Sovereign ops platform — 27 shipped capabilities

Muppy — Your infrastructure,
one control plane

From host inventory to Kubernetes in-pod debug, from PostgreSQL replication to 200 GB+ HA — muppy.io operates the full stack from a Python + PostgreSQL backoffice, AI agent-driven via MCP. Zero hyperscaler dependency.

13
Distinctive Features

Concretely reducing human action surface

8
S3 Backends

Sovereign (OVH, Scaleway, Infomaniak) + hyperscalers

400 GB+
HA Database + Filestore

Multi-DC switchover without healthcheck reconfiguration

27
Shipped capabilities

All in production, all verified in code

Who is Muppy for?

Two specific offers

13 operational Distinctive Features

Capabilities that reduce human action surface during incidents, migrations and upgrades

🚨
Incidents & High Availability
Automatic detection, response and continuity during production outages
DF3
PG Lock Auto-removal

Iterative detection + kill of blocking locks, schedulable via cron

Your databases stay available even under load: blocking locks are detected and removed automatically without human intervention.

DF4
Smart Healthchecks

Python GUI, topology-aware, Pushover push with no third-party service

Smartphone alert in seconds via Pushover; distinguishes primary vs. secondary failure without reconfiguration at switchover.

DF6
HA 200 GB+ Filestore

Rsync + 7 Prometheus metrics + transparent switchover

DC switchover is transparent at 200 GB+ filestore: rsync resumes in the correct direction without touching the configuration.

DF7
CIDR Auto-Refreshing

Cloudflare, GitLab, Azure DevOps — always up-to-date from their source

Your firewall rules stay consistent with IPs published by major SaaS providers — automatically updated from their official source.

DF8
Ephemeral Firewall Rules

TTL per UFW rule — automatic expiry, hourly cleanup cron

Temporary access expires on schedule — no more orphaned rules accumulating and eroding security.

🚀
Migrations & Deployments
Reduce friction and human risk during version changes
DF1
DB-aware Upgrade

Stop → backup → migrate → restart, traced per database

Each upgrade follows a traceable protocol per database — clean stop, backup, migration, restart — triggerable from CI/CD without SSH.

DF2
K8s Tag Mapper

Semver git tag → selected K8s profile + automatic Helm deploy

A simple semver git tag triggers the right K8s profile selection and Helm deployment — zero manual clicks between push and production.

DF5
Audited IMQ Cron

Filter by day, live link to IMQ log from each task_run

Each scheduled task is linked to its IMQ execution log in one click — Python logger + remote stdout/stderr visible from the UI without SSH.

DF13
1-click Install

K8s + Traefik + cert-manager + PG in 2 chained wizards

A complete Kubernetes cluster is operational in two chained wizards — onboarding a new server to production takes minutes.

🔧
Upgrades & Debug
Maintain, debug and audit production systems without friction
DF9
Browser IDE any-host

VS Code in the browser in 1 minute on any host

A complete VS Code environment installs in 1 minute on any existing host — debug from the browser with no dedicated infrastructure.

DF10
K8s In-Pod Debug

Toggle → VS Code injected into the production pod (same env)

A toggle reconfigures the pod with code-server and the same mounts and variables — the bug is reproduced in its exact environment, not a copy.

DF11
Dual-URL + Sunray

Private + public route per pod, Zero Trust WebAuthn passkey 1-toggle

Each pod exposes a private route and a WebAuthn passkey-protected public route in one toggle — no manual Ingress config, no risk of oversight.

DF12
K8s Config Journal

3-level diff + exact Helm command + stdout/stderr + exit code

Each Helm operation is logged with its 3 diff levels and stdout/stderr — post-mortem of a K8s incident without digging through cluster logs.

🏗️ Architecture

A uniform control plane across the entire stack

Python + PostgreSQL backoffice (Odoo Community Framework) with MCP exposed — every resource is an ORM record. Each Fabric operation captures Python log + subprocess stdout/stderr. No SSH needed to debug what happened.

  • Bare-metal, VPS, LXC, K8s nodes
  • Auto-maintained UFW networks + dynamic CIDRs
  • Multi-provider DNS + MBD + LEGO ACME
  • TLS Traefik + Let’s Encrypt + ForwardAuth
  • Full PostgreSQL stack: replication, PITR, locks, metrics
  • 9 MCP profiles + AI/LLM Gate with temporal granularity
🧠 Control (Python + PG + MCP)
Hosts & Network
bare-metalVPSLXCUFW
Compute
LXDK8sHelmHA
Data
PGPITRS3×8wal-g
🔒 Edge — Traefik + LE + DNS + Sunray
📊 Observability — Prometheus + Smart HC + Pushover

In production today

French industrial SME
HA 400 GB+ filestore + DB (Odizy)
SaaS service editor
Managed SaaS migration → Muppy
French industrial SME
On-premise production
Digital services company
Cloudflare + DNS multi-provider
Digital services company
On-premise production
🇨🇦 Sovereign Cloud

Sovereign providers

OVHScalewayInfomaniakIkoulaContaboDell ECS
🌍 Multi-Cloud

Integrated hyperscalers

AWSAzureGoogle CloudCloudflareDigitalOcean
📡 Multi-Provider DNS

DNS Providers

OVHCloudflareScalewayMBD (built-in)

Frequently asked questions about Muppy

How is Muppy different from DevOps tools like Portainer or Ansible?

Muppy is a sovereign all-in-one platform that integrates Kubernetes, managed PostgreSQL, DNS, TLS, high availability and CI/CD in a unified interface. Unlike Portainer (container management) or Ansible (configuration automation), Muppy covers the entire ops lifecycle — from provisioning to production — and can be driven by an AI agent via MCP.

Is Muppy compatible with an existing on-premise infrastructure?

Yes. Muppy is designed to run on your own hardware with no dependency on hyperscalers. It supports OVH, Scaleway, Infomaniak, Ikoula, Contabo and Dell ECS, as well as international hyperscalers (AWS, Azure, Google Cloud, Cloudflare, DigitalOcean). Full audit trail, extensible by your teams.

How does Muppy handle PostgreSQL high availability?

Muppy includes several HA mechanisms for PostgreSQL: automatic removal of blocking locks (PG Lock Auto-removal), topology-aware Smart Healthchecks with Pushover alerts, 200 GB+ HA Filestore with rsync and transparent switchover, and TTL-based ephemeral firewall rules. Datacenter failover is transparent with no reconfiguration required.

Can Muppy be driven by an AI agent?

Yes. Muppy exposes an MCP (Model Context Protocol) surface of approximately 35 methods covering provisioning, deployment, command execution, file reads, journalctl logs and systemd control. A Claude, Cursor or any compatible MCP client can manage your servers directly, without opening a terminal.

What is the Muppy K8s Tag Mapper?

The K8s Tag Mapper turns a semver git tag into a full Kubernetes deployment: it automatically selects the right K8s profile and triggers the corresponding Helm deployment. Zero manual clicks between the push and production. Every operation is logged with a 3-level diff, stdout/stderr and exit code for post-mortem analysis without digging through cluster logs.

Ready to take back control of your infrastructure?

Muppy Enterprise installs on-premise on your hardware. €490/month for the control plane. No proprietary ERP licence.