# ManageLM

> AI-driven Linux and Windows server management platform — day-to-day system administration as well as security, compliance, monitoring, PKI, backups, credential rotation and a PKCS#11 keystore. Two ways to work: AI-assisted administration, a browser console on any managed host with an assistant working alongside you, and agentic administration, where autonomous agents plan and execute across the whole fleet. Five ways in, all on the same agents, the same permissions and the same audit trail: the web portal, Claude over MCP, the browser console, the server's own command line, and plugins for ChatGPT, VS Code, Cursor, Slack and n8n. Secured by hard-enforced command allowlisting and local LLM execution.

ManageLM lets teams manage Linux and Windows servers by talking to Claude in natural language. Requests flow through a cloud portal to lightweight agents installed on servers. Agents use a local LLM (Ollama, LM Studio, vLLM, llama.cpp and more, or 11 cloud providers) to interpret tasks and execute commands — with every command validated against an explicit allowlist before execution. Run that model yourself and nothing your servers print leaves your network. Includes 33 built-in skills (396 operations and 1,025 allowlisted commands across Linux & Windows), security audits with automated remediation, real-time threat detection, system inventory, SSH/sudo access mapping, activity audit, certificate discovery, hosting connectors (AWS, Azure, GCP, OpenStack, Proxmox, VMware) with optional VM actions, SIEM and ticketing connectors (Elastic, Splunk, Slack, ServiceNow, Jira, Webhook), service monitors, certificate management (PKI + Let's Encrypt), encrypted system backups, automated credential rotation with vault delivery, a PKCS#11 keystore that holds signing keys applications use without ever holding them (RSA, EC, post-quantum ML-DSA, AES, HMAC), a passkey-protected web console with an AI assistant, and an incident Panic Button. Built-in compliance evaluation against 13 frameworks — CIS, SOC 2, PCI DSS, ISO 27001, NIS2, NIST CSF, NIST 800-53, DORA, GDPR Art. 32 and HIPAA — with drift detection and auditor-ready evidence PDFs.

What makes it different:

- **Assisted and agentic — you choose, task by task.** Other products cover a single side: an AI that talks about your servers, or an automation engine that runs playbooks. ManageLM gives you both — a browser console where you type and the assistant works with you, and autonomous agents that plan and run the work across the fleet.
- **Agentic does not have to mean write access.** View-only AI access is a per-server or per-group switch: agents keep inspecting, correlating and reporting across the fleet but cannot change anything, enforced on the host by the kernel (Landlock/seccomp on Linux, a low-integrity process on Windows). A typical fleet runs production view-only for reporting and incident investigation, and staging or dev fully agentic.
- **The AI is the interface, not the engine.** ManageLM also runs with no model at all. **No LLM** is an account-wide setting that switches every model-backed feature off: tasks and chat, the console assistant, threat detection and skills. Everything else is deterministic and unaffected — security audits, inventory, compliance, monitoring, backups, PKI, credential rotation, the keystore, the web console and graphical desktop with session recording, SSH and sudo sync, and the incident Panic Button. MCP still connects and still answers questions about the fleet. Nothing is deleted, so AI can be enabled later without redoing anything.
- **Hard-enforced security, not prompt-level rules.** Every command is validated against an allowlist in code, executed inside a kernel sandbox, with secrets never shown to the model and no inbound port opened on the server.
- **One platform for the whole job.** System administration, security audits, threat detection, compliance evidence, monitoring, PKI, backups, credential rotation and custody of your signing keys — not a chat layer on top of someone else's tooling.

The features listed below are what ManageLM ships with by default, not the limit of what it does. Built-in skills, compliance frameworks, monitors, connectors and LLM providers are all extensible: custom skills can allowlist any command that runs on a server, custom frameworks and monitors are user-defined, any OpenAI-compatible LLM endpoint works, and the MCP server and its REST API equivalent cover integrations beyond the listed plugins.

Published by RCDevs S.A., 1 Boulevard du Jazz, 4370 Esch-sur-Alzette, Luxembourg — info@managelm.com.

