Getting started

Install Work Cockpit from the Mac App Store and open it. The first launch asks you to create an account — that account lives on your Mac. There is no cloud sign-up, no email confirmation, and no password of yours on our servers.

Only the organisation details you type at that point ever reach us, and only if you later open a support ticket.

Adding servers

Servers › Add server. A server is a name, an address, and one or more ways in:

• SSH — terminal, file upload, metrics, patching, scheduled commands.
• VNC and RDP — a screen, for the machines that need one.

Credentials are stored in the macOS Keychain, never in the app’s own files. The first time you reach a host over SSH its key is pinned; if that key ever changes, the connection is refused rather than quietly accepted.

Free keeps up to five servers. The cap is on adding — an installation that is already over it keeps everything and is simply blocked from adding more.

Moving between machines

Settings › Backup & transfer writes one encrypted file with everything in it: servers, credentials, host-key pins, settings. Carry it to another Mac, import it there, and it is the same installation.

The file is sealed with a password you choose (Argon2id + XChaCha20-Poly1305) or to a certificate you hold. A wrong password and a tampered file fail the same way, with one message that does not say which — a file that told you which half was wrong would be a file that helps someone guess.

This is also how you get your fleet onto an iPhone: export on the desktop, import on the phone. Mobile starts empty on purpose.

Team server Max

On the Max plan your Mac can serve its fleet to your colleagues. It is the part of this product that has no equivalent elsewhere: teams normally get this by pushing their infrastructure through a vendor’s cloud. Here the server is your machine, and we are not in the path at all.

1. Team › Members — create a user for the person.
2. Team › Team server — set the address colleagues should connect to, then Start.
3. Grant — pick the servers that person may reach, and whether they get read or read + write.
4. Invite — copy the four lines it gives you and send them however you normally talk.

About the port

The default is 8443, not 443. A sandboxed Mac app is not allowed to bind a port below 1024 — that needs administrator rights no App Store app has. If you want 443 reachable from outside, forward 443 to 8443 on your router; the connection is TLS either way.

Read and write

Read shows the server, its metrics and its logs. Write also opens sessions, uploads files and runs commands.

Revoking access

Revoke a device and it stops working the next time it connects. It does not depend on the person cooperating: every sync stamps a 14-day expiry, so a machine that cannot reach your Cockpit drops the servers you gave it and keeps only its own.

Joining a team

If a colleague runs the team server, you do not need a paid plan and you do not need a seat. Install Work Cockpit from the App Store like everyone else — there is no separate build. On the sign-in screen choose Connect to a team server instead of registering, and paste the four lines they sent you:

Address:     ops.example.com
Port:        8443
Invite code: ABCD-EFGH-JKMN
Fingerprint: 0b30557a9fc4e90e…

Add the username and password they created for you and press Connect. The app enrols, makes that username and password your local sign-in, and pulls down the servers and credentials you were granted — there is nothing to export and nothing to import. The transfer is encrypted end to end between the two machines.

The invite works once. The fingerprint is what stops someone else answering in your colleague’s place, and the code is what stops a stranger enrolling — neither is much use without the other. From then on you sign in with that same username and password, even with the team server unreachable.

Servers you added yourself stay yours. Leaving the team removes only what the team gave you.

What leaves your machine

Short version: your infrastructure does not.

• Never sent: server addresses, hostnames, SSH keys, passwords, terminal output, metrics, logs.
• No cloud channel between installations. Two copies of this app do not talk through us — a team connects directly to the machine serving it.
• Sent, if you register: the organisation details you type. Nothing else.
• Sent, if you open a ticket: the subject and description you write, plus that organisation name. We will never ask for a credential, and a ticket containing one is deleted rather than read.

Credentials do travel to the teammates you grant them to — that is what makes the team feature work, and it happens only because you chose that person and those servers. They go from your machine to theirs, directly. We never hold them and never see them.

Plans & billing

Everything is sold through Apple. There is no card form on this site, no invoice from us, and no licence key to keep safe — your plan follows your Apple ID, so a second Mac restores it rather than buying it again.

Both paid plans start with a 14-day free trial. Yearly billing saves 23%. Cancel any time from System Settings › Apple ID › Subscriptions.

If a subscription lapses, nothing is deleted. The app keeps every server you have and simply stops letting you add more, exactly as the Free tier does.

Support tickets

Pro and Max include one ticket per calendar month. Free includes none. Extra tickets are $5 each or five for $25 — the same price per ticket, bought in one go rather than five — and they never expire.

Open one from Support in the app. A ticket carries a subject and a description and nothing else; if we cannot answer without knowing more, we will ask you a question, not ask for access.