Nandkishorrr/unit7

The backend developer your AI coding agent never had. Self-hosted control room for servers, Coolify, domains, databases and backups, with MCP

Summary

Unit7 is a self-hosted TypeScript control plane for managing servers, Coolify applications, domains, databases, deployments, and backups through SSH. It provides a web interface, CLI, and MCP server for tools such as Claude Code, Cursor, and Codex, with every action passing through the same role, policy, approval, and audit gate.

What it is useful for

Unit7 is useful when engineers want an AI coding agent to work with real infrastructure rather than only generate code. An engineer could ask it to deploy an application, add PostgreSQL, connect app.example.com to production, inspect logs, or investigate why production is slow. Risier operations require approval, while AI clients receive references to credentials rather than the underlying secrets.

The repository also provides infrastructure workflows without requiring an AI:

• Inspect server health, disk, memory, open ports, containers, and logs over SSH.
• Discover Coolify projects, apps, domains, databases, and scheduled jobs from Docker labels.
• Deploy repositories or local folders using blue-green releases, health checks, and rollback.
• Configure DNS and HTTPS, manage environment variables, and copy files.
• Schedule encrypted off-server backups and verify them through test restores.
• Run read-only unit7 checkup assessments to identify capacity, data-protection, exposure, and application-health issues.

For scripting and CI, documented commands can emit JSON, show a dry-run plan, export configuration and audit logs, and return specific exit codes. A Prometheus metrics endpoint is also available at /api/metrics with a bearer token.

How engineers can use it

Unit7 requires Node.js 24.22 or newer on macOS or Linux. The README documents this manual setup:

git clone https://github.com/Nandkishorrr/unit7.git && cd unit7
npm install
npm run build
node bin/unit7.mjs serve

The interface is then available at http://localhost:4800; the first visitor becomes the owner and can add an SSH server or connect a provider. For continuous local operation and MCP access to supported coding agents:

node bin/unit7.mjs service start
node bin/unit7.mjs connect

Engineers can also add an MCP server directly with claude mcp add --transport http unit7 https://your-unit7/mcp --header "Authorization: Bearer <agent-token>", or use unit7 mcp over stdio. Credentials should be entered in the web interface rather than shared with an agent.

Several limitations are explicitly documented. The V2.1 “Put this live” feature set is still being tested against fake servers, and the Docker image has not yet been published. Unit7 also stops monitoring when the host computer sleeps unless an Outpost is installed. The README describes the project as early and points engineers to LIMITS.md, TRUST.md, and ROADMAP.md for current boundaries.