Secure Deployer runs a lightweight service on your remote server, enabling AI applications (Cursor, openClaw etc.) to execute commands, manage files, and deploy projects on your behalf.
Problems it solves:
- AI applications refuse to handle server credentials or SSH connections → Secure Deployer bridges the gap so AI can operate your server freely
- VPN causes unstable SSH connections → Secure Deployer uses short-lived connections that are inherently more stable
- Worried about AI messing up your server → Default approval mode requires your explicit approval for every command
- Non-technical users can't understand shell commands → AI must provide a natural language description with every command
🔒 Security First
- Default approval mode: every AI command requires manual approval in the dashboard
- AI must describe the purpose and risks of every command in natural language
- Dangerous commands are automatically blocked + real-time alert notifications (configurable blacklist)
- Dual-port isolation: AI API and management dashboard on separate ports
⚡ Full Featured
- Command execution (synchronous + streaming output)
- File management (browse, edit, upload, download)
- System monitoring (CPU / memory / disk)
- Operation history + visual statistics
- One-click Skill document generation
🌐 User Friendly
- Web-based visual management dashboard
- Bilingual interface (English / 中文)
- One-click installation script
- Easy enough for non-technical users
# One-click install (requires root)
curl -fsSL https://raw.githubusercontent.com/chasedai/secure-deployer/main/scripts/install.sh | sudo bashOr install manually:
git clone https://github.com/chasedai/secure-deployer.git
cd secure-deployer
npm install
npm run build
npm start- Open the dashboard: Visit
http://YOUR_SERVER_IP:9877in your browser and set an admin password - Generate a Skill document: Go to "Skill Gen" page, enter your server address, and click Generate
- Provide it to your AI application: openClaw, Cursor, Claude, or any AI application
- Start working: AI calls the API according to the document. You approve commands in the dashboard.
Dual-port design:
9876(AI API): API Key authentication, for AI application access9877(Dashboard): Password authentication, for human management
| Approval Mode (Default) | Auto-execute Mode | |
|---|---|---|
| Security | AI commands require manual approval | Commands execute immediately |
| Best for | Getting started, less trust in AI | Familiar workflow, trusted AI |
| Switch via | Dashboard → Settings | Dashboard → Settings |
- Overview: Server resource dashboard with activity trend charts
- Approval Center: Review AI-submitted commands + security alert notifications
- Terminal: Execute commands manually
- File Manager: Browse and edit files
- History: Timeline of all operations
- Settings: Mode switching, API Key management, security configuration
- Skill Gen: One-click AI integration document generation
- Backend: Node.js + Express
- Frontend: React + TypeScript + Vite + TailwindCSS
- Process Management: PM2
Config file is located at ~/.secure-deployer/config.json. You can modify it through the dashboard or edit directly:
{
"apiPort": 9876,
"dashPort": 9877,
"executionMode": "approval",
"commandBlacklist": ["rm -rf /", "shutdown", "reboot", "dd if=", "mkfs"],
"rateLimit": { "windowMs": 60000, "max": 60 }
}- Use a strong password for the dashboard
- Restrict dashboard port (9877) access via firewall
- Start with approval mode; switch to auto-execute only after gaining confidence
- Review operation history regularly
- Consider setting up HTTPS via an nginx reverse proxy
CC BY-NC 4.0 — Free to use and modify with attribution. Not for commercial use.