# Monitor remote and factory sites without opening a port

Levirge DevOps shows MQTT topics, InfluxDB data, SQLite files, logs and host
metrics at remote sites from one panel. A small Linux client, devops-client,
runs at each site and connects outward, so no site needs an inbound port or
VPN, and passwords stay on the site's machine.

**Status: private testing.** devops-client has no public download yet.
[Join the waitlist](/devops#cta).

## What you can see at each site

- **[MQTT](/devops/plugins/mqtt.md).** Browse retained messages on a topic
  filter (`+` and `#`), subscribe to live messages, see broker stats. MQTT 5.0
  or 3.1.1, TLS with a username and password.
- **[InfluxDB 2.x](/devops/plugins/influxdb.md).** Flux queries, buckets and
  measurements, results table with export.
- **[SQLite](/devops/plugins/sqlite.md).** Query database files on the site's
  machine, with saved queries, history and an audit log.
- **[Log files](/devops/plugins/logs.md).** Live tail, search and read files
  and whole log directories, without SSH.
- **[Host metrics](/devops/plugins/hosts.md).** CPU, memory, load, network,
  disks, GPUs and top processes.
- **[Message bus servers](/devops/plugins/message-bus.md)** and
  **[Docker](/devops/plugins/docker.md)**, where the site runs them.

## How a site connects

1. Run devops-client on a Linux machine at the site: one statically linked
   binary, about 42 MB.
2. It connects outward through a message bus to Levirge DevOps. Nothing at the
   site listens for inbound connections.
3. You, scripts and AI agents reach every site through the web UI, the REST
   API or MCP.

## Safe at the edge

- **No inbound port or VPN** at any site.
- **Credentials stay on the site's machine**, in devops-client's environment.
- **Read-only unless you say otherwise.** Writes need a role; InfluxDB queries
  pass as reads only when devops-client can show they are; web UI writes ask
  for an authenticator code.
- **Every action audited**, with agent actions marked.

## FAQ

### How do I monitor a remote site without a VPN or port forwarding?

Run devops-client on a Linux machine at the site. It connects outward through
a message bus to Levirge DevOps, so the site needs no inbound port or VPN, and
you reach its systems from one panel.

### Can I see MQTT topics and broker stats remotely?

Yes. The MQTT plugin browses retained messages on a topic filter with `+` and
`#` wildcards, subscribes to live messages and shows broker stats. It
negotiates MQTT 5.0 or 3.1.1 and connects with TLS and a username and password
where the broker needs them.

### Can I query InfluxDB at a site?

Yes, InfluxDB 2.x. Run Flux queries, browse buckets and measurements, and
export results. devops-client lets a query through as a read only if it can
show that it is one.

### What does devops-client run on?

Linux. It is a single statically linked binary of about 42 MB. Windows is not
a target.

### Can AI agents check site data?

Yes, over MCP, for InfluxDB, SQLite, log files and Docker; reads work for
every role and writes need a role that allows them. MQTT and host metrics are
in the web UI; their plugin pages list no MCP tools.

### Can I install it today?

Not yet. Levirge DevOps is in private testing and devops-client has no public
download. [Join the waitlist](/devops#cta) for one email when it is ready to
install.

See also: [Give AI agents the ability to monitor your infrastructure](/devops/ai-agent-infrastructure-monitoring.md).