## Connect an AI Client

ManageLM is an MCP server. Point any MCP-capable client at it and authorize with OAuth 2.0 — no API key to paste, no per-tool setup.

- Hosted MCP endpoint: `https://app.managelm.com/mcp` (streamable HTTP, OAuth 2.0 PKCE).
- Self-hosted MCP endpoint: `https://<your-portal-host>/mcp`.
- Listed in the official MCP Registry as `com.managelm/managelm`.
- 32 built-in portal tools (fleet search, scans, reports, task history and rollback) plus one tool per skill in the account.

## Key Links

- [Website](https://www.managelm.com/): product overview, feature pages and blog.
- [Portal](https://app.managelm.com/): sign-in to the hosted SaaS console.
- [Documentation](https://app.managelm.com/doc/): install, configure and operate ManageLM.
- [Quick Start](https://app.managelm.com/doc/#quick-start): create an account, install an agent, run a first task.
- [Docker Self-Host](https://app.managelm.com/doc/docker.html): run the portal yourself from the published Docker image.
- [Package Installer Self-Host](https://app.managelm.com/doc/package.html): self-extracting installer for x86_64 and arm64 Linux.
- [Plugins](https://www.managelm.com/plugins.html): Claude, ChatGPT, Cursor, LM Studio, Goose, VS Code, Slack, n8n and OpenCLAW integrations.
- [Company](https://www.managelm.com/company.html): RCDevs S.A., the cybersecurity company behind ManageLM.
- [Blog](https://www.managelm.com/blog.html): product announcements and release notes.
- [License / Pricing](https://lic.managelm.com/): plans, quotas and license management.
- [Legal](https://www.managelm.com/terms.html): hub linking the licence, privacy, DPA and maintenance agreements.

## Features

- [AI-Assisted Console](https://www.managelm.com/features/consoles.html): a browser root shell on any managed server with an assistant that reads the terminal and proposes one command at a time. Assisted, not agentic — the assistant has no shell of its own and executes nothing; a person presses the key. Windows hosts open a full graphical desktop the same way. No inbound port, passkey confirmed at every open, granted per server. Sessions can be recorded and replayed, including direct SSH logins.
- [Privileged Access](https://www.managelm.com/features/privaccess.html): PAM without a bastion or a VPN. A Console Portal listing every server an operator may open (terminal, file browser, Windows desktop), and a Session Portal drawing who is connected to which server right now and by what, including SSH and RDP logins ManageLM did not open. Logins made with a key ManageLM does not manage are flagged as unmanaged and can raise an email. Passkey step-up on every session, idle lock, per-server grants, optional recording to the account's own S3 storage. Owners and admins only.
- [Security Audit](https://www.managelm.com/features/secaudit.html): 28 deterministic Linux checks and 23 Windows checks covering SSH, firewall, TLS, certificates, SUID binaries, failed logins and Docker, with CVE scanning, severity scoring and automated remediation.
- [Threat Detection](https://www.managelm.com/features/threats.html): real-time detection of compromised services and risky user sessions on Linux, with plain-English alerts.
- [Pentests](https://www.managelm.com/features/pentests.html): automated network, web and DNS penetration tests (nmap, nuclei, testssl.sh) with AI-generated reports.
- [System Inventory](https://www.managelm.com/features/inventory.html): fleet-wide discovery of services, packages, containers, databases and user accounts with version detection.
- [SSH & Sudo Access](https://www.managelm.com/features/access.html): every SSH key and sudo privilege mapped to a person, including NOPASSWD detection and PDF access reports.
- [Service Monitoring](https://www.managelm.com/features/monitoring.html): 49 monitor types over TCP (with TLS and STARTTLS), HTTP, DNS and UDP, plus CPU, memory, filesystem, process and custom script checks, with email, webhook and in-app alerts.
- [Certificates & PKI](https://www.managelm.com/features/certificates.html): issue, renew and revoke TLS certificates from a built-in internal CA or Let's Encrypt (ACME HTTP-01 and DNS-01).
- [System Backups](https://www.managelm.com/features/backups.html): agent-side AES-256 encrypted filesystem backups to your own S3 bucket, restorable to any agent.
- [Credential Rotation](https://www.managelm.com/features/credentials.html): scheduled rotation of service accounts, SSH keys and application secrets, delivered to your vault.
- [PKCS#11 Keystore](https://www.managelm.com/features/keystore.html): RSA, EC, post-quantum ML-DSA, AES and HMAC keys held in the portal and used by applications through a standard PKCS#11 module.

