The full toolchain,
shipped to your laptop.
A server management and deployment engine that runs locally - no SaaS middleman, no cloud credentials, no per-server billing.
Provision, monitor, control - from one desktop window.
Add any VPS over SSH. StackPilot App handles the rest: full-stack provisioning, real-time vitals via the Agent, service control, integrated terminals.
Multi-server dashboard
Connection status, vitals, and SSH fingerprint summary at a glance. Tab-based switching, no reconnect.
One-click provisioning
Installs Nginx, PHP, Node.js, MySQL, PostgreSQL, Redis, Supervisor, and Certbot in one pass.
Live vitals
Real-time CPU, memory, disk, and process charts streamed by the StackPilot Agent.
Service management
Start, stop, restart Nginx, PHP-FPM, MySQL/PG, Redis, Supervisor from the UI.
Integrated terminal
Full xterm.js at server level and isolated per-site shells. No leaving the app to SSH.
Cloud provider provisioning
Spin up servers on AWS EC2, DigitalOcean, and Vultr from inside StackPilot App.
Direct SSH - no proxy
Every command goes straight from your machine to your server. No cloud middleman, no single point of failure.
StackPilot Agent
Lightweight server-side daemon. Streams vitals back, supports safe checksummed self-updates.
Git in, live in production, atomically.
From cloning a repo to serving traffic - automated pipeline with atomic releases, real-time logs, and HMAC-verified webhooks.
One-click installers
Laravel · WordPress · Statamic · Symfony · Next · Nuxt · Vue · React · Angular · Svelte · Node · static
Atomic zero-downtime deploys
Symlink-based releases/ → current/. Old release stays live until the new one is fully ready.
Git-based workflow
GitHub, GitLab, and Bitbucket via personal access tokens. Branch + commit awareness.
Auto-deploy webhooks
HMAC-verified webhooks trigger deploys on push. Each site gets a unique 64-char secret.
Custom deploy recipes
Editable shell scripts per site, edited inline with Monaco. Bring your own build steps.
Real-time deploy logs
ANSI-colored streaming logs during every deployment. Reproducible failure debugging.
A control panel for every site.
Each app runs as its own isolated system user with a dedicated management interface: SSL, env, queue workers, cron.
Isolated site users
Each app gets its own system user (sp_site_com). A compromise of one site can't touch another.
.env management
Edit env vars directly in the UI. Stored with chmod 640 under the isolated site user.
Nginx config editor
Per-site configuration editing with syntax highlighting and validation.
Nginx config history & rollback
Every vhost edit is versioned. Diff against any prior version and roll back in one click.
SSL management
Automatic Let's Encrypt issuance and renewal via Certbot. Custom certs supported.
Cron jobs
Visual crontab editor. Schedule, edit, and audit scheduled tasks per site.
Supervisor
Process management per site for queue workers and daemons. Restart on push.
Package manager support
npm · pnpm · yarn with per-site configuration. Lockfile-honored installs.
Multi-PHP support
Install and switch between multiple PHP versions on the same server.
Dependency audits
Per-site dependency health checks surface known-vulnerable packages, with safe one-click updates.
MySQL and Postgres, same interface.
Create and manage both engines without touching the CLI. Credentials stored locally alongside the rest of your server config.
MySQL - DBs and users
Create DBs, users, GRANTs with security-hardening defaults.
PostgreSQL - full mgmt
Databases, roles, extensions. Both engines can run side-by-side on one server.
Selectable engine versions
Pick and switch MySQL/PostgreSQL engine versions per server, managed from the app.
phpMyAdmin — one-click install
Install phpMyAdmin as a managed preset for browser-based MySQL administration, with no manual setup.
Credential storage
DB passwords and connection strings synced locally with your server config. Never to our servers.
Automated backups
Scheduled backups of MySQL, MariaDB and PostgreSQL databases plus application and .env files, encrypted and shipped off-site to any S3-compatible destination, with retention and one-click restore.
Give an assistant the controls, not the keys.
StackPilot App is a Model Context Protocol server. Connect Claude, Cursor, Copilot, Gemini or any MCP client and it works your fleet through 84 typed tools, each behind a scope, with the dangerous ones gated twice.
84 typed tools
Everything the app does: provision, deploy, roll back, manage databases, SSL, services, backups and cloud servers.
Scoped tokens
33 read, 37 deploy and 14 admin tools. A read token cannot deploy, and a deploy token cannot delete a server or spend money.
Two-phase confirmation
The 14 tools that destroy data or create billable resources return a preview and a token first. The agent must come back with it.
Dry runs
46 tools accept dry_run and return the plan without touching anything, so you can read the intent before it acts.
Local audit log
Every call an agent makes is recorded with its arguments and outcome, readable in the app or through the list_audit tool.
Local and remote
Run over stdio so nothing listens on a port, or expose a token-secured HTTPS endpoint for clients that cannot spawn a process.
Never a shell
There is no run-anything tool behind the protocol. An assistant can only call the typed tools you scoped it for.
Optional add-on
AI Access is bought separately and comes free on the Ultimate plan. Nothing is exposed until you issue a token.
Your access never leaves your machine.
Credentials, SSH keys, and tokens stay local. Portable bundles for backup and machine migration are built in.
Zero cloud credential storage
SSH keys, tokens, passwords - your disk only. No backend of ours has them.
macOS Keychain integration
Sensitive values stored in the OS keychain. Reuses the platform's hardened secure-storage.
Encrypted .stplt export/import
Backup your full StackPilot App setup as an encrypted bundle. Restore on any machine.
24-hour offline grace
Licence check fails (no internet)? StackPilot App keeps working for 24 hours before nagging.
Signed auto-updates
Releases signed via Tauri updater, hosted on Cloudflare R2. No silent code injection.
Actively in development.
Not vaporware.
All upcoming features may be paid add-ons. Your one-time payment covers what's shipped today. New major features ship as separate purchases. See licensing terms.
Windows desktop build
Native Windows alongside macOS - same feature set, same direct-SSH model. Released and currently in public beta while we harden it.
Custom deploy templates
Save a working server or site setup as a reusable template: runtime versions, packages, nginx config, env and post-deploy hooks. Apply it to any new server in one step. Planned as an optional add-on.
Ready to deploy with confidence?
Run a real Laravel deploy in the time it takes your coffee to cool.