vibe-deploy ⚡

Tell your AI to ship your app. It goes live on your own server — with HTTPS — in one message.

You built an app with Cursor, Claude, Windsurf, or Antigravity in five minutes. Then you hit the wall everyone hits: how do I actually put this online? SSH, Docker, nginx, SSL certificates, firewall rules — two hours of DevOps for an app you built in five minutes.

vibe-deploy hands that whole job to your AI. Connect it once to your own cheap VPS (DigitalOcean, Hetzner, Vultr — any Linux box), then just say:

"Deploy this to myapp.mydomain.com"

…and your agent does the rest: containerizes the app, ships it to your server, sets up the web server, and turns on HTTPS. You get back a live URL.

Why your own server?

No per-seat SaaS bill, no platform lock-in, no surprise pricing. A $5/month VPS runs dozens of your projects. You own it.

What it handles for you

• Any stack — static sites, Node, Python, Go (it figures out which and writes the Dockerfile for you).
• HTTPS automatically — real Let's Encrypt certificate, no config.
• Multiple apps on one server — each on its own subdomain.
• Status & logs — ask your agent "is myapp up?" or "show me the logs."

Quick start

1. Install: npm install -g @cgnguyen/vibe-deploy

2. Add it to your AI tool (Claude Code / Cursor / Windsurf / Antigravity) as an MCP server, with your VPS details:

   DEPLOY_MCP_VPS_HOST=your.server.ip
   DEPLOY_MCP_SSH_KEY=~/.ssh/id_ed25519
   DEPLOY_MCP_CERTBOT_EMAIL=you@example.com
   

3. Point your domain's DNS at your server, then tell your agent: "Deploy this app to app.mydomain.com."

That's it. The first deploy takes a minute; after that it's seconds.

Security

vibe-deploy verifies your server's SSH host key (no blind trust — a man-in-the-middle can't impersonate your VPS). On first connect it refuses and prints the server's fingerprint; verify it's really your server, then pin it:

DEPLOY_MCP_HOST_FINGERPRINT=SHA256:…   # the fingerprint it printed (recommended)

All inputs (domain, port) are strictly validated before any command runs, so a malicious or confused agent can't inject shell commands, traverse paths, or corrupt your nginx config. Your SSH key is read locally and never logged.

Free vs Pro

• Free — 1 server, 1 app: deploy, status, logs.
• Pro — multiple servers & apps, one-command rollback, env/secret management, scheduled redeploys.

Tools your agent gets

deploy_app · deployment_status · deployment_logs

---

Built by a senior backend engineer who got tired of watching people struggle to ship. For the technical design and the deploy internals, see SPEC.md.