## Blog Posts

Each link is the full post as JSON: title, summary and HTML content in English (en), French (fr) and German (de). Newest first.

- [Privileged Access, Brought to the Next Level: No Passwords, No VPN, No Bastion](https://www.managelm.com/assets/blog/blog9.json): 2026-09-15. Your administrators hold a root password, an SSH key, a VPN profile and a domain account, and every one of them outlives the reason it was issued. Now picture them holding none of it: just a ManageLM account, a passkey, and a page listing the servers they may open. Terminals, Windows desktops, file transfer and an assistant that reads the screen, with no credential anywhere in the story.
- [Not Another Webmin: The Admin Tool That Could Only Be Built Now](https://www.managelm.com/assets/blog/blog8.json): 2026-08-31. Control panels have looked the same since 1997, because every button is a guess somebody made in advance about your future Tuesday. Everything they never guessed ended up in an unlogged SSH session. Why agents change what an admin tool can be, and why the PKCS#11 keystore is the clearest proof.
- [The Password Nobody Changes: Why Credential Rotation Keeps Failing](https://www.managelm.com/assets/blog/blog7.json): 2026-08-21. Most companies have a 90-day rotation policy and a handful of service accounts that haven't changed since 2019. The gap isn't discipline: changing one password means changing it in six other places in the same minute. Where vaults, PAM and Ansible stop short, and why an agent that's already on every server changes the maths.
- [What is ManageLM? Explanation for non-techs](https://www.managelm.com/assets/blog/blog6.json): 2026-07-31. Your team runs your servers by writing what they want in plain English, and an allowlist written in code decides what is actually allowed to happen. Here's how that works, why the AI never holds the keys, and the security review pre-answered so you can forward this to whoever is about to ask.
- [Four Locks on One Door: The Complete Infrastructure Security Stack](https://www.managelm.com/assets/blog/blog5.json): 2026-05-30. Most security platforms give you one lock on the door. ManageLM gives you four: internal audits, daily CVE checks, external pentests, and live threat detection. All bundled into compliance-ready reports.
- [I Was Scared To Let An AI Manage My Servers. I Use It Every Day Now.](https://www.managelm.com/assets/blog/blog4.json): 2026-04-30. Five reasonable fears about letting an AI run commands on production, what actually happened, and how my daily admin life looks now. Includes one 4:12 AM page that ended in eleven minutes.
- [How a DGX Spark Accidentally Became a Server Management Platform](https://www.managelm.com/assets/blog/blog3.json): 2026-04-03. It started with an NVIDIA DGX Spark, a parade of open-source models, and one nagging question: what is this thing actually useful for? The answer turned into ManageLM, AI server management that keeps your data where it belongs.
- [Why MCP Changes Everything for Server Management](https://www.managelm.com/assets/blog/blog2.json): 2026-03-31. The Model Context Protocol (MCP) by Anthropic gives AI tools a structured, authenticated way to interact with external systems. For server management, this is transformative. It replaces fragile scripts and manual SSH sessions with secure, auditable, natural-language operations. Here's how ManageLM leverages MCP to make infrastructure management safer and more accessible.
- [Introducing ManageLM: AI-Powered Server Management](https://www.managelm.com/assets/blog/blog1.json): 2026-03-25. Meet ManageLM, the platform that lets you manage your entire Linux and Windows infrastructure using natural language. Built on Claude's MCP protocol with local LLM execution, command allowlisting, and zero inbound ports.

## Detailed Information

- [llms-full.txt](https://www.managelm.com/llms-full.txt): comprehensive product details — built-in skills, security architecture, plugins, LLM providers, pricing tiers and deployment options.