Kubyl Server

The server your phone talks to.

Kubyl Server runs on a machine you control. It holds your kubeconfigs and credentials, enforces read-only and PROD rules, and serves your phones over gRPC with certificate pinning. The desktop app does not need it.

Pricing Install guide

Container image

One OCI image with a console UI and a web UI. Run it with Docker, Podman, Kubernetes or systemd.

Credentials stay put

Kubeconfigs, exec plugins and tokens never reach the phone. Clients only pair.

Private network first

Built for Tailscale or WireGuard, not the public internet. Self-signed certificate, pinned at pairing.

Revocable devices

Revoking a device closes its open streams. Tokens rotate with reuse detection.

How to pair a server

The app talks to your own Kubyl Server. Nothing about your clusters is stored on kubyl.dev.

1
Run the Kubyl Server
Install the server next to your clusters. A license is required, see pricing below.
2
Open the app and scan
The server's console shows a one-time pairing QR code. Scan it from Kubyl Mobile.
3
Done
Your phone is now a paired device. Revoke it from the app or the server at any time.

Pricing

The app is free in the stores. A license for the Kubyl Server is a subscription that covers your paired devices. No VAT is charged (small-business exemption, section 19 UStG). There is no trial.

Personal

€9.99per month

or €99.99 per year

For one person running their own clusters.

Up to 3 paired devices
All app features
Cancel at any time

Team

€29.99per month

or €299.99 per year

For platform teams sharing one server.

Unlimited paired devices
All app features
Cancel at any time

A license is required to use the Kubyl Server with the app. The desktop app stays free.