQLite and SQL Server.
• Compare schemas: right-click a schema → Compare with…. Two schemas on the same or different connections: tables on one side only, column type and primary-key differences, and a copyable report.
• Charts: a Table / Chart switch on query results with numbers; bars or a line.
• SQL formatter (⌘⇧F), snippets (save, insert, also in ⌘K) and manual commit mode with Commit and Rollback buttons.
• Pick up where you left off: open SQL, table, monitor and Redis tabs are offered again on Home after a restart.

Grid and editor

• Freeze columns: right-click a column header. Wide results now scroll sideways (columns past the edge used to be cut off).
• Right-click a cell to filter by or exclude its value; recent WHERE filters are one click away.
• Line numbers, cursor line and column in the status bar, a WHERE hint in each database's own SQL, shorter timestamps and your own NULL label (Settings).

Files

• Image and PDF previews in the file manager (PDF page 1 needs sips on macOS, built in, or Poppler's pdftoppm on Windows and Linux).
• Per-file progress for uploads, downloads and deletes; folders show how many items they hold; a resizable preview pane; right-click on empty space for New folder, Upload and Refresh.

Getting around

• Tabs: right-click for close others / to the right / all and reopen closed tab (⌘⇧T); ⌘1–9 to switch; an all-tabs list when they overflow.
• ⌘B hides the sidebar; ⌘K search ranks better and highlights matches.
• Home: recent queries, Recent first / By folder, and the connector list folds away once you have connections.
• Connection dialog: paste a connection URL (postgres://user@host/db) to fill the form, connectors grouped by kind, errors next to the field.
• Settings: interface size (⌘= / ⌘−), query timeout, confirmation on Staging, export and import connections (passwords stay in the keychain).

SSH

Tested against a new lab of real OpenSSH servers (45 checks: every login method, 12 key types and formats, certificates, agent, jump hosts, tunnels, SFTP).

• Older servers (routers, NAS boxes, CentOS 7-era) that only offer hmac-sha1, group14-sha1 or CBC now connect; these are used only when nothing newer is offered.
• Servers that want a key and a password now log in.
• Clear messages for a wrong or missing key passphrase.
• Symlinked folders open as folders; deleting a folder deletes what is inside; large transfers stream instead of filling memory.

Fixed

• Toast notifications no longer pile up over the results; long names end in "…" instead of being cut mid-letter.
• The file list's Size column lines up, SQL tab titles no longer repeat the database, and the plan diagram fits its pane.

Download

Platform	File	Install
macOS 11+ (Apple Silicon and Intel)	OpenVClient-1.0.0-beta.5-macos-universal.dmg	Open the DMG and drag OpenVClient onto Applications
Windows 10/11 x64	OpenVClient-1.0.0-beta.5-windows-x64-setup.exe	Run the setup wizard (per-user, no admin needed; "all users" is offered)
Windows ARM64	OpenVClient-1.0.0-beta.5-windows-arm64-setup.exe	Same wizard (built on CI, not yet tested on ARM hardware)
Debian / Ubuntu	openvclient_1.0.0-beta.5_amd64.deb / _arm64.deb	sudo apt install ./openvclient_*.deb
Fedora / RHEL / openSUSE	openvclient-1.0.0-beta.5-1.*.rpm	sudo dnf install ./openvclient-*.rpm
Any Linux	OpenVClient-1.0.0-beta.5-*.AppImage	chmod +x and run
Portable	.zip (Windows), .tar.gz (Linux, with install.sh)	Unpack and run

Verify downloads with sha256sum -c SHA256SUMS.

First launch: this beta is not code-signed yet. On macOS, right-click the app → Open the first time. On Windows, SmartScreen may say "Windows protected your PC": choose More info → Run anyway.

What's inside

Connectors

• SQL: PostgreSQL, MySQL, MariaDB, SQL Server / Azure SQL, SQLite, ClickHouse, GaussDB/openGauss (tested against openGauss), plus a Kingbase preset (PostgreSQL protocol; not yet tested against KingbaseES).
• SQL Server sign-in: SQL login, Windows/NTLM and integrated (Windows build), and Microsoft Entra ID: password, service principal, managed identity, device code, default credential chain, access token. Named instances via SQL Server Browser.
• NoSQL and services: MongoDB, Redis, Elasticsearch/OpenSearch, RabbitMQ (management API), Docker.
• Servers and files: SSH with an interactive terminal, SFTP browser and remote commands; FTP and FTPS (explicit and implicit TLS, client certificates).
• Object storage: Amazon S3 and S3-compatible providers (Backblaze B2, IDrive e2, Wasabi, Cloudflare R2, DigitalOcean Spaces, Google Cloud Storage via HMAC, Oracle, Linode, Scaleway, Hetzner, Storj, MinIO, Alibaba OSS), and Azure Blob Storage with every Storage Explorer sign-in method (account key, connection string, SAS, Entra ID, anonymous, Azurite).
• Network paths for TCP connectors: SSH tunnel (with jump hosts), SOCKS5 and HTTP CONNECT proxies.

Working with data

• SQL editor with highlighting, autocomplete, tabs, run statement / selection / script, cancel, and history.
• SSMS-style graphical execution plans (cost per operator, row-count arrows) next to the classic plan tree.
• Virtualized results grid, inline editing with safe batched writes, CSV/JSON/SQL export, import.
• Object explorer (SSMS layout for SQL Server), DDL view, users and privileges, session and lock monitoring, metrics.
• Backup and restore via pg_dump / mysqldump / mariadb-dump, and SQL Server server-side backups.
• Folders and environments (Development / Testing / Staging / Production) with confirmation for destructive actions on production.
• ⌘K / Ctrl+K search across connections, objects and commands; favourite connections pinned on Home.
• Original and Cartoon styles, each in dark and light.
• ER diagrams, schema compare, result charts, snippets and a SQL formatter.

Security

• Passwords, keys, tokens and passphrases live only in the OS credential store (macOS Keychain, Windows Credential Manager, Linux Secret Service), never in plain files.
• SQL history and connection URIs with embedded passwords are encrypted at rest (AES-256-GCM, key in the credential store).
• SSH host keys are checked against ~/.ssh/known_hosts; a new key is shown with its SHA-256 fingerprint and trusted only when you confirm it.
• Read-only connections, restore refuses dump files that would run shell commands, passwords are redacted from logs and error reports.
• Full findings and fixes: docs/SECURITY_AUDIT.md.

Help when things go wrong

• Plain-language explanations under connection errors ("nothing is listening on that port", "the server rejected the credentials"…), Copy diagnostics, and a log file you can open from Settings.
• In-app update check against GitHub Releases (can be turned off in Settings).

Known limitations

• Kafka, Cassandra, Oracle, Db2 and JDBC are not available yet.
• SSH Kerberos/GSSAPI login is not supported, and a jump host can sign in only with an unencrypted key file or ssh-agent.
• PostgreSQL/MySQL require TLS modes encrypt but do not verify the server certificate yet.
• Very large file transfers over FTP and Azure are held in memory (SFTP now streams); Azure uploads over 4 GiB and S3 uploads over 5 GiB are refused (no multipart upload yet).
• Windows/integrated SQL Server sign-in and the Windows ARM64 build have not been tested on real hardware.
• FTPS, Kingbase and the cloud S3 provider presets are not yet tested against live servers (the shared S3 code is tested against MinIO and SeaweedFS).
• The full list is in docs/QA_REPORT.md.

Feedback

Bugs and ideas: GitHub Issues · Security reports: see SECURITY.md · Contributing: CONTRIBUTING.md

OpenVClient is dual-licensed under MIT or Apache-2.0.

Beta v1.0.0 (beta 4)

The fourth beta of OpenVClient, a free, open-source desktop app for databases, object storage and servers, for macOS, Windows and Linux. Website: openvclient.xyz.

This is a beta. Please report bugs. Back up anything important before running destructive actions against production systems.

What's new since beta 3

Cartoon style

The playful look of openvclient.xyz, now in the app. Turn it on in Settings → Appearance → Style → Cartoon; Original stays the default.

• Cream paper by day and an indigo night palette by night, with ink outlines, sticker shadows and green sticker buttons.
• Connector stickers: every connector gets a two-letter sticker (PG, MY, S3, AZ, SH…) coloured by group: blue for SQL, coral for NoSQL and messaging, teal for storage, yellow for servers. They appear in the sidebar, on Home, in the New connection picker and on tabs.
• Cartoon icons for folders, containers and buckets, databases, tables and files (coloured by file type), in the sidebar, the file manager and tabs.
• Style and Mode are separate: Mode (System, Dark or Light) applies to both styles. The theme button left the top bar; it lives in Settings now.

