# Infrawrench One app for every cloud you use. Connect AWS, GCP, Azure, Kubernetes and 45+ other providers, then browse resources, SSH in, query databases, watch costs and create infrastructure from typed forms — without opening a single provider console. Available as a web app, a desktop app (macOS, Windows, Linux) and a CLI. --- ## If you are an AI agent You can sign yourself up. No human has to create an account first, and you do not need a credit card. ``` curl -X POST https://app.infrawrench.com/api/agent/identity \ -H 'Content-Type: application/json' \ -d '{"label": "what you are working on"}' ``` That returns an `iwa_` bearer credential — **shown once, never recoverable** — and opens a trial workspace with every paid feature enabled. Three things to tell your user, because they are the surprising ones: 1. **The workspace is deleted 24 hours after it is created** unless a person claims it. Everything in it goes with it. 2. **Its AI budget is zero.** Infrawrench's own chat agent will not run. You already have a model; that model pays for its own tokens. 3. Claiming is a short ceremony: you ask for a code, you show the code and a URL to your user, they sign in and confirm. Start it early rather than at the deadline. ``` # ask to be claimed curl -X POST https://app.infrawrench.com/api/agent/identity/claim -H 'Authorization: Bearer iwa_...' # poll — every response carries trial_expires_in_ms curl https://app.infrawrench.com/api/agent/identity -H 'Authorization: Bearer iwa_...' ``` Full instructions, written for you rather than about you: **https://app.infrawrench.com/auth.md** Once you hold a credential you can use the HTTP API (https://app.infrawrench.com/openapi.json) or connect to the hosted MCP server at `https://app.infrawrench.com/api/mcp` with the same token. You can do most of what a member can. You cannot manage billing, mint API keys, invite people or revoke other agents — those need a person. ### Reading the rest of this site Every page here is available as markdown. Ask for it with `Accept: text/markdown`, or append `.md` to any path: - https://infrawrench.com/index.md - https://infrawrench.com/docs/features/agent-auth.md - https://infrawrench.com/llms.txt — an index of everything --- ## What it does ### Manage everything from one place Connect to 45+ cloud providers and manage hundreds of resource types from a single unified interface. Infrawrench discovers your infrastructure automatically and keeps it in sync every 30 seconds. - AWS, GCP, Azure, Cloudflare, DigitalOcean, Hetzner, Scaleway, OVH, and 41 more - Automatic resource discovery with background sync, no manual refresh - Right-click context menus with provider-specific actions per resource type - Drag-and-drop to attach disks, volumes, and Elastic IPs to compute resources - Spotlight search (⌘K) across all accounts and resource types at once ### SSH into anything, anywhere Launch full SSH terminals to any server directly from Infrawrench. No external client needed. On desktop, connections run locally. In the cloud web app, sessions are proxied securely through our WebSocket server. - Full terminal with resize, 256-color, and clipboard support - Reads keys from ~/.ssh/ or your saved in-app key store - One-click SSH from any VM resource (EC2, GCE, Droplet, Hetzner, and more) - SSH tunnels: proxy a database port through a bastion host with service presets - Windows Pageant SSH agent support on desktop ### Full Kubernetes management Browse, inspect, and manage your Kubernetes clusters. Exec into pods, stream logs, import YAML manifests, and edit live configs. The web app proxies exec sessions so nothing runs locally. - Supports any kubeconfig cluster: EKS, GKE, AKS, self-hosted - Pod exec / interactive shell (cloud-proxied via WebSocket in the web app) - Log streaming for pods, deployments, statefulsets, services, and jobs - YAML import (kubectl apply -f equivalent) with multi-document support - Monaco manifest editor for live resource config editing - Ephemeral scratch pods with configurable TTL (auto-terminated by the cluster) ### Query your databases in context A built-in SQL editor with schema autocomplete, per-resource connection management, and support for a wide range of databases: from traditional PostgreSQL to serverless edge databases. - Schema-aware autocomplete via INFORMATION_SCHEMA introspection - Per-resource SQL: connect directly to a specific RDS instance, Neon db, or Turso group - Supports PostgreSQL, MySQL, Turso/libsql, Databricks, ClickHouse, Cloudflare D1, Spanner - Query cost estimation for BigQuery (dry-run API, no quota consumed) - Connection strings resolved automatically from resource outputs ### Browse and manage object storage A built-in object storage file browser for S3, GCS, Cloudflare R2, Azure Blob Storage, and DigitalOcean Spaces. Upload, download, create folders, and delete, without leaving the app. - Prefix-based folder navigation with