The hostatlas CLI is a single static Go binary that gives you scripting-friendly access to everything the dashboard does. It runs on macOS, Linux, and Windows, with shell completion for bash, zsh, fish, and PowerShell.

Note

Two HostAtlas tools carry the binary name hostatlas. This is the desktop CLI — the one you install on your laptop to manage your fleet from the terminal. The Server CLI is a separate tool that runs on a server and executes recipes locally.

Install

macOS / Linux (Homebrew)

brew tap akyroslabs/hostatlas
brew install hostatlas

macOS / Linux (curl)

curl -fsSL https://install.hostatlas.app/cli/latest/hostatlas-$(uname -s | tr A-Z a-z)-$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/') \
  -o hostatlas \
  && chmod +x hostatlas \
  && sudo mv hostatlas /usr/local/bin/

Windows (PowerShell)

Invoke-WebRequest -Uri "https://install.hostatlas.app/cli/latest/hostatlas-windows-amd64.exe" `
  -OutFile "$env:USERPROFILE\hostatlas.exe"

From source

git clone git@github.com:akyroslabs/hostatlas-cli-tool.git
cd hostatlas-cli-tool
go build -o hostatlas ./cmd/hostatlas/
sudo mv hostatlas /usr/local/bin/

Direct downloads

Platform	File
macOS (Apple Silicon)	hostatlas-darwin-arm64
macOS (Intel)	hostatlas-darwin-amd64
Linux (x86_64)	hostatlas-linux-amd64
Linux (ARM64)	hostatlas-linux-arm64
Windows	hostatlas-windows-amd64.exe

The top-level https://install.hostatlas.app/cli/version.json carries the full list under binaries[] (filename, size, sha256, url) — useful when scripting a version-pinned install.

Update

Once installed, self-update from wherever it lives:

hostatlas update

First-run login

hostatlas login --url https://my.hostatlas.app --key ha_your_api_key

Get the key from Settings → API Keys in your HostAtlas dashboard. The CLI stores it at ~/.hostatlas/cli.json with mode 0600. Revoke the key anytime — the CLI will fail loudly on next use.

Commands

Core

Command	Description
hostatlas login	Configure API connection
hostatlas status	Infrastructure overview (servers, alerts, incidents, monitors)
hostatlas dashboard	Interactive live TUI dashboard
hostatlas update	Update the CLI to the latest release

Servers

Command	Description
hostatlas servers	List all servers with status and health score
hostatlas server [uuid]	Server detail with services and metrics
hostatlas server-add	Generate an install command for a new server
hostatlas restart [service] [server-uuid]	Restart a service remotely
hostatlas ssh [server-uuid]	Generate an SSH deep link (opens in the SSH Client)
hostatlas audit [server-uuid]	Run a 7-day service audit
hostatlas network [server-uuid] [target]	Network diagnostics (ping, traceroute, mtr, dig)

Docker containers

Command	Description
hostatlas containers	List all Docker containers across the fleet
hostatlas containers -s [server-uuid]	Filter by server
hostatlas container-action [uuid] [start|stop|restart]	Manage a container

Domains & SSL

Command	Description
hostatlas domains	List all domains with SSL status
hostatlas certs	List SSL certificates with expiry
hostatlas renew-cert [uuid]	Trigger a certificate renewal

Databases

Command	Description
hostatlas databases	List database servers (MySQL/PostgreSQL/Redis)
hostatlas database [server-uuid]	Database metrics and config detail

Monitoring & Alerts

Command	Description
hostatlas alerts	List active alert events
hostatlas ack [uuid]	Acknowledge a firing alert
hostatlas alert-rules	List configured alert rules
hostatlas incidents	List open incidents
hostatlas monitors	List uptime monitors
hostatlas heartbeats	List heartbeat monitors

Automation

Command	Description
hostatlas recipes	List available recipes / scripts
hostatlas run-recipe [recipe-uuid] [server-uuid]	Execute a recipe on a server
hostatlas cron-jobs	List cron jobs
hostatlas cron-jobs -s [server-uuid]	Filter cron jobs by server
hostatlas maintenance	List maintenance windows
hostatlas maintenance-create [title] [start] [end]	Create a maintenance window

Backups

Command	Description
hostatlas backups [server-uuid]	List backup watch paths on a server
hostatlas backup-add [server-uuid] [path]	Add a backup path to monitor
hostatlas backup-remove [server-uuid] [path]	Remove a backup path
hostatlas offsite-backups	List offsite backups
hostatlas offsite-restore [backup-uuid] [server-uuid]	Trigger an offsite restore
hostatlas offsite-key	Show encryption key info

Infrastructure

Command	Description
hostatlas config-diffs	List recent configuration changes
hostatlas queues	List queue monitoring data (from queue-monitor)
hostatlas deploys	List recent deployments
hostatlas export [servers|domains|incidents|events]	Export data as JSON

Security

Command	Description
hostatlas attack [server-uuid]	Check Attack Mode status
hostatlas attack [server-uuid] --on	Activate Attack Mode
hostatlas attack [server-uuid] --off	Deactivate Attack Mode

Onboarding

Command	Description
hostatlas onboard	Bulk-install the HostAtlas agent from ~/.ssh/config + /etc/hosts (see below)

Interactive dashboard

hostatlas dashboard opens a full-screen TUI with live-updating data:

• Overview tab: KPI cards (servers / alerts / incidents / monitors), offline servers, firing alerts
• Servers tab: All servers with health scores and status
• Alerts tab: Active alert events with severity and target

Keyboard shortcuts: 1-3 switch tabs, r refresh, q quit. Auto-refreshes every 10 seconds.

Bulk onboarding (hostatlas onboard)

Reads ~/.ssh/config and /etc/hosts as two independent import sources, presents a checkbox picker of usable hosts, then SSHes to each selected host via the local ssh binary and installs the agent. Every host gets a fresh install key minted from the platform — one per server, revocable individually.

• Honours your IdentityFile, ProxyJump, ControlMaster, and ssh-agent — nothing about SSH is re-implemented
• Auto-skips wildcards + github.com / gitlab.com / bitbucket.org from ssh_config; auto-skips loopback / multicast / link-local / broadcasthost from /etc/hosts
• Picker rows carry a [ssh] or [hosts] badge so the source is visible
• On alias collision ~/.ssh/config wins (its User / Port matter to ssh(1) at connect time)
• Parallel installs capped at 5 concurrent, live ✓/✗ per host, exit summary

Flags:

Flag	Purpose
--ssh-config <path>	Override the ssh_config path (default: ~/.ssh/config)
--hosts-file <path>	Override the hosts-file path (default: /etc/hosts)
--user <name>	Default SSH user for /etc/hosts entries (ssh_config entries keep their own User)
--no-ssh-config	Skip ~/.ssh/config
--no-hosts-file	Skip /etc/hosts
--yes	Skip the picker, install on every non-skipped host

Config file

~/.hostatlas/cli.json, mode 0600, directory 0700:

{
  "api_url": "https://my.hostatlas.app",
  "api_key": "ha_xxxxxxxxxxxxxxxxxxxx"
}

Shell completion

# Bash
hostatlas completion bash > /etc/bash_completion.d/hostatlas

# Zsh
hostatlas completion zsh > "${fpath[1]}/_hostatlas"

# Fish
hostatlas completion fish > ~/.config/fish/completions/hostatlas.fish

# PowerShell
hostatlas completion powershell > hostatlas.ps1

Security

• All API communication enforces TLS 1.3 minimum
• API keys authenticated via SHA-256 hash comparison server-side
• Config file: 0600; config directory: 0700
• No secrets logged or printed to stdout

Related

• MCP Server — same capabilities exposed to AI coding agents
• Server CLI — the CLI’s on-server counterpart for executing recipes
• SSH Client — desktop app the hostatlas ssh deep link opens