Skip to main content
Open Source · Cross-platform · macOS / Linux / Windows

All-in-one server ops workstation

SSH and local terminals, MySQL / PostgreSQL / MongoDB databases, Redis / etcd / Kafka middleware, Kubernetes clusters — everything ops touches, unified in one cross-platform desktop app. And when you want it, AI executes for you in natural language, with policy and audit on every step.

OpsKat — Unified workspace
prod-web-1
prod-mysql
redis-cache
prod-cluster
root@prod-web-1:~$ df -h
Filesystem Size Used Avail Use% Mounted on
/dev/sda1 50G 23G 25G 48% /
/dev/sdb1 200G 142G 48G 75% /data
root@prod-web-1:~$ systemctl status nginx
● nginx.service - A high performance web server
Active: active (running) since Mon 2026-06-15
root@prod-web-1:~$
prod-web-1 · root@10.0.1.10SSH · UTF-8 · 80×24

Stop opening five tools for one incident

One app for SSH, one for databases, one for Redis, scripts for bastions, sticky notes for passwords — now, one OpsKat does it all.

Before · 5 tools
SSH client
Database GUI
Redis tool
Bastion scripts
Password manager
into one
OpsKat
All-in-one ops workstation
TerminalDatabaseMiddlewareCloud-native

One app connects your whole stack

From servers to databases, middleware and cloud-native clusters — managed in one place, and it keeps expanding every release.

Servers & terminals
SSHLocal terminalSerial
Databases
MySQLPostgreSQLSQL ServerSQLiteMongoDB
Cache & middleware
RedisetcdKafka
Cloud-native
Kubernetes
Core capabilities

One workstation across the whole ops workflow

The resource wall answers “what can it manage”; this answers “what can it do”.

Multi-protocol terminal

SSH + local shell / PowerShell / WSL, with split panes, SFTP, jump-host chains, port forwarding and ZMODEM drag-and-drop upload.

Query & data management

MySQL / PostgreSQL / SQL Server / SQLite share one SQL editor; MongoDB, Redis, etcd and Kafka each get a dedicated panel.

Cluster & middleware

Kubernetes resources, Kafka topics / consumer groups, Redis / etcd panels — managed in one place.

Asset management

A grouped, tree-structured inventory with one-click import from SSH config, Tabby and WindTerm.

Policy & audit

Allow / deny rules across commands, SQL, Redis, Mongo, Kafka, K8s and etcd, with full audit logging and approvals.

opsctl CLI

A single Go binary on the same core — shares the desktop connection pool, scriptable and CI-ready.

Secure credentials

Credentials encrypted with Argon2id + AES-256-GCM; the master key lives in your OS keyring. Local-first.

Cross-platform · open source

Native on macOS / Windows / Linux, GPL-3.0 open source, your data stays local and under your control.

AI ops assistant

Drive ops in natural language, integrated with Claude Code, Codex, OpenCode and Gemini CLI — all under the same policy and audit.

Data query

One SQL editor across every relational database

MySQL, PostgreSQL, SQL Server and SQLite share one SQL editor and can connect over an SSH tunnel; MongoDB, Redis, etcd and Kafka each get their own dedicated panel.

SQL highlighting and paged execution
Filter / sort / one-click export of results
Read-only connection protection
Read the Query Editor docs
Query editor — prod-mysql
prod-mysql · usersRun
SELECT id, name, email, created_at
FROM users
WHERE status = 'active'
ORDER BY created_at DESC LIMIT 5;
id
name
email
created_at
1
Ada Lovelace
ada@calc.io
2026-06-18
2
Linus T.
linus@kernel.org
2026-06-17
3
Grace Hopper
grace@navy.mil
2026-06-15
4
Alan Turing
alan@bletchley.uk
2026-06-12
Audit log · Today
time
asset
command
decision
14:23
prod-web-1
systemctl reload nginx
Allowed
14:21
prod-mysql
DROP TABLE orders
Blocked
14:18
prod-web-1
rm -rf /var/tmp/cache
Approved
14:05
redis-cache
FLUSHALL
Blocked
13:52
prod-cluster
kubectl get pods -A
Allowed
opsctl requests to runsystemctl restart app · prod-web-1
DenyApprove
Stays in control

Every action carries policy and a paper trail

Commands, SQL and Redis ops pass allow / deny policy first, then land in a full audit log; dangerous operations trigger an approval flow, and opsctl shares the same rules as the desktop app.

Built-in + custom policy groups, inherited by asset / group
Dangerous commands auto-blocked or double-confirmed
Full audit — every decision is traceable
Read the Policy & Audit docs
Automation · CLI & AI

Script it, or hand it to AI in one sentence

opsctl brings the whole workstation to your terminal and CI; when you want it, AI executes in natural language — both share the same connection pool, policy and audit.

opsctl CLIScripts · CI · batch
opsctl
# Run a remote command
$ opsctl exec prod-web-1 -- nginx -t
# Database query
$ opsctl sql prod-mysql "SELECT count(*) FROM users"
# Batch in parallel
$ opsctl batch exec 'web-*' -- uptime
✓ web-1 · web-2 · web-3 — 3/3
AI ops assistantDriven by natural language
opsctl — AI session
you> Check nginx on prod-web-1 and reload if the config is valid
agent> Sure — I'll check it and reload once it passes.
┌ run_command · prod-web-1
│ $ nginx -t → syntax ok
🛡 policy: allowed · 📋 audit: logged
└ systemctl reload nginx → ✓
agent> Done. Config is valid and reloaded on prod-web-1.
Or one-click install the Skill so your AI coding assistant runs ops through opsctl
Claude CodeCodexOpenCodeGemini CLI

Ready to put ops into one app?

Download the desktop app or install the opsctl CLI, and start managing your whole infrastructure with one tool.