# Kubeara Core

> Self-hosted PaaS for private infrastructure. Deploy 200+ services on any server in one click. GPU monitoring, AI model management, VRAM checker, and MCP built in. Coolify alternative. MIT licensed. Free forever.

- **Type:** MCP server
- **Install:** `agentstack add mcp-kubeara-core`
- **Verified:** Pending review
- **Seller:** [kubeara](https://agentstack.voostack.com/s/kubeara)
- **Installs:** 0
- **Category:** [Cloud & Infrastructure](https://agentstack.voostack.com/c/cloud-infrastructure)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [kubeara](https://github.com/kubeara)
- **Source:** https://github.com/kubeara/core
- **Website:** https://kubeara.dev/

## Install

```sh
agentstack add mcp-kubeara-core
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Kubeara

Deploy anything on your own servers.  
Connect a server, click deploy, done.  
MIT licensed and free to self-host forever.

[Website](https://kubeara.dev)

---

Kubeara is an open source platform to deploy
and manage any service on your own servers —
databases, applications, AI models, and more.

Connect your server. Choose a service.
Click deploy. Everything else is handled.

---

### The self-hosted alternative to Coolify, Heroku, Railway, Render, Netlify, and Vercel.

Managed cloud platforms give you convenience but take away control. Your data sits on their servers. Their pricing scales against you. Their outages become your problem.

Kubeara gives you the same one-click deployment experience — on infrastructure you own.

✅ No data leaving your servers.  
✅ No per-seat pricing surprises.  
✅ No vendor lock-in.  
✅ Free forever for self-hosted.

---

### Two ways to use Kubeara

**Self-hosted — free forever**  
Run Kubeara on your own server.  
Full control. MIT licensed.  
No feature limits. No time limits.  

**Kubeara Cloud — managed for you**  
We run the control plane.  
You connect your servers.  
Free tier available. No credit card. Try now !

## Why Kubeara

Most deployment platforms were built for 
web applications. Kubeara was built 
specifically for private infrastructure — 
databases, AI models, and services that 
must run on your own servers.

### What is built in

| Capability | What it does |
|---|---|
| **GPU monitoring** | Real-time utilization, VRAM usage, and temperature per container. Not just server-wide — per service. |
| **VRAM checker** | Validates available GPU memory before every model pull. Prevents failed deployments before they start. |
| **AI model management** | Pull, switch, and delete AI models from the dashboard. No SSH. No terminal commands. |
| **MCP integration** | Native MCP server. Manage infrastructure through Claude, Cursor, or any MCP-compatible client. |
| **Agent-based security** | Agent runs on your server and initiates outbound connections only. No Plain text SSH keys stored in any database. |
| **Framework deployment** | Framework-specific Dockerfiles for NestJS, Next.js, and React. Works first time without Nixpacks errors. |
| **200+ templates** | Every template validated through automated testing including live deployment verification. |
| **Free cloud tier** | One server free on Kubeara Cloud. No credit card. No time limit. No other platform offers this. |

---

### Who uses Kubeara

| Use case | Why Kubeara |
|---|---|
| **Private AI deployment** | Run Ollama, Open WebUI, and local LLMs on your own server. Data never leaves your infrastructure. |
| **Compliance-driven teams** | Healthcare, fintech, and legal teams that cannot send data to third-party AI providers. |
| **Agencies and MSPs** | Manage multiple client servers from one dashboard. Deploy the same stack across all clients in minutes. |
| **Versal, Heroku and Render refugees** | Same deployment experience. Your infrastructure. Fraction of the cost. |
| **DevOps teams** | Replace manual Docker Compose management with a proper control plane and monitoring. |

## Quick Start

### Self-hosted (free forever)

```bash
curl -fsSL https://get.kubeara.dev | sh
```

> View the install script before running:
> [install.sh](https://github.com/kubeara/core/blob/main/install.sh)

Open dashboard: http://your-server-ip:3000

**Manual install:**
```bash
git clone https://github.com/kubeara/core
cd control-panel
cp .env.example .env
docker compose up -d
```

---

### Kubeara Cloud (no setup required)

[→ Start free at app.kubeara.dev](https://app.kubeara.dev)

Free tier — one server, no credit card, no time limit.

---

### After install

1. Open the dashboard
2. Click **Add Server**
3. Provide server IP and SSH key
4. Click **Validate and Connect**
5. Deploy your first service

---

## Why should I use the Cloud version?

Self-hosted is free and always will be. Cloud is for teams who want the same experience without managing the Kubeara control plane themselves.

**Your application data never touches our infrastructure on any plan.**
Both options deploy to servers you connect. We only manage the Kubeara dashboard.

### Cloud is the right choice if

- You want automatic Kubeara updates that includes latest security patches, bug fixes and new services
- You want backups handled automatically
- You want email or priority support
- You do not want to maintain the control plane yourself

### Pricing

| Plan | Price | Servers |
|---|---|---|
| Free | $0 | 1 |
| Starter | $5/month | 5 |
| Pro | $29/month | 25 |
| Max | $99/month | Unlimited |
| Enterprise | $199/month | Unlimited + SSO |

## Features

### Free forever

**Deployment**
- 🚀 One-click deployment from 200+ templates
- 🐳 Docker Compose and Dockerfile support
- 🌐 Automatic SSL via Let's Encrypt
- 🔀 Custom domain configuration
- ♻️ Automatic container restarts
- 📦 Volume and persistent storage management
- 🔄 Rolling updates with zero downtime

**Servers**
- 🖥️ Connect any server via SSH
- 🔍 Automatic server validation on connect
- 📊 Real-time CPU, RAM, and disk monitoring
- 🌍 Multi-region server management
- 🔒 Agent-based security — No Plain text SSH key storage

**AI and Models**
- 🤖 Ollama and other AI models deployment in one click
- ⚡ VRAM checker before every model pull
- 📈 GPU utilization per container
- 🌡️ GPU temperature monitoring
- 💾 VRAM usage per service

**Developer Experience**
- 🔗 Native MCP server integration
- 📝 Real-time deployment logs
- 🛠️ NestJS and Next.js framework support
- 🔑 API key management
- 👥 Team members Management

---

### Enterprise

- 🔑 SSO / SAML / OIDC
- 📂 LDAP / Active Directory
- 📋 Full audit logs with export
- 🛡️ Advanced RBAC — custom roles
- 📄 Compliance documentation
- 👥 Unlimited team members
- 🤝 SLA guarantee
- 💬 Priority support
- 🏷️ White-label rights

[→ Enterprise pricing](https://kubeara.dev/pricing)  
[→ Request enterprise trial](mailto:bhushan.lilapra@kubeara.dev)

## Development workflow

Kubeara uses [Conventional Commits](https://www.conventionalcommits.org/) and [Release Please](https://github.com/googleapis/release-please) for automated, semver-based releases.

