Your one-stop server operations workbench
SSH, databases, Redis, Kafka, Kubernetes… everything ops has to touch, unified in a single cross-platform desktop app. And you can let AI execute it for you in natural language — every step guarded by policy and audit.
Managing servers usually means juggling a pile of tools — SSH clients, database GUIs, Redis managers, Kafka consoles — and constantly switching between them. OpsKat brings all of those everyday asset operations into a single interface, so one app is enough. On its own, that's already a full ops workbench.
On top of it sits a layer of AI: just say what you need in natural language, and the AI agent connects and runs it for you — pulling logs, running SQL, checking cluster status, and more. Every step is backed by policy enforcement and full audit logging, so handing work to the AI stays safe.
If you find it useful, please give us a Star ⭐ — it means a lot!
Grab the latest build for your platform — macOS, Windows, or Linux — from the Releases page. No Go/Node toolchain required: download and run. Step-by-step notes are in the installation docs.
- Add an asset — an SSH host, database, Redis, and so on — or import from your SSH config / Tabby.
- Connect — open a terminal, run a query, or browse keys and collections.
- (Optional) Configure an AI provider, then just tell the agent what you need.
| Category | Assets |
|---|---|
| Servers |   |
| Databases |       |
| Middleware |   |
More asset types are on the way via the plugin system.
Even before you turn on the AI, OpsKat is a full-featured terminal and asset manager:
- Tree-structured grouping for every supported asset type
- Split-pane terminal with customizable themes
- SFTP file browser
- Jump host chain connections
- SQL query editor (MySQL/PostgreSQL via SSH tunnel)
- Redis command execution with key browser
- MongoDB collection browsing and query execution
- Kafka cluster, topic, message, consumer group, ACL, Schema Registry, and Kafka Connect management
- Port forwarding and SOCKS proxy
- Encrypted credential storage
- Import from SSH config / Tabby
Configure an AI provider and you can describe what you need in plain language — the agent connects and does it for you:
- "Show me the recent nginx error logs on web-01" → AI automatically SSHs in, runs the command, and returns the results
- "Count users by status in the db-prod users table" → AI connects to the database via SSH tunnel and executes the SQL query
- "List lagging Kafka consumer groups in kafka-prod" → AI checks Kafka metadata and group lag under policy control
- "Check the health of the k3s cluster" → AI runs kubectl commands and summarizes node and pod status
- Bring your own key — configure any OpenAI- or Anthropic-compatible provider; your API key is encrypted and stored locally.
- Use almost any model — OpenAI, Anthropic (Claude), DeepSeek, Gemini, Qwen, GLM, Kimi, MiniMax… or a self-hosted/local endpoint (e.g. an OpenAI-compatible Ollama).
- Direct connection — OpsKat talks to the model you configure directly; nothing is relayed through our servers, and you are not locked into any vendor.
- You stay in control — the AI only proposes actions; every command runs from your machine against your servers, under the policy and audit controls below.
Giving AI permission to operate on your servers — how do you keep it safe?
- Operation policies — SSH/serial commands, SQL statements, Redis, MongoDB, Kafka, Kubernetes, and etcd operations all support allow/deny lists. SQL is analyzed by a parser that automatically blocks dangerous operations like DELETE/UPDATE without WHERE clauses
- Policy groups — Built-in templates (Linux read-only, dangerous command deny, etc.) plus custom user-defined groups
- Pre-approved permissions — AI or opsctl can request a batch of command patterns upfront. Once approved, matching commands execute automatically without per-command confirmation
- Audit logs — Every operation is automatically recorded: who, when, which server, what command, and the full decision trail
opskat-feature-promo-en.mp4
demo.mp4
For CLI users and AI coding assistants. If you only use the desktop app, you can skip this.
OpsKat ships a standalone CLI tool (opsctl), primarily designed for AI coding assistants like Claude Code, Codex, and Gemini CLI. One-click skill installation from the desktop app teaches these AI assistants to use opsctl — so they can directly manage servers, check logs, query databases, and troubleshoot production issues.
When the desktop app is running, opsctl reuses its connection pool and approval workflow, with all operations subject to the same policy enforcement and audit logging.
You can also use it manually:
opsctl exec web-01 -- tail -n 100 /var/log/nginx/error.log
opsctl sql db-prod "SELECT status, COUNT(*) FROM users GROUP BY status"
opsctl ssh web-01| Desktop | Wails v2 (Go + Web) |
| Frontend | React 19 + TypeScript + Tailwind CSS |
| Backend | Go 1.26, SQLite |
For contributors. If you just want to use OpsKat, see Install above.
Prerequisites: Go 1.26+, Node.js 22+ with pnpm, Wails v2 CLI
make install # Install frontend dependencies
make dev # Development mode (hot reload)
make build # Production build
make build-embed # Production build with embedded opsctl
make build-cli # Build opsctl CLI onlyIs it free? Yes — OpsKat is open source under GPLv3.
Which AI models does it support, and do I need an API key? You bring your own key for any OpenAI- or Anthropic-compatible provider (OpenAI, Claude, DeepSeek, Gemini, Qwen, GLM, Kimi, and more). See How the AI works.
Does my data pass through your servers? No. OpsKat connects directly to the model endpoint you configure and to your own servers — nothing is relayed through us, and credentials are encrypted locally.
Can I use it without the AI? Absolutely. It is a complete terminal and asset manager on its own.
Does it work on an intranet or offline? Asset connections are direct, so they work on private networks. For AI features, point it at an internal or self-hosted model endpoint.
We welcome all forms of contribution! Read the Contributing Guide for development setup, commit conventions, and the PR process, then check out the issues or submit a pull request.
This project is open-sourced under the GPLv3 license.