# AI NetShell > AI NetShell is an AI network operations application for MSPs, IT teams and network engineers. SSH, serial, remote desktop, file transfer and Meraki dashboards in one window. Its assistant, Lina, investigates live devices read-only and drafts the exact fix. Nothing on a device changes until you approve it. Mac and Linux versions are coming soon. AI NetShell is made by PACKET 365 LLC. Every change. Governed. ## Download - [Download for Windows](https://downloads.ainetshell.com/v0.4.15/AI%20NetShell_0.4.15_x64-setup.exe): AI NetShell 0.4.15, one installer, about 18 MB, signed by PACKET 365 LLC. Windows 10 (22H2) and Windows 11. The terminal is free and needs no account. Mac and Linux versions are coming soon. - What it needs: the terminal needs no account and no internet. Sign-in, AI, updates and Meraki use HTTPS on port 443; the addresses to allow are listed at https://www.ainetshell.com/docs/install-update#network-requirements. ## Who it is for MSPs, IT teams and network engineers who look after switches, routers, firewalls, Windows servers, Linux boxes and Meraki networks, and want one window for all of it. ## What it does - Lina investigates with evidence: describe a problem and she reads the live devices you have open. She lists the read commands before she runs them, every fact names the device and command it came from, and every investigation comes with the exact fix commands. - Governed changes, with Resolve: you review the exact commands and the before-and-after view and approve them. The app captures a rollback point, applies the change, then reads the device again to verify the result. Rollback is offered where the vendor recovery method supports it. Right after a change settles, the app tries to back up the configuration again on Cisco IOS, IOS XE and NX-OS, Arista EOS and Palo Alto PAN-OS. When that backup succeeds, the timeline shows before and after. On Cisco IOS, IOS XE, NX-OS and Arista EOS a change stays in the running configuration until you select Save Changes; Lina never saves. - Approved changes are proven on Cisco IOS, IOS XE and NX-OS, Arista EOS, Juniper Junos, Palo Alto PAN-OS and Fortinet FortiOS. Cisco Meraki and Cisco FTD are read-only. - Discovery and maps, on Investigate and up: start from one device and a scope. Discovery follows CDP and LLDP neighbors, stays inside your scope and never sweeps a subnet. A device it cannot log into is drawn as not reached. Three map views: Physical, Spanning Tree and Routing. Scheduled discovery, run comparisons, drift alerts and end-of-support views. - As-built documentation, with Resolve: an as-built PDF with inventory, addressing, VLANs, spanning tree, routing, end of support and every running config, plus map exports and the network report. - Change timeline and out-of-band detection: backups, discovery runs and approved changes land on one timeline per device. A change made outside AI NetShell is flagged as out-of-band, and the diff shows the exact line. Every approved change is recorded with its reason and the account that approved it, in a tamper-evident log on the PC. - Meraki, read-only: add a Meraki organization with a read-only API key. Every network gets a one-screen site report with a one-line status (such as Needs attention or Not reporting), devices, uplinks, site-to-site VPN, wireless and alerts, and Lina can investigate Meraki devices, clients, SSIDs, uplinks and firewall rules. Nothing in the app can change your Meraki dashboard. - Remote desktop and file editing: remote desktop to the Windows servers you look after, in a tab next to the switches. Open and edit a config file on a Linux box over SFTP, in the same window. - The free terminal: SSH, remote desktop and serial in tabs and split panes, a device inventory in folders with imports from PuTTY, SecureCRT or CSV, and an encrypted credential vault. No account needed. ## Plans and prices Every plan is for one person. Prices are in US dollars. - Free, $0: the terminal. No account needed. - Pay as you go, from $15: prepaid AI credits with no subscription (600 for $15, 1,750 for $40, or 4,000 for $85; pack credits never expire). AI investigations with exact fix commands on Claude Sonnet 5.5 and Haiku 4.5. - Investigate, $29 per month: 500 AI credits a month, network discovery and scheduled discovery, maps on screen, run comparisons, drift alerts, end-of-support views, and Your own AI. - Resolve, $59 per month: 1,500 AI credits a month, approved changes with a rollback point and a verified result, map exports, the network report and the as-built package, and Claude Opus 5.5 in Included AI. A 7-day trial on monthly Resolve only: 300 AI credits, card required, then $59 a month unless canceled. One trial per customer. - Resolve 6K, $149 per month: the same plan as Resolve, with 6,000 AI credits a month. - Your own AI, on Investigate and up: an Anthropic API key (Claude Sonnet 5.5, Opus 5.5 and Haiku 4.5) or a ChatGPT account sign-in (GPT-6.1 Sol and GPT-6 Luna). Requests go straight to your provider and use no AI credits. ## Trust model - Read-only by default, on every plan. Lina's read commands run on their own, or one at a time if you turn on confirmation for every read. - Nothing on a device changes until you approve the exact commands. Configuration changes are disabled by default; you turn on Allow configuration changes in Settings, and turning them on is logged. - A vendor-specific write policy denies by default. One line it does not allow stops the whole proposal. - Some commands are never allowed on any plan, with any setting or approval: reload, erase, format, factory reset and shell escapes. - Known secret formats are removed from device output before it reaches an AI. Your logins stay encrypted on your own PC, and AI NetShell keeps no copy