English Français العربية

Tugport

Official registry Data and databases

Deploy, roll back, read logs and manage apps, databases and backups on your self-hosted Tugport.

Source code Website Documentation

What can you do with Tugport?

  • Deploys on push from GitHub, Forgejo, Gitea, GitLab or any Git server with a deploy key, built with your Dockerfile, Railpack, Nixpacks or buildpacks. A new version gets traffic only after its health check passes, and rolling back takes one click.
  • Apps, Compose stacks and databases (Postgres, MySQL, MariaDB, MongoDB, Redis) with domains, automatic HTTPS, environment, volumes and limits.
  • Logs and charts for every server and service, with alerts to Telegram, email or a webhook.
  • AI agents as users: an agent gets a scoped API key in one step, works through the API, the CLI or the MCP endpoint with the same permissions, and every action lands in the audit log.
  • Secrets that stay secret: encrypted at rest, delivered only to the containers that use them, and masked everywhere else.
  • More servers and regions joined by an encrypted WireGuard mesh, with cloud servers created at Hetzner or AWS, autoscaling, scale to zero and database replicas.
  • Backups of databases and volumes to S3-compatible storage or a disk, with test restores.
  • Automatic updates of Tugport itself without dropping traffic, on by default and off with one setting.

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http tugport 'https://{panel_host}/mcp' --header 'Authorization: <Bearer API key from your Tugport panel; the agent gets exactly that key'\''s roles and grants>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "tugport": {
            "type": "http",
            "url": "https://{panel_host}/mcp",
            "headers": {
                "Authorization": "<Bearer API key from your Tugport panel; the agent gets exactly that key's roles and grants>"
            }
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. What it does
  2. Security notes
  3. Documentation
  4. Repository
  5. License
Tugport

Deploy your apps to servers you own, from one small Rust binary.

Tugport is a self-hosted deploy platform in the spirit of Coolify and Easypanel, built as a single Rust binary that runs next to Docker. Install it on a Linux server with systemd (x86_64 or arm64):

curl -fsSL https://tugport.com/install | sh

The installer sets up Docker if it is missing, starts Tugport as a system service and prints a one-time link for creating the owner account. Tugport is young (0.1.x), so expect rough edges.

What it does

  • Deploys on push from GitHub, Forgejo, Gitea, GitLab or any Git server with a deploy key, built with your Dockerfile, Railpack, Nixpacks or buildpacks. A new version gets traffic only after its health check passes, and rolling back takes one click.
  • Apps, Compose stacks and databases (Postgres, MySQL, MariaDB, MongoDB, Redis) with domains, automatic HTTPS, environment, volumes and limits.
  • Logs and charts for every server and service, with alerts to Telegram, email or a webhook.
  • AI agents as users: an agent gets a scoped API key in one step, works through the API, the CLI or the MCP endpoint with the same permissions, and every action lands in the audit log.
  • Secrets that stay secret: encrypted at rest, delivered only to the containers that use them, and masked everywhere else.
  • More servers and regions joined by an encrypted WireGuard mesh, with cloud servers created at Hetzner or AWS, autoscaling, scale to zero and database replicas.
  • Backups of databases and volumes to S3-compatible storage or a disk, with test restores.
  • Automatic updates of Tugport itself without dropping traffic, on by default and off with one setting.
  • Moving from Easypanel or Coolify in one command while the apps keep running, with a rollback.

There is deliberately no app store, no one-click templates, no teams or organizations and no telemetry.

Security notes

  • Containers cannot reach the panel through the addresses configured on their own server, the server mesh or Tugport's internal endpoints. An address that lives on a NAT gateway instead, such as an EC2 Elastic IP or a home router's port forward, sends their traffic out and back in like any outside client's, so on such servers close the panel's port (8484) in the cloud firewall and use the panel through its domain.
  • Privileged mode, the Docker socket, host networking, bind mounts and extra capabilities stay off unless an admin with the destroy grant turns them on.
  • The master key is sealed to the server's TPM when it has one, otherwise kept in a root-only key file. Keep the recovery key the installer prints.

Documentation

Repository

PathContents
src/The binary: panel API, proxy, deploy engine, builders, node agent, CLI and MCP endpoint
web/The panel's web UI (Preact and Tailwind), embedded into release builds
docs/API reference and migration guide
dev/Docker-in-Docker boxes for building and testing on Linux (dev/up.sh)
website/tugport.com, deployed to GitHub Pages on every push to main; its docs/ pages are rendered from docs/*.md by docs/build.mjs (cd docs && npm ci && node build.mjs)

The share image website/og.png is rendered from website/og.html with headless Chrome:

cd website && "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome" --headless=new --hide-scrollbars \
  --window-size=1200,630 --virtual-time-budget=10000 --screenshot="$PWD/og.png" "file://$PWD/og.html"

Each docs page has its own card in website/og/<slug>.png; after adding or renaming a guide in docs/guides.mjs, run node docs/og.mjs.

License

MIT

Frequently asked questions

What is Tugport?

Deploy, roll back, read logs and manage apps, databases and backups on your self-hosted Tugport.

How do I install Tugport?

It runs as a remote server. In Claude Code: claude mcp add --transport http tugport 'https://{panel_host}/mcp' --header 'Authorization: <Bearer API key from your Tugport panel; the agent gets exactly that key'\''s roles and grants>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Tugport need an API key?

Yes. It expects Authorization, which you set in its configuration.

Is Tugport open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains Tugport?

It is published by backmeupplz. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.