Tugport
com.tugportPublished by tugport.comv0.1.30Updated Oct 29, 2026
Deploy, roll back, read logs and manage apps, databases and backups on your self-hosted Tugport.
Overview
Remote MCP endpoint for a self-hosted Tugport deploy platform, letting an assistant deploy, roll back, read logs and manage apps, databases and backups.
- What you can do
- Deploy apps and Compose stacks from Git sources, with health-checked releases and one-click rollback
- Manage apps, databases (Postgres, MySQL, MariaDB, MongoDB, Redis), domains, environment, volumes and limits
- Read logs and charts for servers and services, and configure alerts to Telegram, email or a webhook
- Manage backups of databases and volumes to S3-compatible storage or disk, including test restores
- Administer servers and regions joined by an encrypted WireGuard mesh, with cloud servers, autoscaling and replicas
- When to use it
- Useful when you run Tugport on your own servers and want an AI agent to operate deployments, inspect logs, or handle databases and backups through the same permissions as the API and CLI, with every action recorded in the audit log.
- Requirements
- A running self-hosted Tugport panel reachable at its panel host, plus a scoped bearer API key created in the panel, sent in the Authorization header. The agent inherits exactly that key's roles and grants.
Installation
In SourceWeft
- Open Tugport in the dashboard and add it to a workspace.
- Connect Authorization token credentials. They are stored privately and never shown on public pages.
- Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Other MCP clients
Follow the launch instructions in the repository.
README
Tugport
Deploy your apps to servers you own, from one small Rust binary.
Tugport is a self-hosted deploy platform in the spirit of Coolify and Easypanel, built as a single Rust binary that runs next to Docker. Install it on a Linux server with systemd (x86_64 or arm64):
The installer sets up Docker if it is missing, starts Tugport as a system service and prints a one-time link for creating the owner account. Tugport is young (0.1.x), so expect rough edges.
What it does
- Deploys on push from GitHub, Forgejo, Gitea, GitLab or any Git server with a deploy key, built with your Dockerfile, Railpack, Nixpacks or buildpacks. A new version gets traffic only after its health check passes, and rolling back takes one click.
- Apps, Compose stacks and databases (Postgres, MySQL, MariaDB, MongoDB, Redis) with domains, automatic HTTPS, environment, volumes and limits.
- Logs and charts for every server and service, with alerts to Telegram, email or a webhook.
- AI agents as users: an agent gets a scoped API key in one step, works through the API, the CLI or the MCP endpoint with the same permissions, and every action lands in the audit log.
- Secrets that stay secret: encrypted at rest, delivered only to the containers that use them, and masked everywhere else.
- More servers and regions joined by an encrypted WireGuard mesh, with cloud servers created at Hetzner or AWS, autoscaling, scale to zero and database replicas.
- Backups of databases and volumes to S3-compatible storage or a disk, with test restores.
- Automatic updates of Tugport itself without dropping traffic, on by default and off with one setting.
- Moving from Easypanel or Coolify in one command while the apps keep running, with a rollback.
There is deliberately no app store, no one-click templates, no teams or organizations and no telemetry.
Security notes
- Containers cannot reach the panel through the addresses configured on their own server, the server mesh or Tugport's internal endpoints. An address that lives on a NAT gateway instead, such as an EC2 Elastic IP or a home router's port forward, sends their traffic out and back in like any outside client's, so on such servers close the panel's port (8484) in the cloud firewall and use the panel through its domain.
- Privileged mode, the Docker socket, host networking, bind mounts and extra capabilities stay off unless an admin with the destroy grant turns them on.
- The master key is sealed to the server's TPM when it has one, otherwise kept in a root-only key file. Keep the recovery key the installer prints.
Documentation
- API reference, including the MCP endpoint, at https://tugport.com/docs/api/
- Moving from Easypanel or Coolify, at https://tugport.com/docs/migration/
- Tugport compared with Coolify, Dokploy, Easypanel and CapRover, at https://tugport.com/docs/compare/
- Deploy Uptime Kuma on a Hetzner VPS with Tugport, tested step by step, at https://tugport.com/docs/uptime-kuma/
- Moving a server to Tugport, for AI agents, served at https://tugport.com/agents.md
Repository
The share image website/og.png is rendered from website/og.html with headless Chrome:
Each docs page has its own card in website/og/<slug>.png; after adding or renaming a guide in docs/guides.mjs, run node docs/og.mjs.
License
MIT
Source: README.md at commit a6604a3
Tools
0Version history
1- v0.1.30LatestOct 29, 2026
Score
60% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 daysRequired25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declaredRequired10 pts
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts