# Cloudgate > Cloudgate is a deployment platform you point at your own servers and your own AWS or Google Cloud account. Deploy apps, databases, Compose stacks and AI models with domains, TLS, backups and monitoring built in. Cloudgate is made by Octabyte. Use it on the hosted console at https://cloudgate.octabyte.app, or self-host it for free under the Elastic License 2.0 (source-available, not open source). The source is public on GitHub at https://github.com/octabyte-io/cloudgate. ## Key facts - Where apps run: your own Linux server over SSH (or one bought from Cloudgate in the console), your AWS account (ECS Fargate, RDS, ElastiCache, S3 and CloudFront), or your Google Cloud project (Cloud Run, Cloud SQL, Memorystore). - What it runs: web apps, workers, cron services, private web services, buckets, PostgreSQL, MySQL, MariaDB, MongoDB, Redis, libSQL, Docker Compose stacks, and AI models served by Ollama, vLLM or llama.cpp behind an OpenAI-compatible gateway. - Sources and builds: GitHub, GitLab, Bitbucket, Gitea or any git URL, a Docker image, or a folder uploaded with the CLI. Builds with Nixpacks, Railpack, a Dockerfile or buildpacks. - Included: domains with TLS certificates, backups to S3-compatible storage, pull-request previews, rollbacks, uptime checks, error rates, logs, traces, notifications, roles, grants and an audit log. - AI agents: an Agent is a member with its own role, access grant and keys. It connects to the MCP endpoint at /mcp with "Authorization: Bearer ". It can deploy, start and stop Services, read deployment logs and health, request Plans, and open previews of a branch that expire. It asks for Plans but never applies them. Every call is in the audit log, allowed or refused; stored secrets are masked out of every result, logs included; calls are rate limited to 120 reads and 10 writes a minute. An agent key works only at the MCP endpoint and the Gateway. - For non-experts: the get-started wizard at https://cloudgate.octabyte.app/get-started goes from sign-up to a running app in three steps: account, server (buy one or connect your own with one command), Deploy. - CLI: npm install -g @octabyte-io/cloudgate@next, then cloudgate login and cloudgate deploy (Node 22 or newer). It is a beta: the current release is 0.0.2-beta.3 on the npm next tag; the latest tag (0.0.1) is a placeholder. A deploy uploads only the files that changed (--full sends every file; needs an Instance at 0.2.0 or newer). A Project folder (cloudgate link --whole-project, cloudgate config pull, cloudgate config plan) holds a whole Project's cloudgate.yaml, and a root cloudgate deploy plans the change and then builds every app built from a subfolder. cloudgate template try runs a template on the local Docker for template authors. - Source and contributing: the source is public at https://github.com/octabyte-io/cloudgate. Bug reports and feature ideas go in GitHub issues; how to send a change is in https://github.com/octabyte-io/cloudgate/blob/main/CONTRIBUTING.md. - Security reports: privately through the GitHub repository's Security tab, "Report a vulnerability" (https://github.com/octabyte-io/cloudgate/security), never in a public issue. Policy: https://github.com/octabyte-io/cloudgate/blob/main/SECURITY.md. ## Pricing (USD, monthly) - Starter: $15 a month. 3 Servers and 3 Cloud Environments; Unlimited members, Projects and Environments; Apps, databases, Compose stacks and AI models; Domains, TLS, backups, metrics and uptime checks; Preview deployments and rollbacks; Agents and the MCP endpoint. - Business: $35 a month. Everything in Starter; SSO sign-in for your proven domains; SCIM provisioning; Custom roles; Forward auth in front of your apps; Pay for more Organizations on one plan. - Add-on: $5 a month for one more Server and one more Cloud Environment. - Free trial: 30 days on either plan; a card is needed to start it. - Going over a count refuses only the next addition; nothing running is switched off. - Self-hosted: free, with one Organization and one build at a time per Server. An Enterprise license (contact support@octabyte.io) adds SSO, SCIM, custom roles, forward auth, white-labelling, parallel builds and cloud runs, and more than one Organization. - Self-host requirements: a bare Ubuntu 24.04 x86-64 server with 2 vCPU, 4 GB memory and 40 GB disk, root over SSH, ports 22, 80, 443, 3000 and 4000 open. - Self-host install, one command on the server: curl -fsSL https://cloudgate.octabyte.io/install.sh | sudo sh (it clones https://github.com/octabyte-io/cloudgate into /opt/cloudgate and detects the public IP; add CLOUDGATE_PUBLIC_HOST= after sudo to choose it). Running it again upgrades. Then open http://:3000/sign-up; the first account owns the instance. The self-hosted server reports version 0.2.0. ## Pages - [Home](https://cloudgate.octabyte.io/): what Cloudgate is, where it runs, and who it is for - [Deploy an app you built with AI](https://cloudgate.octabyte.io/vibe-coding): the three-step path for people new to deploying - [Cloudgate for AI agents](https://cloudgate.octabyte.io/ai-agents): Agents, the MCP endpoint, tools and guard rails - [Features](https://cloudgate.octabyte.io/features): ways in, where apps run, and what Cloudgate looks after in production - [Cloudgate CLI](https://cloudgate.octabyte.io/cli): install, log in and deploy a folder from the terminal or CI - [Pricing](https://cloudgate.octabyte.io/pricing): Starter and Business plans, the Add-on, the free trial and worked examples - [Self-host Cloudgate](https://cloudgate.octabyte.io/self-hosted): server requirements, what the installer sets up, and the Elastic License 2.0 - [Compare Cloudgate](https://cloudgate.octabyte.io/compare): how Cloudgate differs from Heroku, Vercel, Render and Coolify, with one page each - [About](https://cloudgate.octabyte.io/about): what Cloudgate is, who makes it and why - [Security](https://cloudgate.octabyte.io/security): how agent keys, secrets, roles and the audit log protect you, and how to report a vulnerability - [License](https://cloudgate.octabyte.io/license): the Elastic License 2.0 in plain English - [Changelog](https://cloudgate.octabyte.io/changelog): what has shipped - [Contact](https://cloudgate.octabyte.io/contact): support and sales by email, bugs and ideas on GitHub, and how to report a security problem - [Legal](https://cloudgate.octabyte.io/legal): terms of service, privacy policy, acceptable use, cookies, subprocessors and the DPA ## Documentation - [Documentation home](https://cloudgate.octabyte.io/docs): the user guide, API reference, CLI and MCP references ### Start here - [Quickstart](https://cloudgate.octabyte.io/docs/quickstart): Deploy your first app with Cloudgate in minutes, from an app template in the get-started wizard, your own code in the console, or a folder with the CLI. - [How it fits together](https://cloudgate.octabyte.io/docs/concepts): How Cloudgate is organized, from Organization to Project, Environment and Service, where Services run, and how Deployments, Plans and Agents fit in. - [Glossary](https://cloudgate.octabyte.io/docs/glossary): Every term Cloudgate uses, from Access log to Wired variable, with a one-line definition each, plus the words Cloudgate avoids and what it says instead. ### User guide - [Get started wizard](https://cloudgate.octabyte.io/docs/guide/get-started): Pick an app from the template catalogue, get a Server (buy one or bring your own) and press Deploy. The wizard does the rest and gives you a working address. - [Projects and Environments](https://cloudgate.octabyte.io/docs/guide/projects-and-environments): Group related Services in a Project, split it into Environments such as production and staging, choose where each Environment deploys, and delete safely. - [Applications](https://cloudgate.octabyte.io/docs/guide/applications): Create an Application from git, a Docker image