MeshRMM is remote monitoring and management in one Linux program: the website, sign-in, device connections, NAT traversal and Agent updates. Install it on your own machine. It doesn't depend on any hosted service.
$ docker run -d --name meshrmm \
-p 443:443 -p 3478:3478/udp \
-p 49160-49200:49160-49200/udp \
-v meshrmm:/var/lib/meshrmm \
-e MESHRMM_PUBLIC_URL=https://rmm.example.com \
-e MESHRMM_TLS__CONTACT_EMAIL=you@example.com \
ghcr.io/gccody/meshrmm-server
$ docker logs meshrmm
INFO starting the MeshRMM server
INFO database ready backend=Sqlite
WARN no accounts exist yet; open this link to
create the first administrator
link=https://rmm.example.com/setup#token=…Technicians and endpoints connect only to your server. Remote sessions then run directly between the viewer and the Agent, and fall back to your server's own relay when a network won't let them meet.
SQLite or PostgreSQL, plus a data directory for files and keys
Screen, input, audio and files travel peer to peer, encrypted end to end by WebRTC. Your relay carries them only when a direct path fails.
The server contacts only what you set up: your identity provider and mail server if you use them, and Let's Encrypt if you choose automatic certificates.
The endpoint encodes its screen as H.265 or H.264, on its GPU when it has one, and sends it straight to the viewer. Pick a quality preset, from a 1 Mbps data saver to 12 Mbps, and switch Windows viewers to 4:4:4 color for crisp text when both GPUs support it. Clipboard (text, rich text, images and files), file transfer, chat and system audio come with every session.
Background mode opens a private desktop on a Windows endpoint, with its own taskbar, Command Prompt, PowerShell, Services and File Explorer, while the user keeps working. It's experimental.
The toolbox keeps PowerShell, Command Prompt and zsh scripts and a library of files. Run a script from the website or during a session, as the signed-in user or as SYSTEM (root on a Mac), and send files to the device.
See which devices are online, with a recent picture of each screen. Add a Windows device with a downloaded installer, or a Mac with one Terminal command.
Block the user's keyboard and mouse, black out the screens with your own message while you work, and lock the computer or sign the user out when you leave.
Optionally ask the user to approve each connection, notify them when a session starts, and show a banner and border while it's live.
Restart a computer from the viewer, into Safe Mode with Networking if you need to. The viewer waits, and the session picks up again when the Agent is back.
When a Windows computer has no monitor connected, the Agent adds a virtual one for the session, at the size you choose.
Accounts live in your database. Connect your identity provider if you have one; you don't need one.
You need a Linux machine with a DNS name, TCP port 443, and UDP ports 3478 and 49160–49200 open to the internet.
Run the Docker image as shown above, or unpack a release tarball and run
sudo ./install.sh. Then edit /etc/meshrmm/server.toml and
start it with systemctl enable --now meshrmm-server.
On its first start the server writes a one-time link to its log. Open it to name your instance and create the first administrator.
Choose Add device on the Devices page. Download the Windows installer, or copy the Terminal command for a Mac.