Favourites

Click the star on a connection card, or right-click a connection in the sidebar → Add to favourites. Starred connections are pinned in a Favourites section at the top of Home.

Keyboard shortcuts in their own window

The shortcut list moved off Home into a Keyboard shortcuts window: press ⌘/ (Ctrl+/ on Windows and Linux), or open it from Settings → Help or the About panel.

GaussDB / openGauss

GaussDB and openGauss now work end to end: object browser, table data and editing, CREATE TABLE scripts, functions, EXPLAIN, the Activity, Locks and Metrics monitors (including Cancel and Terminate), and users and grants. Tested against openGauss.

Fixed

• SSH password login on Ubuntu, Linux Mint and other PAM servers. "Password" authentication failed on servers that take the password only through keyboard-interactive login, although ssh in a terminal worked. OpenVClient now falls back to keyboard-interactive with the same password, like OpenSSH. When login still fails, the message lists the methods the server accepts.
• Opening a connected storage connection (clicking its Home card, or double-clicking it in the sidebar) opens the file manager. It used to open an empty Docker "Containers" view that said "Not connected", and the same happened for other service connections.
• Long error messages no longer widen the sidebar; they are cut to the panel width, with the full text on hover.
• Saved query history stays readable. If the system keychain couldn't be read (locked, or a permission prompt was denied), OpenVClient could create a new encryption key and replace the old one. It now keeps the existing key and simply skips encryption for that session.

The project has moved

OpenVClient now lives at github.com/openvclient/openvclient. Old links redirect, and the app's update check uses the new address.

Upgrading

From beta 2 or 3, OpenVClient tells you about this release itself (About → Check for updates). Install over the top: the DMG replaces the app, the Windows setup upgrades in place, and apt/dnf upgrade the Linux packages. Your connections, saved passwords, history and theme are kept.

Download

Platform	File	Install
macOS 11+ (Apple Silicon and Intel)	OpenVClient-1.0.0-beta.4-macos-universal.dmg	Open the DMG and drag OpenVClient onto Applications
Windows 10/11 x64	OpenVClient-1.0.0-beta.4-windows-x64-setup.exe	Run the setup wizard (per-user, no admin needed; "all users" is offered)
Windows ARM64	OpenVClient-1.0.0-beta.4-windows-arm64-setup.exe	Same wizard (built on CI, not yet tested on ARM hardware)
Debian / Ubuntu	openvclient_1.0.0-beta.4_amd64.deb / _arm64.deb	sudo apt install ./openvclient_*.deb
Fedora / RHEL / openSUSE	openvclient-1.0.0-beta.4-1.*.rpm	sudo dnf install ./openvclient-*.rpm
Any Linux	OpenVClient-1.0.0-beta.4-*.AppImage	chmod +x and run
Portable	.zip (Windows), .tar.gz (Linux, with install.sh)	Unpack and run

Verify downloads with sha256sum -c SHA256SUMS.

First launch: this beta is not code-signed yet. On macOS, right-click the app → Open the first time. On Windows, SmartScreen may say "Windows protected your PC": choose More info → Run anyway.

What's inside

Connectors

• SQL: PostgreSQL, MySQL, MariaDB, SQL Server / Azure SQL, SQLite, ClickHouse, GaussDB/openGauss (tested against openGauss), plus a Kingbase preset (PostgreSQL protocol; not yet tested against KingbaseES).
• SQL Server sign-in: SQL login, Windows/NTLM and integrated (Windows build), and Microsoft Entra ID: password, service principal, managed identity, device code, default credential chain, access token. Named instances via SQL Server Browser.
• NoSQL and services: MongoDB, Redis, Elasticsearch/OpenSearch, RabbitMQ (management API), Docker.
• Servers and files: SSH with an interactive terminal, SFTP browser and remote commands; FTP and FTPS (explicit and implicit TLS, client certificates).
• Object storage: Amazon S3 and S3-compatible providers (Backblaze B2, IDrive e2, Wasabi, Cloudflare R2, DigitalOcean Spaces, Google Cloud Storage via HMAC, Oracle, Linode, Scaleway, Hetzner, Storj, MinIO, Alibaba OSS), and Azure Blob Storage with every Storage Explorer sign-in method (account key, connection string, SAS, Entra ID, anonymous, Azurite).
• Network paths for TCP connectors: SSH tunnel (with jump hosts), SOCKS5 and HTTP CONNECT proxies.

