Every panel feature you'd expect, plus what you wished it had.

Operate

Multi-tenant from row one
Every tenant has its own org, members, nodes, servers, billing.
Outbound agent
No public IP needed on your machines. Works behind NAT and CGNAT.
One-command install
Debian 11/12 and Ubuntu 22.04/24.04. Installs Docker if absent.
Community egg imports
PTDL_v1 and PTDL_v2 JSON. Your existing community eggs work day one.

Run

Live console
xterm.js bridged over multiplexed WebSocket.
File manager + CodeMirror
Edit server.properties without SFTP. Or use SFTP.
Subusers & per-server permissions
Fine-grained scopes per server, per friend.
Scheduler
Cron tasks (power, command, backup) with time offsets and continue-on-failure.
Backups
Local or S3 (we ship MinIO support). Lock to prevent accidental deletion.

Observe

Live metrics
Sub-5s sampling fan-out to the focused dashboard.
History you can sell
Every host + every container, retained per plan.
Per-server activity log
Every action with via_impersonation flag.
Operator audit log
Every staff action against your tenant, tamper-evident.

Secure

Argon2id everywhere
Passwords, API keys, node credentials.
Three-layer tenant isolation
Repo + session-var + cross-tenant E2E suite.
Signed agent binaries
Cosign or minisign verification before install.
Mandatory MFA
TOTP + SMS at launch; passkeys land in phase 4.