Headless MSP is a control plane that lives on your box and answers only to your SSH key. Sites, files, databases, Docker, virtual machines, wallets, MCP, and permanent on-chain backups — no cloud dashboard, no middleman, no monthly seat.
Everything an operator needs to run real infrastructure, on one screen, driven by an AI assistant that can read your logs and run your commands.
Every app folder on the box, live health from docker, pm2, or systemd, with per-site actions to restart, inspect, and manage.
Browse the tree, edit a file and save with an automatic backup, or drop into a real bash shell scoped to the app.
Browse and edit tables, reset a user's password, and make changes with a confirm step — no separate DB client.
Run containers with ports, volumes, env, and restart policy. Spin up real KVM/libvirt VMs with their own network — NAT or a real LAN IP.
A built-in Solana wallet, MCP servers to serve or call, and a seed-only key vault where secrets are encrypted and only your seed unlocks them.
Port and endpoint watch with drift alerts, virus scan, firewall control, package updates, and a cron scheduler for shell or AI jobs.
Beyond the box itself — a wallet that spans chains, remote control over MCP, an isolated research sandbox, and a full mail stack on your own domains.
One seed, three chains — Solana, Arbitrum, and Base — with balances, transfers, and pay-per-use over the x402 protocol. Spend guards and a full transaction history built in.
One password encrypts every secret at rest. The assistant can use a stored key or password by reference — injected at run time, never revealed to the AI. Locks on exit.
Serve the whole admin toolset as a token-gated MCP endpoint, or expose a single site as its own scoped MCP on its own port. Toggle, roll, or delete each — run one box or many from a central console.
The assistant enters an isolated container for internet work — semantic search, any-page reading, YouTube, and RSS — with no path to the host box or its admin tools. Fresh each run, torn down after.
Create email accounts on a domain you own, wire the DNS, and run a full inbox — compose, read, and contacts — with the assistant able to send and triage on your behalf.
Search and buy a domain, manage its DNS records, point it at any machine on your network, and attach it to a site — the DNS record and local route created for you.
Every backup is AES-256 encrypted on your box with a passphrase that never leaves it. Then store it permanently on Arweave and pay a single one-time fee in SOL — no recurring storage bill, ever.
Your keys stay on your machine. The payment and storage settle through the Headless MSP service, so the platform side never touches your box.
AES-256 with your passphrase. The plaintext and passphrase never leave the machine.
A single on-chain checkout for permanent storage — one flat price, shown before you confirm.
The service settles storage and hands back a permanent link. Local copy is deleted after upload.
One command pulls the installer, sets up dependencies, and drops you into the control plane over SSH. Linux host, that's the only requirement.
curl -fsSL https://headlessmsp.com/install | bashRuns on any Linux server — Ubuntu, Debian, Fedora, or Arch. Manage it over SSH from any Mac, Windows, or Linux machine; only the server runs Linux.
Then run headlessmsp and open Settings to add your AI keys. Firewall and VM features use passwordless sudo and KVM where available.
Install Headless MSP on one box or a hundred. It's the same one command every time.
Install Headless MSP →