Open source · self-hosted · v0.23

Your server,
in your pocket.

PocketADM is a mobile-first command center for your self-hosted box: a live dashboard, an AI agent that actually works on your server, a real terminal with your own host login, one-tap app installs and local AI, or Claude Code and Codex on the subscription you already have, with every risky step waiting for your tap.

Download on theApp Store Install in one command View on GitHub →
Docker-native Your own key or plan Native iPhone app Multi-arch (arm64 + amd64)
P/A maxaufknax▾
CPU
17.4%
Memory
40.2%
Disk
81.6%
Internet
11.5 ms
↓ 48 B/s · ↑ 81 B/s
Uptime
6d 4h
load 0.84 · 1.03 · 0.93
Services54/56 running
AllRunningIssues · 2
◍
Nextcloud
Files & Sync · 4 containers · running
:8500
Ⓖ
Grafana
Monitoring · running (healthy)
:3000
P
Portainer
Docker · running
RUNNING
Run a quick security check on my server.
Plan · 1/3
✓ Check open ports
▸ Review SSH config
○ Summarize findings
✓ run_command
ss -tlnp | grep LISTEN
✋ edit_file +2 −1
/etc/ssh/sshd_config
AllowDeny
hardening SSH…
Done ✓ Root login disabled, fail2ban active. 2 ports worth reviewing — want details?
ChatPlan AgentAuto DeepSeek ▾
⛭ maxaufknax@stream ▾ ⋯
esctabctrl↑↓←→^C
UpdatesChecks
Updates · 18 availableRe-check
Update all (18) Which first?
R
Redis HIGH
new version · used by authentik-redis
✓ updated
UpdateDetails Explain
◠
MariaDB HIGH
v11.8.8 · used by nextcloud-db
UpdateDetails Explain
[m]
Matrix Synapse HIGH
v1.156.0 · used by synapse
UpdateDetails Explain
App Storeone-tap installs for your server
43 apps · 19 from the online catalog
Search apps…
AllInstalledAIAnalyticsAutomation
P
Portainer
Docker management UI
RUNNINGSELF-MANAGED
Ⓖ
Grafana
Pretty dashboards
RUNNINGSELF-MANAGED
Ⓥ
Vaultwarden
Your own password manager
RUNNING
▶
Jellyfin
Your personal Netflix
RUNNING
◍
Nextcloud
Your own cloud storage
RUNNING

It's interactive — tap the tabs, tilt with your cursor.

Everything, from your phone

One app to run your whole server

No more SSH-ing from a laptop to fix a container at 11pm. PocketADM puts the whole box (metrics, logs, updates, terminal and an AI engineer) one tap away.

Vibe Code: an AI that works on your server

Chat with an agent that runs commands, reads and writes files, and fixes things directly on your box. It streams live, keeps working when you close the app, and asks before anything destructive, or flip on Auto.

Live dashboard

Real-time CPU, RAM, disk, uptime and internet latency with tap-through history graphs. Every container grouped by stack, with one-tap port links and a live running count.

Service control sheets

Tap any container for a full sheet: live CPU and RAM, restart, stop, logs and a shell. Plus AI shortcuts: What is this, check logs, troubleshoot, optimize, backup, or open it straight in Vibe Chat.

A real terminal — as you

A full xterm terminal with a mobile key bar, copy & paste, and a clear shell picker: your real host login (you@yourserver), the app box, or docker exec into any container. Claude Code, Codex and Mistral Vibe install right into it.

One-tap App Store

Deploy popular self-hosted apps as clean compose projects with friendly config forms, sorted by category. Already running something? PocketADM detects it and helps you finish setup.

Smart updates and rollback

Detects newer images by registry digest, no pull needed, with priority flags and AI release-note explanations. Snapshots the running image before every update so you can roll back in one tap.

Security and health checks

Scheduled checks for SSH hardening, failed logins, fail2ban, exposed ports and restarting containers. Each warning comes with a plain-English fix and a one-tap Fix with AI.

Local AI, built in

Run models on your own hardware via Ollama: PocketADM detects or installs it, recommends models that fit your RAM, and wires them straight into the chat. Private, free, offline.

Secure by design

Password plus optional TOTP 2FA, token revocation, an append-only audit log of every action (including the AI's), and integration tokens that are never shown to the model.

You are always in control

Four ways to work with the agent

From read-only exploration to full autonomy: pick how much rope the AI gets, then bring any key.

Chat
Talk only. No tools, just answers and advice.
Plan
Read-only investigation, ends with a concrete plan.
Agent
Full tools, asks before anything destructive.
Auto
Free rein. Runs to completion while you sleep.
Nothing runs behind your back

Every tool, on your terms

Toggle any capability on or off. Green tools are read-only and run without asking. The rest need your tap, unless you are in Auto mode. Integration tokens are never shown to the model.

read_file
Read a text file from the server.
read-only
list_dir
List a directory (name, type, size).
read-only
search_files
Search file contents recursively.
read-only
fetch_url
HTTP GET a URL: docs, changelogs, APIs.
read-only
run_command
Run a shell command on the server.
asks first
write_file
Write or overwrite a text file.
asks first
edit_file
Replace an exact snippet in a file.
asks first
docker exec
Drop into a shell inside any container.
asks first

Every action, including the AI's, lands in an append-only audit log you can review anytime.

Watchmen that never sleep

Background agents on a schedule

Little AI watchmen check your server even when the app is closed, and push findings to your phone via ntfy. They only ever look — read-only and local, enforced by the server, not just asked for in a prompt. Every alert has a one-tap discuss and fix.

Security watch
Failed SSH logins, fail2ban bans, newly exposed ports and containers restarting out of nowhere.
every 6 hours
Update watch
Reviews pending image and system updates and flags which ones are security-relevant and worth applying soon.
daily
Health digest
Disk space, memory pressure, unhealthy or restarting containers and error bursts in your core services.
every 12 hours
Custom loop
You decide what it watches. Describe the job in plain words and the agent checks it on your schedule.
your schedule
Built for real stacks

One command center for your whole homelab

PocketADM is not a toy. It runs and manages a full self-hosted stack from a single app: the popular apps you already know, side by side.

NextcloudPrivate cloud and files
AuthentikSingle sign-on and 2FA
Open WebUISelf-hosted AI chat
VaultwardenPasswords, self-hosted
JellyfinMovies and shows
GiteaSelf-hosted Git
MatrixEncrypted chat
GrafanaMetrics and monitoring
Paperless-ngxDocument archive
Uptime KumaUptime monitoring
code-serverVS Code in the browser
and many moreAny Docker or compose app you run
Up and running in minutes

Install with one line

SSH into any Linux server. The installer sets up Docker (if needed), starts PocketADM over HTTPS and ends with a QR code. Scan it with the app, done — no domain needed.

$ curl -fsSL https://raw.githubusercontent.com/maxaufknax/pocketadm/main/install.sh | bash
1Run the installerDocker plus PocketADM over HTTPS: its own certificate on port 8443, or Let's Encrypt with --domain.
2Scan the QR with the appThe QR carries the address, a one-time code and your server's certificate fingerprint — the app trusts exactly that server.
3Pick your AI (optional)Claude Code or Codex on your own plan, an Anthropic, OpenRouter or OpenAI key, or a local model.

Take the helm.

Free, open source, and yours to run. Steer your whole server from the palm of your hand.

Download on theApp Store Get started Star on GitHub