Working with data

• SQL editor with highlighting, autocomplete, tabs, run statement / selection / script, cancel, and history.
• SSMS-style graphical execution plans (cost per operator, row-count arrows) next to the classic plan tree.
• Virtualized results grid, inline editing with safe batched writes, CSV/JSON/SQL export, import.
• Object explorer (SSMS layout for SQL Server), DDL view, users and privileges, session and lock monitoring, metrics.
• Backup and restore via pg_dump / mysqldump / mariadb-dump, and SQL Server server-side backups.
• Folders and environments (Development / Testing / Staging / Production) with confirmation for destructive actions on production.
• ⌘K / Ctrl+K search across connections, objects and commands; favourite connections pinned on Home.
• Original and Cartoon styles, each in dark and light.

Security

• Passwords, keys, tokens and passphrases live only in the OS credential store (macOS Keychain, Windows Credential Manager, Linux Secret Service), never in plain files.
• SQL history and connection URIs with embedded passwords are encrypted at rest (AES-256-GCM, key in the credential store).
• SSH host keys are checked against ~/.ssh/known_hosts; a new key is shown with its SHA-256 fingerprint and trusted only when you confirm it.
• Read-only connections, restore refuses dump files that would run shell commands, passwords are redacted from logs and error reports.
• Full findings and fixes: docs/SECURITY_AUDIT.md.

Help when things go wrong

• Plain-language explanations under connection errors ("nothing is listening on that port", "the server rejected the credentials"…), Copy diagnostics, and a log file you can open from Settings.
• In-app update check against GitHub Releases (can be turned off in Settings).

Known limitations

• Kafka, Cassandra, Oracle, Db2 and JDBC are not available yet.
• SSH Kerberos/GSSAPI login is not supported.
• PostgreSQL/MySQL require TLS modes encrypt but do not verify the server certificate yet.
• Very large file transfers over FTP/SFTP/Azure are held in memory; Azure uploads over 4 GiB and S3 uploads over 5 GiB are refused (no multipart upload yet).
• Windows/integrated SQL Server sign-in and the Windows ARM64 build have not been tested on real hardware.
• FTPS, Kingbase and the cloud S3 provider presets are not yet tested against live servers (the shared S3 code is tested against MinIO and SeaweedFS).
• The full list is in docs/QA_REPORT.md.

Feedback

Bugs and ideas: GitHub Issues · Security reports: see SECURITY.md · Contributing: CONTRIBUTING.md

OpenVClient is dual-licensed under MIT or Apache-2.0.

Beta v1.0.0 (beta 3)

The third beta of OpenVClient, a free, open-source desktop app for databases, object storage and servers, for macOS, Windows and Linux. Website: openvclient.xyz.

This is a beta. Please report bugs. Back up anything important before running destructive actions against production systems.

What's new since beta 2

A real file manager for cloud storage

Azure Blob Storage, Amazon S3 and S3-compatible providers (Backblaze B2, Cloudflare R2, Wasabi, IDrive e2, MinIO…), FTP/FTPS and SFTP now open in a file manager instead of a data table:

• Back, Forward and Up buttons and a clickable breadcrumb (connection › container › folder); double-click a folder to open it, Backspace to go up.
• A file list with type icons, readable sizes, local times and storage tier; sort by any column; select several files with Cmd/Ctrl or Shift.
• Upload (button or drag and drop from Finder / Explorer), New folder, Download (one file, or many into a folder), Share link (Azure SAS / S3 presigned), Rename (FTP/SFTP) and Delete with confirmation, also in a right-click menu. Read-only connections turn writes off.
• A preview panel for text and JSON files, with its own Download button.
• The sidebar shows folders only for these connections.