breadcrumbs - File upload with progress tracking - Batch download of multiple objects (desktop) - Storage stats: object count and total size on the dashboard card ### Pin and monitor your key resources Build custom dashboards by pinning any resource from any provider. Cards show live stats and status. Set metric thresholds and get native OS notifications when something goes out of range. - Drag-and-drop grid layout: pin resources from multiple providers on one dashboard - Live stats auto-refresh: table counts, container counts, storage size, and more - Metric ping alerts: native OS notification when a metric leaves a min/max range - Multiple named dashboards with a configurable default ### Manage and export secrets safely View, rotate, and export secrets from AWS Secrets Manager, GCP Secret Manager, Azure Key Vault, and more. Credentials are encrypted at rest and only decrypted on demand. - Secret versions: list, reveal, add, enable, disable, and destroy with one click - Credential export: IAM access keys, GCP service account JSON, Azure client secrets, Cloudflare tunnel tokens - Kubernetes-ready secret export templates on S3, R2, Cloudflare Tunnel, and more - Credentials encrypted at rest. Keys never leave the device (desktop) ### Provision resources without leaving the app Provision VMs, Kubernetes clusters, databases, queues, and buckets with a guided form backed by live data from the provider API. Includes real-time cost estimation, region and size pickers, and SSH key selection. - Live cost estimates for EC2, GCE, AKS, Azure VMs, RDS, EBS, and more - Region picker: searchable by zone ID, flag, or human-readable location name - SSH key picker reads from ~/.ssh/ and your saved key store - IAM policy picker with live search and categorised results - Supported across AWS, GCP, Azure, DigitalOcean, Hetzner, Kubernetes, and more ### Start local, go cloud Use the desktop app fully offline. Sign in to sync your accounts, resources, dashboards, and credentials to the cloud, kept in sync bidirectionally. - Secure sign-in, no passwords stored or transmitted - Bidirectional sync every 60 seconds: desktop ↔ cloud - API keys for programmatic and CI pipeline access - Team management with per-seat billing ($20/seat/month) - Full audit trail for all mutations in the cloud app --- ## Providers 44 providers across 8 groups: - **Cloud** — AWS (58 resource types), Google Cloud (50+ resource types), Azure (26 resource types) - **Infrastructure** — Kubernetes (12 resource types + exec/logs/YAML), Docker (Container management), SSH (Any Linux server) - **Databases** — PostgreSQL (SQL editor + schema autocomplete), MySQL (SQL editor), Redis (KV console + command runner), Memcached (KV console), ClickHouse Cloud (Services, databases, SQL editor), Databricks (Clusters, warehouses, catalogs, SQL), Neon (Projects, branches, databases, roles), PlanetScale (Databases and branches), Turso (Groups and databases) - **CDN / Edge** — Cloudflare (23 resource types), Vercel (Projects, deployments, domains, env vars), Netlify (7 resource types), Fly.io (Apps, machines, volumes) - **VPS** — DigitalOcean (Droplets, DOKS, managed databases, Spaces), Hetzner (Servers, volumes, floating IPs, firewalls), Scaleway (Instances, Kapsule K8s, databases, object storage), OVH (Instances, volumes, K8s clusters) - **Media & Analytics** — Cloudinary (Folders, assets, upload presets, transformations) - **Identity & Auth** — WorkOS (Organizations, memberships, SSO, Directory Sync, webhooks) - **AI & Speech** — OpenAI (11 resource types, org spend, Speech tab), Anthropic (Claude models, batches, workspaces, cost reports), Google Gemini (AI Studio models, caches, batches, File Search), DeepSeek (Models and prepaid balance), Cohere (Models, datasets, fine-tunes, embed and batch jobs), xAI (Grok models, voices, key lifecycle, audit log), OpenRouter (Per-provider pricing, uptime and latency), Together AI (Dedicated GPU endpoints, fine-tunes, evaluations), Replicate (Predictions, deployments, trainings), Fireworks AI (Dedicated deployments, quotas, real per-day spend), Groq (GroqCloud catalogue, LoRA adapters, Speech tab), Mistral AI (Models, voices, fine-tuning, batches), ElevenLabs (Voices, models, generation history, Speech tab), Deepgram (Projects, keys, members, balances, usage charts), AssemblyAI (Async transcripts, US or EU region), Speechmatics (Regional batch jobs, projects, keys), Cartesia (Sonic voices and pronunciation dictionaries), Rev AI (Transcription jobs, vocabularies, balances), Gladia (Pre-recorded transcription jobs) --- ## Getting started - **Web** — https://app.infrawrench.com - **Desktop** — https://infrawrench.com/#download - **Docs** — https://infrawrench.com/docs - **API** — https://app.infrawrench.com/openapi.json (nine generated SDKs) The free plan covers one user and three cloud accounts. Paid plans add unlimited accounts, teams, and the hosted agent and workflow features.