Self-hosted Private by default Agent-ready

Turn small apps into trusted team tools.

Your team and coding agents create dashboards, prototypes, reports, and utilities. Tinkercloud gives each one a stable private URL, built-in access, and useful app capabilities—on one VPS you control.

Runs on your VPSOpen source on GitHub
tinker deploy .--allow '*@example.com'

How it works

From folder to secure webapp.

  1. 1

    Build your app

    Build any static site or web app. Export the files to a folder.

  2. 2

    Deploy to your VPS

    Run one Tinker command with your allow list. Tinkercloud safely activates the release on your VPS.

  3. 3

    Share the private URL

    The URL is on the open internet, but only your allowed team can open it.

Ready when your app is

The small essentials.
Already inside.

Auth

Email sign-in and app-scoped access.

Storage

App-scoped JSON key-value storage.

Live sockets

Ephemeral realtime updates.

Client SDK

One small, typed browser SDK.

Blob storage

Private, app-scoped files with bounded uploads.

AI-ready

A private home for the useful tools your coding agents create.

One Tinkercloud SDK

Useful from line one.

Identity, storage, and live updates share one typed, app-scoped API. No app ID or long-lived secret in your browser code.

TypeScript
1import { tinker } from "@tinkercloud/sdk";2const viewer = await tinker.user.current();3await tinker.kv.set("hello", { from: viewer.identity.email });4tinker.live.onKvChange({ prefix: "hello" }, console.log);

How to host it

One VPS. One Tinkercloud.

One VPS is a deliberate constraint, not a shortcut. The gateway, access policy, releases, and app data stay together in one small system an operator can understand, secure, and recover—without assembling Docker, a reverse proxy, or a separate database service. The README walks through setup, DNS, and your first private deployment.

Read the README