Also new

• About OpenVClient (the info button next to Settings): version, Check for updates, links to the website, release notes and bug reports, and Copy version info. Settings shows the installed version.
• New logo: meet Vee, our friendly database. New app icon, installer artwork and in-app logo, with light and dark versions.
• Readable dropdowns: auth methods and options show proper names ("SAS (shared access signature)", "Microsoft Entra ID: interactive sign-in"…) instead of internal values.

Fixed

• Cloud storage connections no longer show "localhost" in the sidebar; Azure shows the storage account, S3 the endpoint and bucket.
• Connector tiles in New connection are fully clickable; hovering the text no longer shows a text cursor or swallows the click.

Upgrading

From beta 2, OpenVClient tells you about this release itself (About → Check for updates). Install over the top: the DMG replaces the app, the Windows setup upgrades in place, and apt/dnf upgrade the Linux packages. Your connections, saved passwords and history are kept. From beta 1, download it from this page (beta 1's update check skipped betas).

Download

Platform	File	Install
macOS 11+ (Apple Silicon and Intel)	OpenVClient-1.0.0-beta.3-macos-universal.dmg	Open the DMG and drag OpenVClient onto Applications
Windows 10/11 x64	OpenVClient-1.0.0-beta.3-windows-x64-setup.exe	Run the setup wizard (per-user, no admin needed; "all users" is offered)
Windows ARM64	OpenVClient-1.0.0-beta.3-windows-arm64-setup.exe	Same wizard (built on CI, not yet tested on ARM hardware)
Debian / Ubuntu	openvclient_1.0.0-beta.3_amd64.deb / _arm64.deb	sudo apt install ./openvclient_*.deb
Fedora / RHEL / openSUSE	openvclient-1.0.0-beta.3-1.*.rpm	sudo dnf install ./openvclient-*.rpm
Any Linux	OpenVClient-1.0.0-beta.3-*.AppImage	chmod +x and run
Portable	.zip (Windows), .tar.gz (Linux, with install.sh)	Unpack and run

Verify downloads with sha256sum -c SHA256SUMS.

First launch: this beta is not code-signed yet. On macOS, right-click the app → Open the first time. On Windows, SmartScreen may say "Windows protected your PC": choose More info → Run anyway.

What's inside

Connectors

• SQL: PostgreSQL, MySQL, MariaDB, SQL Server / Azure SQL, SQLite, ClickHouse, plus Kingbase and GaussDB/openGauss presets (PostgreSQL protocol; not yet tested against those servers).
• SQL Server sign-in: SQL login, Windows/NTLM and integrated (Windows build), and Microsoft Entra ID: password, service principal, managed identity, device code, default credential chain, access token. Named instances via SQL Server Browser.
• NoSQL and services: MongoDB, Redis, Elasticsearch/OpenSearch, RabbitMQ (management API), Docker.
• Servers and files: SSH with an interactive terminal, SFTP browser and remote commands; FTP and FTPS (explicit and implicit TLS, client certificates).
• Object storage: Amazon S3 and S3-compatible providers (Backblaze B2, IDrive e2, Wasabi, Cloudflare R2, DigitalOcean Spaces, Google Cloud Storage via HMAC, Oracle, Linode, Scaleway, Hetzner, Storj, MinIO, Alibaba OSS), and Azure Blob Storage with every Storage Explorer sign-in method (account key, connection string, SAS, Entra ID, anonymous, Azurite).
• Network paths for TCP connectors: SSH tunnel (with jump hosts), SOCKS5 and HTTP CONNECT proxies.

Working with data

• SQL editor with highlighting, autocomplete, tabs, run statement / selection / script, cancel, and history.
• SSMS-style graphical execution plans (cost per operator, row-count arrows) next to the classic plan tree.
• Virtualized results grid, inline editing with safe batched writes, CSV/JSON/SQL export, import.
• Object explorer (SSMS layout for SQL Server), DDL view, users and privileges, session and lock monitoring, metrics.
• Backup and restore via pg_dump / mysqldump / mariadb-dump, and SQL Server server-side backups.
• Folders and environments (Development / Testing / Staging / Production) with confirmation for destructive actions on production.
• ⌘K / Ctrl+K search across connections, objects and commands; dark and light themes.