or uploaded files, pick a builder, a kind and a size, and set its port, replicas and health check. - [Deployments and rollbacks](https://cloudgate.octabyte.io/docs/guide/deployments): Follow a Deployment through the build queue, read its live log, cancel or redeploy it, and roll a Service back to an earlier Deployment without rebuilding. - [Previews](https://cloudgate.octabyte.io/docs/guide/previews): Get a live copy of an Application for each pull request, or a requested preview of any branch that expires on its own. Set it up, extend it and tear it down. - [cloudgate.yaml and Plans](https://cloudgate.octabyte.io/docs/guide/project-config): Describe a Project's Services in one cloudgate.yaml, kept in Cloudgate or your repository, and review each Plan of creates, changes and destroys before Apply. - [Templates](https://cloudgate.octabyte.io/docs/guide/templates): Set up a ready-made app such as Ghost, n8n or Plausible from the template catalogue in a Project, review its Plan and Apply it. What templates can't do. - [Servers](https://cloudgate.octabyte.io/docs/guide/servers): Connect your own machine to Cloudgate over SSH, run its setup to install Docker Swarm and Traefik, and manage its host key, shell, telemetry and removal. - [Bought Servers](https://cloudgate.octabyte.io/docs/guide/bought-servers): Buy a Server in the Cloudgate console by location and size, with optional backups and extra storage, billed monthly in advance on your Hosted plan invoice. - [Cloud accounts](https://cloudgate.octabyte.io/docs/guide/cloud-accounts): Connect an AWS account or Google Cloud project, see what Cloudgate creates there with OpenTofu, and how drift from hand changes is shown and put back. - [Databases](https://cloudgate.octabyte.io/docs/guide/databases): Add a PostgreSQL, MySQL, MariaDB, MongoDB, Redis or libSQL database, find its connection details, link it to a Service, or use one you already run in the cloud. - [Compose stacks](https://cloudgate.octabyte.io/docs/guide/compose-stacks): Deploy a Docker Compose file as a Compose stack, from the console or a repository, give its services Domains, and run it on a Server or a Stack VM. - [Buckets](https://cloudgate.octabyte.io/docs/guide/buckets): Add an S3-compatible bucket in the Project config, link its name, endpoint and key to your Services, allow browser uploads, and back it up on a Server. - [Workers, cron, private](https://cloudgate.octabyte.io/docs/guide/workers-and-cron): Run a queue consumer as a worker, an internal API as a private web service, and nightly jobs as a cron service, on a Server, AWS or Google Cloud. - [AI models](https://cloudgate.octabyte.io/docs/guide/ai-models): Serve a model with Ollama, vLLM or llama.cpp on your own Server, reserve GPUs, call it through the OpenAI-compatible Gateway and see token spend per Agent. - [Environment variables](https://cloudgate.octabyte.io/docs/guide/environment-variables): Set variables on a Project, Environment or Service, reference shared values by name, link database and bucket Outputs, and keep secrets masked. - [Backups and restore](https://cloudgate.octabyte.io/docs/guide/backups): Add an S3-compatible Destination, schedule database dumps and volume backups, restore a dump or tarball, and set backup retention for RDS, Cloud SQL and caches. - [Domains](https://cloudgate.octabyte.io/docs/guide/domains): Point your own domain at a Service, get a Let's Encrypt certificate, use a free sslip.io address, add redirects and run behind a CDN, on a Server or in a cloud. - [Monitoring](https://cloudgate.octabyte.io/docs/guide/monitoring): Watch Server CPU and memory, add Uptime checks and an Error-rate threshold, follow Incidents, and read traces, runtime logs and access logs for your Services. - [Notifications](https://cloudgate.octabyte.io/docs/guide/notifications): Send Cloudgate events to Slack, Discord, Teams, Telegram, email, ntfy or a webhook, and choose which Deployments, backups