Introduction
Web.Casa is an AI-native, open-source server management panel built on Caddy. Tell the AI what you need — deploy an app, diagnose an error, create a reverse proxy — and it handles the rest. For everything else, a modern web UI puts full control at your fingertips: reverse proxy, containers, databases, backups, and more.
- License: MIT
- Default port:
39921 - Database: SQLite (WAL mode) at
/var/lib/webcasa/webcasa.db
Site Types
Section titled “Site Types”Web.Casa supports four site types through Caddy:
| Type | Description |
|---|---|
| Reverse Proxy | Forward traffic to upstream backends with load balancing, custom headers, and IP access rules |
| 301/302 Redirect | Permanent or temporary URL redirections |
| Static Site | Serve static files directly from disk |
| PHP / FastCGI | Serve PHP applications via FastCGI with managed PHP environments |
DNS Challenge Providers
Section titled “DNS Challenge Providers”For wildcard certificates and DNS-based ACME validation, the following providers are supported:
- Cloudflare
- Alibaba Cloud DNS (AliDNS)
- Tencent Cloud DNS (DNSPod)
- Amazon Route53
AI & MCP Integration
Section titled “AI & MCP Integration”Web.Casa includes a built-in AI assistant with 73 tools covering every subsystem, and an MCP server exposing 44 tools for external AI IDEs. Six LLM providers are natively supported:
- OpenAI (GPT-4o, o3-mini)
- Anthropic (Claude Sonnet 4, Claude Haiku 4)
- Google Gemini (Gemini 2.0 Flash, Gemini 2.5 Pro)
- DeepSeek (deepseek-chat, deepseek-reasoner)
- Moonshot / Kimi (moonshot-v1-8k/32k/128k)
- Zhipu / 智谱 (GLM-4-Flash, GLM-4)
MCP-compatible IDEs — Cursor, Windsurf, Claude Code — can manage your server directly from the editor. See AI Use Cases for real-world examples.
Plugins
Section titled “Plugins”Web.Casa ships with 12 built-in plugins that you can enable based on your needs:
| Plugin | What It Does |
|---|---|
| Docker | Container lifecycle, Compose stacks, images, networks, volumes |
| Deploy | Git-based deployment with framework detection and webhook triggers |
| AI | Multi-provider LLM chat, error diagnosis, Compose generation, system inspection, self-healing |
| Database | MySQL, PostgreSQL, MariaDB, Redis management with web SQL console |
| Monitoring | Real-time CPU / memory / disk / network metrics via WebSocket, threshold alerts |
| Backup | Kopia-based backups to local, S3, WebDAV, or SFTP with scheduling |
| App Store | One-click Docker app installation (Runtipi-compatible) |
| File Manager | File browser, online editor, and xterm.js web terminal with multi-tab support |
| Firewall | Firewalld zone, port, service, and rich rule management |
| PHP | PHP-FPM and FrankenPHP runtime management with extension catalog |
| MCP Server | Model Context Protocol endpoint for AI IDE integration with API token auth |
| Cron Jobs | Scheduled task management with shell execution, logging, and manual triggers |
Security
Section titled “Security”- Multi-user RBAC with Admin and Viewer roles
- ALTCHA Proof-of-Work challenge on the login page to prevent brute-force attacks
- Login rate limiting with exponential backoff (5 attempts / 15 min)
- JWT authentication with TOTP two-factor authentication and recovery codes
- AES-GCM encryption for all stored credentials and API keys
- Audit logging for all user and system actions
- API tokens (
wc_prefixed) with scope-based permissions and expiration tracking - Caddyfile injection prevention — sanitization of DNS credentials and custom directives
- Config export/import in JSON format
Tech Stack
Section titled “Tech Stack”| Layer | Technology |
|---|---|
| Backend | Go 1.26+, Gin, GORM, SQLite (WAL mode) |
| Frontend | React 19, Vite 7, Radix UI Themes 3, Tailwind CSS v4, Zustand 5 |
| Reverse Proxy | Caddy (managed as subprocess via Admin API) |
Ready to install? Check the System Requirements first, then head to the Installation guide to get your panel running in minutes.