Features

Everything in the cockpit, in depth.

Fifteen surfaces, one native app. Each page shows what the surface does, what it deliberately doesn’t, and the platform caveats in plain text — because the app has to live up to these pages, not the other way round.

Download Muster See every screen

Agents

Run the fleet: orchestration, isolation, review, and the flows that tie tickets to PRs.

Agent orchestration 23 agent CLIs on one control surface, plus your own as a TOML file. Live status, a queue that runs worktree → agent → review, and a CLI over it all. Worktrees & diff review A worktree and branch per task, then hunk-by-hunk review, inline notes, update-from-base and Create PR — all local, all in one window. Automations Trigger → condition → action flows that turn an issue into a PR — with an idempotency ledger, loop guard, kill switch and rate limits, not hope. Integrations Seven trackers, both directions: import an issue as a task, push status back on every transition, comment and create without leaving. Self-hosted welcome, HTTPS enforced.

Data & servers

The databases and machines the work depends on, in the same window as the work.

Database studio Postgres, MySQL, SQLite, MongoDB and Redis in the binary: schema tree, EXPLAIN visualizer, typed row editing, native backup/restore, real TLS. SSH client Interactive terminal, dual-pane SFTP/rsync with drag-drop and resume, port forwards, a host monitor — and host-key rules that refuse what they don’t know. Remote execution Agents and terminals spawn on your remote host, in the repo root — and so do worktrees, diffs and PRs. Verified bootstrap, secrets that never persist, drops that don’t kill runs.

Safety & control

What an agent may touch, see and type — decided by you, enforced structurally.

MCP permissions Scoped capability grants over databases, tasks, hosts, diffs and issues — layered, narrowing-only, re-resolved per request, read-only until you say otherwise. Profiles Fully isolated identities via env redirection: own HOME, SSH keys, git identity, GitHub and AI-CLI logins per profile. Work and personal, never mixed. AI browser AI web apps in a pane beside your tasks, with a per-project catalogue. Each profile gets an isolated web session, so logins stay separate like the CLI ones. macOS. Licensing & offline $39 once per device, verified locally. Offline day to day, a daily check that never locks you out, signed updates with rollback, and your code never proxied.

Workflow

The daily surface: terminal, editor, and the daemon that keeps work alive.

Terminal GPU rendering, splits, saved layouts, regex global search and a command palette — with PTYs owned by a daemon, so sessions survive a closed window. Editor Syntax-highlighted editing for local files and remote files over SFTP, with regex find-and-replace, conflict-safe saves and one-click IDE handoff at the line. Daemon & CLI An opt-in daemon that holds agent sessions, PTYs and flows after you quit — plus the muster CLI that drives the running app and spawns work that outlives the command. Config & customization One config.toml with per-key validation and a searchable in-app reference. Live reload where it’s safe, a portable export bundle, and logs that redact themselves.

See it on your own repo.

$39 once, per device. A perpetual license, no subscription, nothing that renews. Your code, data and credentials never touch our servers.

Rather try it first? Start the 7-day trial — card up front, $0 charged today, and cancelling before day 7 means you pay nothing. The key appears on screen, ready to paste into Muster.

Download See pricing