and Incidents each channel hears. - [Members and roles](https://cloudgate.octabyte.io/docs/guide/members-and-roles): Invite people to your Cloudgate Organization, give them the owner, admin or member role, limit them to certain Projects and Services, and build custom roles. - [Personal keys](https://cloudgate.octabyte.io/docs/guide/personal-keys): Create a personal key that lets a script, CI job or the Cloudgate CLI act as you on the REST API, choose when it expires, and revoke it the moment it leaks. - [Agents](https://cloudgate.octabyte.io/docs/guide/agents): Create an Agent so an AI coding tool can read and deploy your Services over MCP. Pick Reader or Operator, grant access, issue agent keys and connect a client. - [Audit log](https://cloudgate.octabyte.io/docs/guide/audit-log): See who created, changed, deleted or deployed what in your Cloudgate Organization, every sign-in and every Agent call, filtered by actor, action and outcome. - [SSO and SCIM](https://cloudgate.octabyte.io/docs/guide/sso-and-scim): Let members sign in with Okta, Entra ID, Auth0 or Keycloak over OIDC, provision them with SCIM, and put Applications behind your identity provider. - [Organizations](https://cloudgate.octabyte.io/docs/guide/organizations): Create a Cloudgate Organization, switch between the ones you belong to, choose your default, and learn what happens when one is frozen, lapsed or deleted. - [Billing and plans](https://cloudgate.octabyte.io/docs/guide/billing): Start the 30-day free trial, choose Starter or Business, buy Add-ons, see what happens at your Server count, and how Bought Servers are billed on Hosted. ### CLI - [CLI guide](https://cloudgate.octabyte.io/docs/cli): Install the Cloudgate CLI, log in with a code, link a folder or a whole Project, deploy only the changed files, follow logs, set variables, and run it in CI. - [Command reference](https://cloudgate.octabyte.io/docs/cli/commands): Every Cloudgate CLI command with its usage line, arguments, flags and defaults, environment variables and JSON output, from login and deploy to templates. - [CI recipes](https://cloudgate.octabyte.io/docs/cli/ci): Run cloudgate deploy in GitHub Actions or GitLab CI with a Personal key in CLOUDGATE_KEY. Copyable jobs, the flags CI needs, and what each exit code means. - [Troubleshooting](https://cloudgate.octabyte.io/docs/cli/troubleshooting): What each Cloudgate CLI exit code means, and how to fix common errors such as not logged in, plain http refused, wrong Organization and missing values. ### MCP and agents - [Overview](https://cloudgate.octabyte.io/docs/mcp): How AI agents use Cloudgate's MCP endpoint as members of your Organization, with their own role, grant and agent key, and how to connect one in a few minutes. - [Connect a client](https://cloudgate.octabyte.io/docs/mcp/connect): Create an Agent, choose its role and grant, copy its agent key, and add Cloudgate's MCP endpoint to Claude Code, VS Code, Cursor, Codex CLI or another client. - [Tool reference](https://cloudgate.octabyte.io/docs/mcp/tools): All 21 tools Cloudgate's MCP endpoint serves to AI agents, with parameters, what each answers, the role it needs, the budget it spends and its edge cases. - [Guard rails](https://cloudgate.octabyte.io/docs/mcp/guard-rails): The limits every Cloudgate Agent works inside: roles, grants, rate limits, secret masking, the audit log, protocol revisions and the errors a call returns. - [Workflows](https://cloudgate.octabyte.io/docs/mcp/workflows): Step-by-step tool sequences for AI agents on Cloudgate. Diagnose a failed Deployment, fix and preview a branch, deploy and watch health, and explain a Plan. ### API reference - [Overview](https://cloudgate.octabyte.io/docs/api): Call the Cloudgate REST API with a Personal key: base URL, the Organization header, errors, pagination, limits, the OpenAPI document and every endpoint. - [Authentication](https://cloudgate.octabyte.io/docs/api/authentication): Make