Security

• Passwords, keys, tokens and passphrases live only in the OS credential store (macOS Keychain, Windows Credential Manager, Linux Secret Service), never in plain files.
• SQL history and connection URIs with embedded passwords are encrypted at rest (AES-256-GCM, key in the credential store).
• SSH host keys are checked against ~/.ssh/known_hosts; a new key is shown with its SHA-256 fingerprint and trusted only when you confirm it.
• Read-only connections, restore refuses dump files that would run shell commands, passwords are redacted from logs and error reports.
• Full findings and fixes: docs/SECURITY_AUDIT.md.

Help when things go wrong

• Plain-language explanations under connection errors ("nothing is listening on that port", "the server rejected the credentials"…), Copy diagnostics, and a log file you can open from Settings.
• In-app update check against GitHub Releases (can be turned off in Settings).

Known limitations

• Kafka, Cassandra, Oracle, Db2 and JDBC are not available yet.
• SSH Kerberos/GSSAPI login is not supported.
• PostgreSQL/MySQL require TLS modes encrypt but do not verify the server certificate yet.
• Very large file transfers over FTP/SFTP/Azure are held in memory; Azure uploads over 4 GiB and S3 uploads over 5 GiB are refused (no multipart upload yet).
• Windows/integrated SQL Server sign-in and the Windows ARM64 build have not been tested on real hardware.
• The full list is in docs/QA_REPORT.md.

Feedback

Bugs and ideas: GitHub Issues · Security reports: see SECURITY.md · Contributing: CONTRIBUTING.md

OpenVClient is dual-licensed under MIT or Apache-2.0.

Beta v1.0.0 (beta 2)

The second beta of OpenVClient, a free, open-source desktop app for databases, object storage and servers, for macOS, Windows and Linux.

This is a beta. Please report bugs. Back up anything important before running destructive actions against production systems.

What's new since beta 1

Fixed

• Copy and paste work again in every text field (SQL editor, filters, connection forms) on macOS, Windows and Linux: Cmd/Ctrl+C, X and V. The in-app Copy buttons (copy diagnostics, copy rows, copy host-key fingerprint) now reach the system clipboard too.
• Links open in your browser when clicked.
• Update check sees betas: if you run a beta, OpenVClient now tells you about newer betas as well as final releases (beta 1 only looked at final releases). Versions are ordered correctly: beta.1 < beta.2 < rc.1 < 1.0.0. Stable installs are still only offered stable releases.
• Linux .rpm files are named openvclient-1.0.0-beta.2-1.<arch>.rpm, so sha256sum -c SHA256SUMS works for them.

Upgrading from beta 1

Install over the top: the macOS DMG replaces the app in Applications, the Windows setup upgrades in place, and apt/dnf upgrade the Linux packages. Your connections, saved passwords and history are kept. Beta 1 cannot detect this update by itself (its update check skipped pre-releases), so download it from this page.

Download

Platform	File	Install
macOS 11+ (Apple Silicon and Intel)	OpenVClient-1.0.0-beta.2-macos-universal.dmg	Open the DMG and drag OpenVClient onto Applications
Windows 10/11 x64	OpenVClient-1.0.0-beta.2-windows-x64-setup.exe	Run the setup wizard (per-user, no admin needed; "all users" is offered)
Windows ARM64	OpenVClient-1.0.0-beta.2-windows-arm64-setup.exe	Same wizard (built on CI, not yet tested on ARM hardware)
Debian / Ubuntu	openvclient_1.0.0-beta.2_amd64.deb / _arm64.deb	sudo apt install ./openvclient_*.deb
Fedora / RHEL / openSUSE	openvclient-1.0.0-beta.2-1.*.rpm	sudo dnf install ./openvclient-*.rpm
Any Linux	OpenVClient-1.0.0-beta.2-*.AppImage	chmod +x and run
Portable	.zip (Windows), .tar.gz (Linux, with install.sh)	Unpack and run

Verify downloads with sha256sum -c SHA256SUMS.

First launch: this beta is not code-signed yet. On macOS, right-click the app → Open the first time. On Windows, SmartScreen may say "Windows protected your PC": choose More info → Run anyway.

