diff --git a/src/cli/setup.ts b/src/cli/setup.ts
index b6c3bbc..af03ca4 100644
--- a/src/cli/setup.ts
+++ b/src/cli/setup.ts
@@ -234,4 +234,20 @@ program
     await shell()
   })
 
+// Hide and disable commands that don't work over SSH
+if (process.env.USER === 'cli') {
+  const disabled = ['shell', 'get', 'open']
+  for (const name of disabled) {
+    const cmd = program.commands.find((c) => c.name() === name)
+    if (cmd) {
+      cmd.helpInformation = () => ''
+      ;(cmd as any)._hidden = true
+      cmd.action(() => {
+        console.error(`"${name}" is not available over SSH`)
+        process.exit(1)
+      })
+    }
+  }
+}
+
 export { program }