of your configs. - Every step of a change is written to an append-only record: who asked, who approved, what ran, and what the check found. ## Site - [Home](https://www.ainetshell.com/): what AI NetShell is, a narrated 1:44 tour in the hero, three real tickets, and the plans. - [Features](https://www.ainetshell.com/features): the terminal, investigations, change history, maps and documentation, compliance, lifecycle and governed changes, with narrated recordings of a VPN ticket, a hand edit caught on the timeline, and one switch becoming a full map. - [Pricing](https://www.ainetshell.com/pricing): plans, credit packs, the Resolve trial and the plan comparison. - [Security](https://www.ainetshell.com/security): what the AI can and cannot do on your network, how every change is approved and enforced, and how to report a vulnerability. - [Changelog](https://www.ainetshell.com/changelog): the notes published with each release. - [Pricing FAQ](https://www.ainetshell.com/docs/faq): credits, plans, the trial, cancellation, offline use and AI provider choices. ## Videos Real recordings of AI NetShell 0.4.15 with English captions. The Meraki pane in the tour shows demo data. - [The tour, narrated, 1:44](https://www.ainetshell.com/media/hero-overview-narrated.mp4): one window with SSH, remote desktop, a Meraki dashboard and the built-in editor; discovery from one switch to a finished map and as-built documentation; then a VLAN ticket that Lina diagnoses, approved, applied, checked, saved and backed up before and after. - [A VPN ticket, narrated, 1:23](https://www.ainetshell.com/features#cfo-story): the CFO cannot reach the accounting server; Lina finds the access-list line and the fix is approved and verified. - [One device to a full map, narrated, 1:02](https://www.ainetshell.com/features#map-story): discovery from one switch and the Physical, Spanning Tree and Routing views. - [A hand edit caught, narrated, 0:51](https://www.ainetshell.com/features#out-of-band-story): a change made outside AI NetShell is flagged on the timeline with the exact line. ## Docs - [Documentation](https://www.ainetshell.com/docs): set up the terminal, connect a device, investigate a problem, and run an approved change. - [Full documentation as plain text](https://www.ainetshell.com/llms-full.txt): every docs page in one file. - [What is AI NetShell](https://www.ainetshell.com/docs/overview): Learn how AI NetShell investigates devices, preserves configuration history, detects drift, and controls changes through two approval phases. - [Install & update](https://www.ainetshell.com/docs/install-update): Download AI NetShell safely, check the installer's publisher, complete first launch, and update an older build. - [Quick Start: your first 10 minutes](https://www.ainetshell.com/docs/quick-start): Connect your AI NetShell account, add one authorized device, open it, and ask Lina your first question. - [Your account](https://www.ainetshell.com/docs/account): Create or sign in to an AI NetShell account, approve an app connection, replace a device, cancel, or request deletion. - [Credits, plans & billing](https://www.ainetshell.com/docs/credits-plans-billing): Compare plans and credit packs, understand monthly allowances, view Usage, manage a trial, and find billing help. - [Set up AI](https://www.ainetshell.com/docs/ai): Configure Included AI or Your own AI, choose a model, test the connection, and understand what data is sent. - [Credentials](https://www.ainetshell.com/docs/credentials): Create reusable Credentials, assign them to devices, rotate passwords, and fix common authentication problems. - [Devices & connections](https://www.ainetshell.com/docs/devices-connections): Add, edit, remove, and connect devices, choose SSH, RDP, or serial, transfer files with SFTP, SCP, and TFTP, add a Meraki organization and read its site reports, and check lifecycle data and the live-verified platform list. - [Investigate](https://www.ainetshell.com/docs/investigate): Run read-only investigations, preserve configuration history, compare snapshots, and identify configuration drift. - [Resolve](https://www.ainetshell.com/docs/resolve): Turn an approved diagnosis into a governed change, review the current and proposed states, apply or cancel it, and verify the result. - [Change safety](https://www.ainetshell.com/docs/change-safety): Understand the two-check approval model, snapshots, verification, rollback limits, and the safest way to make a first change. - [Troubleshooting](https://www.ainetshell.com/docs/troubleshooting): Diagnose SSH, authentication, network, AI provider, device-command, and local diagnostic issues without exposing sensitive data. - [Security overview](https://www.ainetshell.com/docs/security): Review AI NetShell's desktop security boundaries, credential handling, AI data routes, and change safeguards. - [Known limitations](https://www.ainetshell.com/docs/known-limitations): Review the product boundaries for platforms, RDP entry points, AI routes, Meraki sites, governed changes, rollbacks and run alerts, device histories, Discovery results, topology layer coverage, large maps, and the subscription limits on maps and exports. - [Troubleshoot a VPN user who can't reach a server](https://www.ainetshell.com/docs/troubleshoot-vpn-user-cannot-reach-server): a connected VPN user cannot open one server; check the session, the access list and its counters on Cisco IOS XE, fix it with one permit line, and see the same ticket in AI NetShell. - [Find why a trunk drops a VLAN](https://www.ainetshell.com/docs/find-why-a-trunk-drops-a-vlan): one VLAN is down and the rest works; read the trunk allowed lists on Cisco IOS XE, add the VLAN without replacing the list, and see the same ticket in AI NetShell. Verified against AI NetShell 0.4.15.