What's inside

Connectors

• SQL: PostgreSQL, MySQL, MariaDB, SQL Server / Azure SQL, SQLite, ClickHouse, plus Kingbase and GaussDB/openGauss presets (PostgreSQL protocol; not yet tested against those servers).
• SQL Server sign-in: SQL login, Windows/NTLM and integrated (Windows build), and Microsoft Entra ID: password, service principal, managed identity, device code, default credential chain, access token. Named instances via SQL Server Browser.
• NoSQL and services: MongoDB, Redis, Elasticsearch/OpenSearch, RabbitMQ (management API), Docker.
• Servers and files: SSH with an interactive terminal, SFTP browser and remote commands; FTP and FTPS (explicit and implicit TLS, client certificates).
• Object storage: Amazon S3 and S3-compatible providers (Backblaze B2, IDrive e2, Wasabi, Cloudflare R2, DigitalOcean Spaces, Google Cloud Storage via HMAC, Oracle, Linode, Scaleway, Hetzner, Storj, MinIO, Alibaba OSS), and Azure Blob Storage with every Storage Explorer sign-in method (account key, connection string, SAS, Entra ID, anonymous, Azurite).
• Network paths for TCP connectors: SSH tunnel (with jump hosts), SOCKS5 and HTTP CONNECT proxies.

Working with data

• SQL editor with highlighting, autocomplete, tabs, run statement / selection / script, cancel, and history.
• SSMS-style graphical execution plans (cost per operator, row-count arrows) next to the classic plan tree.
• Virtualized results grid, inline editing with safe batched writes, CSV/JSON/SQL export, import.
• Object explorer (SSMS layout for SQL Server), DDL view, users and privileges, session and lock monitoring, metrics.
• Backup and restore via pg_dump / mysqldump / mariadb-dump, and SQL Server server-side backups.
• Folders and environments (Development / Testing / Staging / Production) with confirmation for destructive actions on production.
• ⌘K / Ctrl+K search across connections, objects and commands; dark and light themes.

Security

• Passwords, keys, tokens and passphrases live only in the OS credential store (macOS Keychain, Windows Credential Manager, Linux Secret Service), never in plain files.
• SQL history and connection URIs with embedded passwords are encrypted at rest (AES-256-GCM, key in the credential store).
• SSH host keys are checked against ~/.ssh/known_hosts; a new key is shown with its SHA-256 fingerprint and trusted only when you confirm it.
• Read-only connections, restore refuses dump files that would run shell commands, passwords are redacted from logs and error reports.
• Full findings and fixes: docs/SECURITY_AUDIT.md.

Help when things go wrong

• Plain-language explanations under connection errors ("nothing is listening on that port", "the server rejected the credentials"…), Copy diagnostics, and a log file you can open from Settings.
• In-app update check against GitHub Releases (can be turned off in Settings).

Known limitations

• Kafka, Cassandra, Oracle, Db2 and JDBC are not available yet.
• SSH Kerberos/GSSAPI login is not supported.
• PostgreSQL/MySQL require TLS modes encrypt but do not verify the server certificate yet.
• Very large file transfers over FTP/SFTP/Azure are held in memory; Azure uploads over 4 GiB and S3 uploads over 5 GiB are refused (no multipart upload yet).
• Windows/integrated SQL Server sign-in and the Windows ARM64 build have not been tested on real hardware.
• The full list is in docs/QA_REPORT.md.

Feedback

Bugs and ideas: GitHub Issues · Security reports: see SECURITY.md · Contributing: CONTRIBUTING.md

OpenVClient is dual-licensed under MIT or Apache-2.0.

Beta v1.0.0

The first public beta of OpenVClient: a free, open-source desktop app for databases, object storage and servers, built in Rust. One native window for SQL, NoSQL, caches, message brokers, containers, SSH and cloud storage, on macOS, Windows and Linux.

This is a beta. Expect rough edges, and please report bugs. Back up anything important before running destructive actions against production systems.

Download

Platform	File	Install
macOS 11+ (Apple Silicon and Intel)	OpenVClient-1.0.0-beta.1-macos-universal.dmg	Open the DMG and drag OpenVClient onto Applications
Windows 10/11 x64	OpenVClient-1.0.0-beta.1-windows-x64-setup.exe	Run the setup wizard (per-user, no admin needed; "all users" is offered)
Windows ARM64	OpenVClient-1.0.0-beta.1-windows-arm64-setup.exe	Same wizard (built on CI, not yet tested on ARM hardware)
Debian / Ubuntu	openvclient_1.0.0-beta.1_amd64.deb / _arm64.deb	sudo apt install ./openvclient_*.deb
Fedora / RHEL / openSUSE	openvclient-1.0.0.beta.1-1.*.rpm	sudo dnf install ./openvclient-*.rpm
Any Linux	OpenVClient-1.0.0-beta.1-*.AppImage	chmod +x and run
Portable	.zip (Windows), .tar.gz (Linux, with install.sh)	Unpack and run

Verify downloads with sha256sum -c SHA256SUMS.

