Where things are
- Home screen: your servers and their clusters. Tap the server card for its Settings page: server details (name, address, version, API versions, core revision, a DEV chip on development servers), Appearance, Security, Safety, About and Forget this server.
- More, Server: the same server page, the License row, Notifications and Paired devices.
| Setting | Options |
|---|---|
| Appearance | Dark, Light or System (follows the device live). |
| App lock | Face ID, Touch ID or your passcode when the app opens. Lock after: Immediately, 10 seconds, 1 minute or 5 minutes. |
| Ask for Face ID before changes | Or your passcode, before a change is sent. PROD clusters always ask. |
| Safety | Lists the server's clusters with PROD and read-only flags. They are set on the server (What the mobile client can and cannot do), not in the app. |
| Sign-ins | Shown when the server tells it: Per device or Shared by all devices, with a note when your plan does not allow the configured mode. |
| AI agents | Your consent per agent, revocable (next release). |
Signing in to a cluster
Clusters that use exec plugins or tokens just work. Clusters that sign in with OIDC or OpenShift show “Sign-in required” and a Sign in button: OIDC offers a device code or the browser (the phone opens the identity provider and hands the result to the server); OpenShift offers the browser, a username and password, or a pasted token. The password and token are used once and never stored by the app or server; the server keeps the refresh token. More shows the cluster's auth state, when its credential expires and Refresh auth status.
Clusters that are turned off (next release)
On a server with per-device sign-ins, a cluster that is one shared identity (static token, certificate, exec plugin) is listed greyed, with “Turned off: shared sign-in” and an info icon. Tapping it shows the server's full reason; it is never connected, and not counted in totals. With per-device sign-ins the sign-in sheet starts with “This server gives each device its own sign-in.” and every device starts signed out of its OIDC and OpenShift clusters. Details for server owners: Credentials and sign-ins. An older app against such a server lists the cluster as normal and shows the server's message when you tap it.
The license screen
The app opens it by itself when the server is Unlicensed or Locked, and from More, Server, License. It shows the state, plan, devices used of the limit, valid-until, the reason during Grace and the install id (copy). Grace and Locked also put a banner on the home card and cluster pages. The app shows no prices or purchase link: “A license is required, see kubyl.dev.”
- Activate with a code: type the activation code from your customer portal.
- Check for renewal: asks the licensing service for a new lease now.
- Release this install: moves the license to another server; confirm, and the next activation code is shown once. See Server license.
- The phone does the talking to the licensing service and hands the signed lease to the server, so this also works for a server with no internet access (air-gapped). The app takes no license file or link from the system. It proves device authenticity with Apple App Attest or Google Play Integrity when it can.
Before it shows any cluster the app asks the server to prove its license (a challenge it checks against the lease; every six hours, on resume and after a license call). If the proof fails the server shows as Not verified: no clusters, and the License page opens. A server too old to prove it is refused the same way: update it.
Notifications
See Push notifications.
Paired devices
Lists every device paired with the server; revoking asks first. See Pairing and servers.