# MeshCentral — Self-Hosted Remote Device Management Platform

> MeshCentral is a full-featured, self-hosted remote monitoring and management platform. It provides remote desktop, terminal, file transfer, and device management for Windows, Linux, and macOS through a web browser.

## Install

Save as a script file and run:

# MeshCentral — Self-Hosted Remote Device Management Platform

## Quick Use
```bash
# Install Node.js 18+, then:
npm install meshcentral
node node_modules/meshcentral
# Open https://localhost in a browser to create your admin account
```

## Introduction
MeshCentral provides a self-hosted alternative to commercial remote desktop tools like TeamViewer or AnyDesk. It lets you manage devices across your network or the internet with remote desktop, terminal access, and file transfers — all from a web browser with no client-side plugins.

## What MeshCentral Does
- Connects to remote devices with desktop sharing, keyboard/mouse control, and clipboard sync
- Provides web-based terminal access to remote machines without SSH configuration
- Transfers files between the server and managed devices through the browser
- Groups devices into mesh networks with user permissions and access policies
- Supports Intel AMT for hardware-level remote power control and KVM

## Architecture Overview
MeshCentral is a Node.js application that stores data in NeDB (file-based) or MongoDB. Managed devices run a small agent binary that maintains a WebSocket connection to the server. Remote desktop sessions use optimized RDP-like encoding transmitted over WebSocket, enabling browser-based access without VNC or RDP client software. The server can relay traffic for devices behind NATs or operate in peer-to-peer mode for LAN scenarios. Multi-factor authentication and HTTPS are built in.

## Self-Hosting & Configuration
- Install with npm and run as a Node.js process, or use the official Docker image
- Deploy agents to managed devices through the web UI with one-click downloads
- Configure device groups to organize machines by location, team, or function
- Enable two-factor authentication and IP restrictions for admin access
- Switch from the embedded NeDB to MongoDB for deployments managing hundreds of devices

## Key Features
- HTML5-based remote desktop that works in any modern browser
- Agent support for Windows, Linux, macOS, and FreeBSD
- Intel AMT integration for out-of-band hardware management
- Multi-user access control with fine-grained device permissions
- Session recording for auditing and compliance

## Comparison with Similar Tools
- **TeamViewer** — commercial remote access; MeshCentral is free and self-hosted with no license limits
- **RustDesk** — open-source remote desktop focused on P2P connections; MeshCentral adds device management, grouping, and AMT support
- **Apache Guacamole** — clientless remote desktop gateway for existing RDP/VNC/SSH servers; MeshCentral includes its own agent for managed access
- **Cockpit** — web-based Linux server management; MeshCentral is cross-platform and focused on remote desktop and fleet management
- **Tailscale** — mesh VPN for network connectivity; MeshCentral provides the remote desktop and management layer on top of connectivity

## FAQ
**Q: Do I need to install an agent on every device?**
A: Yes, for full remote desktop and management. MeshCentral also supports agentless connections to devices with Intel AMT or existing RDP/VNC services.

**Q: Can MeshCentral work through firewalls and NATs?**
A: Yes. Agents maintain outbound WebSocket connections to the server, so no inbound ports are needed on managed devices.

**Q: How many devices can a single server manage?**
A: A modest server can handle hundreds of connected agents. For larger deployments, use MongoDB and increase Node.js memory limits.

**Q: Is traffic between the server and agents encrypted?**
A: Yes. All communication uses TLS-encrypted WebSocket connections. The agent verifies the server certificate to prevent man-in-the-middle attacks.

## Sources
- https://github.com/Ylianst/MeshCentral
- https://meshcentral.com/info/

---
Source: https://tokrepo.com/en/workflows/ff3b5f92-4125-11f1-9bc6-00163e2b0d79
Author: Script Depot