```
Feature branch
      ↓
Pull request (CI: lint, build, test)
      ↓
Merge into main
      ↓
Release Please opens/updates a Release PR
      ↓
Review Release PR (version + CHANGELOG.md)
      ↓
Merge Release PR
      ↓
Git tag + GitHub Release published
      ↓
Users install the new version
```

### Branching

1. Create a feature branch from `main` (for example `feature/deployment-logs`).
2. Open a pull request into `main`.
3. Ensure CI passes (lint, build, template tests).
4. Merge after review.

Merging to `main` does **not** publish a release immediately. Release Please accumulates commits and opens a **Release PR** when a version bump is warranted.

### Conventional commits

Use these types in PR titles or squash-merge commit messages:

| Type | Release impact | Example |
|------|----------------|---------|
| `feat` | Minor (`1.0.0` → `1.1.0`) | `feat: add deployment log streaming` |
| `fix` | Patch (`1.0.0` → `1.0.1`) | `fix: resolve docker compose parser error` |
| `feat!` or `BREAKING CHANGE:` | Major (`1.0.0` → `2.0.0`) | `feat!: redesign deployment API` |
| `docs` | Changelog only | `docs: update install guide` |
| `refactor` | Changelog only | `refactor: simplify agent install flow` |
| `perf` | Performance section | `perf: reduce deployment status polling` |
| `test` | No release | `test: add template compose validation` |
| `build` / `ci` / `chore` / `style` | No release | `chore: update dependencies` |

Breaking change examples:

```text
feat!: remove legacy deploy endpoint

feat: add new deploy API

BREAKING CHANGE: removed /api/v1/deployments/legacy
```

### Releases

- **Release PR**: created/updated by Release Please on pushes to `main`.
- **On merge**: bumps `package.json`, updates `CHANGELOG.md`, creates a git tag (for example `v1.2.0`), and publishes a [GitHub Release](https://github.com/kubeara/core/releases).
- **Tracked version**: [`.release-please-manifest.json`](.release-please-manifest.json).

See also [`release-please-config.json`](release-please-config.json) and [`.github/workflows/release-please.yml`](.github/workflows/release-please.yml).

## Security

### Security model

Kubeara uses an agent-based architecture designed to eliminate the attack surface that caused the January 2026 Coolify vulnerabilities.

**How it works:**
- Agent runs on your server
- Agent initiates outbound connections only
- No Plain text SSH keys stored in any database
- No persistent access to your server after initial bootstrap
- All agent communication encrypted in transit

---

### Reporting a vulnerability

**Please do not open a public GitHub issue for security vulnerabilities.**

Email: bhushan.lilapra@kubeara.dev

We will respond within 48 hours.
We follow responsible disclosure.
We credit researchers in our changelog.

---

### Supported versions

| Version | Supported |
|---|---|
| Latest | ✅ |
| Previous minor | ✅ |
| Older versions | ❌ |

We recommend always running the latest version.

---

### Known security measures

✅ Plain text SSH keys never stored in database  
✅ All secrets encrypted at rest  
✅ Agent outbound connections only  
✅ No persistent SSH access after bootstrap  
✅ Rate limiting on all API endpoints  
✅ Automatic security updates via Docker  
✅ HTTPS enforced on all connections  

[](https://github.com/kubeara/core)
[](https://github.com/kubeara/core/blob/main/LICENSE)
[](https://github.com/kubeara/core/pkgs/container/control-panel)

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [kubeara](https://github.com/kubeara)
- **Source:** [kubeara/core](https://github.com/kubeara/core)
- **License:** MIT
- **Homepage:** https://kubeara.dev/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** yes
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** yes
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: flagged — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-kubeara-core
- Seller: https://agentstack.voostack.com/s/kubeara
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.
