Cenvero Fleet is a free, open-source, self-hosted server fleet manager: shells, fan-out commands, secure file transfer, live sync, services, logs, metrics and alerts across Linux, macOS and Windows servers — over encrypted, host-key-pinned SSH. No cloud account, no hosted control plane. Built for humans and AI agents alike.
The controller is a single signed binary with no runtime dependencies. Install it on the machine you manage your servers from — your laptop, a bastion host or a small VM.
fleet update apply (or brew upgrade cenvero-fleet).git clone https://github.com/cenvero/fleet && make build.brew tap cenvero/fleet && brew install cenvero-fleetcurl -fsSL https://fleet.cenvero.org/install | shcurl -fsSL https://fleet.cenvero.org/install | shDetects your CPU architecture, verifies the signature and installs fleet. Homebrew on Linux works too.
winget install --id Cenvero.Fleet --exact --source wingetirm https://fleet.cenvero.org/install.ps1 | iexWinGet owns upgrades and removal of its install. The PowerShell script runs in PowerShell 5.1 or later — no administrator rights needed — installs fleet.exe to %USERPROFILE%\.local\bin and adds it to your user PATH.
One controller replaces a drawer of scripts, SSH configs and dashboards — and every action is scriptable, auditable and available as JSON.
Open a persistent shell that survives network drops, or run a command on one server, a tag group or the whole fleet at once — with ordered output, timeouts, per-server exit codes and --json for scripts.
Chunked, parallel, SHA-256-checksummed and resumable uploads and downloads, server-to-server copies, and fleet sync to keep a local folder mirrored to a server — live.
Reach servers directly, or let agents dial out from behind NAT and firewalls. Mix both in one fleet.
Add a server and Fleet installs, verifies and starts its agent over SSH — with a preview before anything changes.
Start, stop and restart units, follow and search logs, query the journal, and keep a cached copy for offline reading.
CPU, memory, disk and load history, threshold alerts, and Slack or webhook notifications when servers go offline or jobs fail.
Run long tasks as detached jobs, manage crontabs, and detect config files that drift from a captured baseline.
A self-describing CLI that Claude Code or Codex learns in one command — then operates your fleet safely.
Agentic FleetThe same engine drives a live terminal dashboard, a dual-pane terminal file manager, a localhost web UI and a CLI that prints JSON.
fleet dashboard — a live operations console: servers, services, logs, alerts and the audit trail, with keyboard and mouse. New in v2.5.0
fleet files — a dual-pane file manager for local ↔ server and server ↔ server work, with previews, a transfer queue and drag and drop. New in v2.5.0
fleet file ui — a localhost-only web UI with a drag-and-drop file manager and a read-only Fleet overview. New in v2.5.0In direct mode the controller connects to the agent over SSH when it needs to. In reverse mode the agent dials out and keeps an authenticated session open, so the server needs no inbound port at all. Mix both in the same fleet.
One command teaches Claude Code or Codex the entire CLI. The agent reads fleet context, then deploys, debugs and verifies across your servers with your keys, on your machine — and every command returns JSON it can reason about.
fleet guard reverts a risky change automatically unless it is confirmed.Fleet runs with root-level reach across your infrastructure, so it is built to be boringly safe.
Ed25519 keys, trust-on-first-use host-key pinning, and one-time enrolment tokens for reverse agents. Key rotation verifies the new key before retiring the old one.
Every release is minisign-signed. The installer and updater verify it and refuse downgrades; agent rollouts can be canaried.
Fail-closed RBAC tokens per server, group and command; named secrets that reach commands through the environment and are redacted from output.
Stage risky commands for a human to review, deny or require confirmation for patterns, and dry-run anything first.
A hash-chained log of transfers and key changes and, since v2.5.0, every remote command, approval, and token or secret change. Never the secret values.
The web UI binds to loopback with a per-run token, CSRF checks and a strict CSP; agents can be confined to allow-listed directories.
Creates the config directory, Ed25519 keys and databases.
fleet init
Interactive by default; Fleet installs the agent over SSH.
fleet server add web-01 192.0.2.10 --login-user rootLabel servers once, then target them by expression.
fleet tag web-01 role=web env=prod
Shell in, fan out, or open the dashboard.
fleet exec --group role=web -- uptime
fleet dashboardYes. Cenvero Fleet is free and open source under the AGPL-3.0-or-later license. There is no paid tier, no account and no hosted service.
No. The controller is a binary on your own machine. It talks to your servers over encrypted, host-key-pinned SSH channels and keeps its state in a local directory — SQLite by default, or PostgreSQL, MySQL or MariaDB if you prefer.
Yes. In reverse mode the agent dials out to the controller and keeps an authenticated session open, so the server needs no inbound port. Direct and reverse servers can be mixed in one fleet.
The controller runs on Linux, macOS and Windows. Agents are installed automatically on Linux servers with systemd; macOS and Windows agents can be set up manually. Service and firewall management are Linux features.
Ansible applies playbooks. Fleet is an interactive, always-connected control plane: live shells, fan-out commands with JSON output, file transfer and live sync, logs, metrics, alerts, a terminal dashboard and a web UI — plus a CLI that AI agents can discover and drive. Many teams use both.
Yes. Run fleet skill claude (or codex). The agent learns the whole CLI from fleet context and operates your fleet with your keys, on your machine — with scoped tokens, approvals, dry runs and a dead-man's switch as guard rails. Read more about Agentic Fleet.
Every release is signed with minisign. The installer and the updater verify the signature, and refuse to roll back to an older version, before anything is replaced.
Install the controller, add a server and run your first command across the fleet — all in a few minutes.