a Personal key, send it in the x-api-key header with x-organization-id, see what each role may call, and revoke keys. Agent keys are refused here. - [Errors](https://cloudgate.octabyte.io/docs/api/errors): The JSON body of every Cloudgate API refusal, the HTTP status codes it uses, the error codes you will meet most, and what to do about each of them. - [WebSockets](https://cloudgate.octabyte.io/docs/api/websockets): Stream Deployment logs, container logs, live container stats and a Server's setup, or open a shell, over Cloudgate's six WebSocket paths with a Personal key. - [Account and Personal keys](https://cloudgate.octabyte.io/docs/api/account) - [Organizations, members and roles](https://cloudgate.octabyte.io/docs/api/organizations) - [Projects, Environments and Plans](https://cloudgate.octabyte.io/docs/api/projects) - [Applications](https://cloudgate.octabyte.io/docs/api/applications) - [Deployments, previews and rollbacks](https://cloudgate.octabyte.io/docs/api/deployments) - [Compose stacks](https://cloudgate.octabyte.io/docs/api/compose) - [Databases](https://cloudgate.octabyte.io/docs/api/databases) - [Buckets and backups](https://cloudgate.octabyte.io/docs/api/storage) - [Domains, certificates and redirects](https://cloudgate.octabyte.io/docs/api/domains) - [Monitoring and health](https://cloudgate.octabyte.io/docs/api/monitoring) - [Notifications](https://cloudgate.octabyte.io/docs/api/notifications) - [Servers and Cloud accounts](https://cloudgate.octabyte.io/docs/api/servers) - [Git providers and registries](https://cloudgate.octabyte.io/docs/api/git) - [Agents and AI](https://cloudgate.octabyte.io/docs/api/agents) - [SSO, SCIM and licences](https://cloudgate.octabyte.io/docs/api/identity) - [Instance settings](https://cloudgate.octabyte.io/docs/api/settings) - [Billing and bought Servers](https://cloudgate.octabyte.io/docs/api/billing) ### Self-hosting - [Overview](https://cloudgate.octabyte.io/docs/self-host): Self-host Cloudgate from its public GitHub repository: what the Elastic License 2.0 allows, what the free version includes, and what Enterprise unlocks. - [Install](https://cloudgate.octabyte.io/docs/self-host/install): Clone Cloudgate from GitHub and install it on an Ubuntu 24.04 server with one script, claim it with the first sign-up, deploy at sslip.io, then add a domain. - [Instance settings](https://cloudgate.octabyte.io/docs/self-host/instance-settings): Run a self-hosted Cloudgate instance from its console: the Enterprise license, branding, Traefik, disk upkeep, build limits and the Template catalogue mirror. ### Help - [Can and cannot do](https://cloudgate.octabyte.io/docs/help/limits): Every role and Agent permission, plan and licence gate, hosted-only and self-hosted-only feature, Server and cloud difference and hard limit, on one page. - [Troubleshooting](https://cloudgate.octabyte.io/docs/help/troubleshooting): Fixes for common Cloudgate problems: failed builds, queued Deployments, Server setup errors, missing certificates, Stack VMs, CLI exit codes and Agent 429s. - [FAQ](https://cloudgate.octabyte.io/docs/help/faq): Short answers to common Cloudgate questions about getting started, plans and pricing, self-hosting, deploying, security and access, and AI agents over MCP. ## Optional - [Full site text](https://cloudgate.octabyte.io/llms-full.txt): every marketing page above as plain text, in one file - [Full docs text](https://cloudgate.octabyte.io/llms-docs.txt): every documentation page as Markdown, in one file - [Sitemap](https://cloudgate.octabyte.io/sitemap-index.xml) ## App templates Ready-made apps (for example n8n, WordPress, Plausible Analytics and Vaultwarden) live in their own catalogue at https://cgt.octabyte.io/, not on this site. Each one deploys through the console's get-started wizard at https://cloudgate.octabyte.app/get-started?template=, for example https://cloudgate.octabyte.app/get-started?template=n8n.