First launch: this beta is not code-signed yet. On macOS, right-click the app → Open the first time. On Windows, SmartScreen may say "Windows protected your PC": choose More info → Run anyway.

What's inside

Connectors

• SQL: PostgreSQL, MySQL, MariaDB, SQL Server / Azure SQL, SQLite, ClickHouse, plus Kingbase and GaussDB/openGauss presets (PostgreSQL protocol; not yet tested against those servers).
• SQL Server sign-in: SQL login, Windows/NTLM and integrated (Windows build), and Microsoft Entra ID: password, service principal, managed identity, device code, default credential chain, access token. Named instances via SQL Server Browser.
• NoSQL and services: MongoDB, Redis, Elasticsearch/OpenSearch, RabbitMQ (management API), Docker.
• Servers and files: SSH with an interactive terminal, SFTP browser and remote commands; FTP and FTPS (explicit and implicit TLS, client certificates).
• Object storage: Amazon S3 and S3-compatible providers (Backblaze B2, IDrive e2, Wasabi, Cloudflare R2, DigitalOcean Spaces, Google Cloud Storage via HMAC, Oracle, Linode, Scaleway, Hetzner, Storj, MinIO, Alibaba OSS), and Azure Blob Storage with every Storage Explorer sign-in method (account key, connection string, SAS, Entra ID, anonymous, Azurite).
• Network paths for TCP connectors: SSH tunnel (with jump hosts), SOCKS5 and HTTP CONNECT proxies.

Working with data

• SQL editor with highlighting, autocomplete, tabs, run statement / selection / script, cancel, and history.
• SSMS-style graphical execution plans (cost per operator, row-count arrows) next to the classic plan tree.
• Virtualized results grid, inline editing with safe batched writes, CSV/JSON/SQL export, import.
• Object explorer (SSMS layout for SQL Server), DDL view, users and privileges, session and lock monitoring, metrics.
• Backup and restore via pg_dump / mysqldump / mariadb-dump, and SQL Server server-side backups.
• Folders and environments (Development / Testing / Staging / Production) with confirmation for destructive actions on production.
• ⌘K / Ctrl+K search across connections, objects and commands; dark and light themes.

Security

• Passwords, keys, tokens and passphrases live only in the OS credential store (macOS Keychain, Windows Credential Manager, Linux Secret Service), never in plain files.
• SQL history and connection URIs with embedded passwords are encrypted at rest (AES-256-GCM, key in the credential store).
• SSH host keys are checked against ~/.ssh/known_hosts; a new key is shown with its SHA-256 fingerprint and trusted only when you confirm it.
• Read-only connections, restore refuses dump files that would run shell commands, passwords are redacted from logs and error reports.
• Full findings and fixes: docs/SECURITY_AUDIT.md.

Help when things go wrong

• Plain-language explanations under connection errors ("nothing is listening on that port", "the server rejected the credentials"…), Copy diagnostics, and a log file you can open from Settings.
• In-app update check against GitHub Releases (can be turned off in Settings).

Known limitations

• Kafka, Cassandra, Oracle, Db2 and JDBC are not available yet.
• SSH Kerberos/GSSAPI login is not supported.
• PostgreSQL/MySQL require TLS modes encrypt but do not verify the server certificate yet.
• Very large file transfers over FTP/SFTP/Azure are held in memory; Azure uploads over 4 GiB and S3 uploads over 5 GiB are refused (no multipart upload yet).
• Windows/integrated SQL Server sign-in and the Windows ARM64 build have not been tested on real hardware.
• The full list is in docs/QA_REPORT.md.

Feedback

Bugs and ideas: GitHub Issues · Security reports: see SECURITY.md · Contributing: CONTRIBUTING.md

OpenVClient is dual-licensed under MIT or Apache-2.0.