Repolode
Submit
gravitational

gravitational/teleport

Open-source identity-aware access platform that issues short-lived certificates for SSH, Kubernetes, databases, Windows desktops, web apps and cloud consoles.

Open-source alternative to:Cloudflare AccessOkta Advanced Server AccessBeyondTrust

View on GitHubWebsite
Stars
21,010
Forks
2,182
Open issues
3,248
Last commit
2 days ago

What is it?

Teleport is a single Go binary that provides connectivity, authentication, access control and audit for infrastructure. It acts as an access proxy and certificate authority that issues short-lived certificates, so users and machines do not rely on long-lived SSH keys, Kubernetes tokens or database passwords.

It covers SSH servers, Kubernetes clusters, PostgreSQL, MongoDB, CockroachDB and MySQL databases, Windows desktops over RDP, internal web applications, cloud consoles and Model Context Protocol servers. Access can be gated by RBAC or ABAC policies, MFA, SSO through GitHub, OpenID Connect or SAML, and time-bound Just-in-Time access requests. Sessions across SSH, Kubernetes, database, RDP and web are recorded for audit.

Teleport can deploy as a Linux daemon or on Kubernetes, and agents can open tunnels to resources behind NATs and firewalls. Its SSH implementation is stated to be compatible with OpenSSH clients and servers.

Key features

  • 01Issues short-lived SSH and mTLS certificates instead of long-lived keys or passwords.
  • 02Provides access to SSH, Kubernetes, databases, RDP desktops, web apps and cloud consoles from one place.
  • 03Records and audits sessions across SSH, Kubernetes, database, RDP and web.
  • 04Supports RBAC and ABAC policies, MFA and SSO via GitHub, OIDC or SAML.
  • 05Offers time-bound Just-in-Time access requests.
  • 06Establishes tunnels to resources behind NATs and firewalls without a VPN.

Use cases

  • Replacing a VPN or bastion host for reaching private servers and clusters.
  • Giving engineers audited, time-limited access to production Kubernetes and databases.
  • Centralizing SSO and access policy for SSH, databases and web tools across a company.
  • Securing access for AI agents and workloads that use MCP servers.

Quick start

  1. 1

    Clone the repository

    git clone https://github.com/gravitational/teleport.git
  2. 2

    Enter the project directory

    cd teleport
  3. 3

    Build the project

    make full
  4. 4

    Follow the getting started guide to set up a single-instance cluster

Things to know

  • Licensed under AGPL-3.0, a copyleft license with network-use obligations.
  • Building from source requires Go, Rust, Node.js, libfido2 and pkg-config.
  • The build needs at least 1GB of memory.

Topics

#ssh#kubernetes#access-control#zero-trust#bastion#audit#sso#database-access#certificate#cluster

FAQ

What is teleport?
Open-source identity-aware access platform that issues short-lived certificates for SSH, Kubernetes, databases, Windows desktops, web apps and cloud consoles. Teleport is a single Go binary that provides connectivity, authentication, access control and audit for infrastructure. It acts as an access proxy and certificate authority that issues short-lived certificates, so users and machines do not rely on long-lived SSH keys, Kubernetes tokens or database passwords.
Is teleport free to use? What license does it have?
teleport is open source under the AGPL-3.0 license. Check the license terms before using it in commercial products.
Is teleport still maintained?
Actively maintained. The last commit to teleport was on Oct 20, 2026.
What can I use teleport for?
Replacing a VPN or bastion host for reaching private servers and clusters. Giving engineers audited, time-limited access to production Kubernetes and databases. Centralizing SSO and access policy for SSH, databases and web tools across a company. Securing access for AI agents and workloads that use MCP servers.
How do I install teleport?
Clone the repository: git clone https://github.com/gravitational/teleport.git Enter the project directory: cd teleport Build the project: make full Follow the getting started guide to set up a single-instance cluster
Where can I get teleport?
The source code and installation instructions are on GitHub: https://github.com/gravitational/teleport

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects