Deploy for a team

Run the Hub on a server your team can reach, sign people in with GitHub, and add a Runner on each machine that runs Sessions. Each step links to its full guide.

What you need

• A machine for the Hub: macOS or Linux, always on, reachable by your team. It needs little CPU or memory.
• One or more Runners: Macs with Apple Silicon, or Linux machines with KVM. Give them the CPU, memory and disk for one microVM per running Session. The Hub’s machine can be one of them.
• A way to serve the Hub over HTTPS: a reverse proxy with a domain, or Tailscale. GitHub sign-in needs it.
• A GitHub account that can create a GitHub App for your user or organisation.

Set up the Hub

1. On the Hub’s machine, install kndl and start onboard:

   curl -fsSL https://raw.githubusercontent.com/kddige/kndl/main/install.sh | sh
   kndl onboard

2. Answer Hub (or Both, to run Sessions on it too). For who reaches it, answer Behind HTTPS, and give the public URL, such as https://hub.example.com. See Install kndl.

3. Put the Hub behind HTTPS, with a reverse proxy or Tailscale Serve. See Reach the Hub from other machines.

4. When onboard offers the GitHub App, choose to create it on GitHub now. Then install the App on the Repos your team works on. See Set up the GitHub App.

5. Onboard ends with a Setup link. Open it to sign in with GitHub as the Hub’s Owner. See Let people in.

Back up hub.env with hub.db

~/.kndl/hub.env holds HUB_SECRETS_KEY, the only key to the Claude credentials and secrets in the Hub’s database. Back them up together.

Add Runners

1. In the web UI, open Runners and choose Add a Runner. Copy the kndl runner join command it shows.

2. On the Runner’s machine, install kndl, then paste the command:

   curl -fsSL https://raw.githubusercontent.com/kddige/kndl/main/install.sh | sh
   kndl runner join 'https://hub.example.com#7K2QD-M9XRT-4VBNC-H8PWE'

   It installs the Runner as a service and waits until it connects. You should see it on the Runners page. See Add a Runner.

Invite your team

1. Open People, press Invite someone, and send each person their Invite link. kndl sends no email. See Let people in.

2. Each person adds their own Claude setup token on their Account page, and the Sessions they start run on it. See Add your Claude credential.

3. Give each Repo an Environment with the tools its Sessions need. See Set up an Environment.

Next steps

The security modelWhat a Sandbox can reach, where credentials live, and what to protect.

Update kndlFollow Releases, and keep Runners on the Hub's version.