Home
A Mihomo management panel for Linux proxy servers
m-ui is an open-source web control panel for Mihomo. Its layout and workflow are inspired by 3x-ui, but its configuration model follows Mihomo's native YAML format rather than Xray JSON.
The panel lets you manage listeners, clients, Mihomo outbounds, routing rules, subscriptions, WARP, traffic statistics, and multiple peer panels from one browser interface.
Important
Use m-ui only on servers and networks that you own or are authorized to administer. Proxy software must be used in accordance with local law, provider terms, and the policies of the services you access.
- Responsive web panel with Chinese and English interfaces
- Dashboard with CPU, memory, disk, uptime, traffic, connection, and Mihomo status information
- Native Mihomo YAML generation and validation
- Start, stop, restart, test, and inspect the Mihomo core
- Mihomo release switching from the official MetaCubeX GitHub releases
- GeoIP, GeoSite, and MetaDB updates
- Configuration preview, download, backup, and restore
- Mixed, HTTP, SOCKS, Shadowsocks, Snell, VMess, VLESS, Trojan, Hysteria2, TUIC, AnyTLS, Mieru, Sudoku, ShadowQuic, TrustTunnel, and Hysteria2 Realm listeners
- Per-client credentials, traffic quotas, expiry dates, reset schedules, enable/disable state, and online information
- Client share links, QR codes, and subscription tokens
- Protocol-aware TLS, Reality, ShadowTLS, RestTLS, TLSMirror, XHTTP, KCP, and obfuscation fields
- Import and export of individual inbounds
- Basics page for routing mode, IP preference, IPv6, concurrent TCP dialing, unified delay, traffic sampling, and logs
- Outbound proxy nodes and policy groups
- YAML editor and Mihomo sharing-link conversion for outbound import
- Ordered Routing Rules with Mihomo rule types and targets
- Cloudflare WARP account registration and WireGuard outbound generation
- Browser subscription page at a tokenized URL
- Base64 node lists and Mihomo / Clash YAML subscriptions
- Optional Sing-box, V2Box, V2RayNG, Shadowrocket, Surge, Surfboard, Loon, Quantumult X, Stash, Egern, and related conversions
- Per-Username subscription tokens
- Optional dedicated subscription service port
- Cross-panel subscription aggregation through the peer network
- Peer-to-peer panel network with no master panel
- 16–32 character lowercase alphanumeric pairing tokens
- Signed Ed25519 node identities and automatic member discovery
- Encrypted inbound synchronization between trusted panels
- Cached cross-panel subscription aggregation
The one-line installer targets Linux systems using systemd or OpenRC. It has package-manager support for the following families:
| Family | Examples | Service manager |
|---|---|---|
| Debian | Debian, Ubuntu, Linux Mint, Armbian | systemd |
| Red Hat | Fedora, RHEL, CentOS, AlmaLinux, Rocky, Oracle Linux, Amazon Linux | systemd |
| Arch | Arch Linux, Manjaro, Parch Linux | systemd |
| SUSE | openSUSE, SLES | systemd |
| Alpine | Alpine Linux | OpenRC |
The application can also be built and run on Windows for development, but the published installer and Release assets are Linux-only.
| Architecture | Release asset |
|---|---|
| Intel/AMD 32-bit | m-ui-linux-386.tar.gz |
| Intel/AMD 64-bit | m-ui-linux-amd64.tar.gz |
| ARM 64-bit | m-ui-linux-arm64.tar.gz |
| ARMv5 | m-ui-linux-armv5.tar.gz |
| ARMv6 | m-ui-linux-armv6.tar.gz |
| ARMv7 | m-ui-linux-armv7.tar.gz |
| IBM Z | m-ui-linux-s390x.tar.gz |
- Installation
- Panel Configuration
- Inbounds and Clients
- Mihomo Settings
- Subscriptions
- Multi-control and Cross-panel Features
- Cloudflare WARP
- Maintenance and Management
- API Overview
- Development and Releases
- Common Questions and Problems
m-ui intentionally follows Mihomo instead of attempting to reproduce Xray behavior:
- The generated core configuration is YAML.
- Mihomo's
proxies,proxy-groups, andrulesare managed as separate concepts. - Mihomo does not expose every Xray routing primitive; for example, BitTorrent protocol matching is not available and its UI control is disabled.
- WARP is represented as a Mihomo WireGuard outbound. It does not install a system-wide WARP client or change the server's default route.
- NordVPN integration is not included.
Before exposing a panel publicly, change generated credentials if necessary, use a non-obvious panel path, configure HTTPS, restrict firewall access to the required panel/subscription/inbound ports, and keep m-ui and Mihomo updated. Never publish data/state.json, data/multi-control.json, certificates, private keys, or pairing tokens.