Tessera rents you Linux machines by the hour. Then it hands your AI the keys: point Claude Code or ChatGPT at it and describe what you want — it gets built.
Free to explore · sign in with a passkey, no password
The prompt, the API, and the wizard are the same machine underneath. Start in one, switch to another whenever it suits you.
Connect Tessera as an MCP server and your AI can create machines, open ports, attach domains and deploy — in plain language.
$ claude mcp add --transport http tessera \ https://api.tesserahosting.com/mcp \ --header "Authorization: Bearer orb_YOURPREFIX_YOURSECRET"
Paste your token in place of orb_YOURPREFIX_YOURSECRET — no leading $.
Every action in Tessera is a REST call with a bearer token. Curl it, put it in CI, build your own control panel.
$ curl -X POST https://api.tesserahosting.com/api/machines \ -H "Authorization: Bearer orb_YOURPREFIX_YOURSECRET" \ -d '{"name":"shop","size":"standard", "image":"debian-12","stack":"lamp"}'
Live endpoint — swap in your token.
A step-by-step wizard walks you through size, image, network and stack. Same machine, same result — no terminal required.
size presets, or custom vCPU / RAM / disk image Debian, Ubuntu, Rocky … network private net + firewall stack LAMP / PostgreSQL / bare OS
Nothing to install — it runs in your browser.
A tessera is a single tile in a mosaic. Assemble yours: compute, network, stack, and access — each one a real, built feature.
Presets, or dial in exact vCPU, memory and disk. Pay while it runs; stop it when you're done.
LAMP and PostgreSQL, domain-and-TLS ready. One click to a working server — not a blank box.
Attach a repo and push. Your machine pulls the update on a schedule — no deploy scripts to babysit.
Wire your machines together privately, and reach them over your own personal WireGuard tunnel.
Per-machine security groups, deny-by-default inbound. Open exactly the ports you mean to, nothing more.
Route your own domain through the edge, with TLS. Point it somewhere else any time — it's yours.
Sign in with a passkey — a fingerprint or face, nothing to type and nothing a fake sign-in page can steal. Two-factor for your account, key-only SSH to your machines, and a browser console when you need it. Email sign-in links coming soon.
Debian · Ubuntu · Rocky · AlmaLinux · Fedora · Alpine
Current images, each signature-verified before it boots.
Pick a verified operating system, or a turnkey app that comes up already wired for your domain and network — each one a tile you can place.
The images a machine can boot. Current, signature-verified, ready for your key.
The popular default; broad software support.
Rock-solid, minimal, long support.
Enterprise RHEL-compatible.
Enterprise RHEL-compatible alternative.
Newest packages, leading-edge.
Tiny and fast, great for containers.
Upload a custom install image.
Whole stacks that come up already configured — published on your domain over HTTPS, or private and VPN-only where it belongs.
Apache, PHP and MariaDB, your domain published over HTTPS.
Nginx, PHP-FPM and MariaDB, published on your domain over HTTPS.
A database + app account, reachable only from your own machines and VPN.
A MySQL-compatible database, private + VPN only.
In-memory cache and queue, private + VPN only.
Docker Engine and Compose, ready for your own containers.
A single-node Kubernetes cluster, private + VPN only.
Self-hosted workflow automation, published on your domain.
Self-hosted Git (Gitea-compatible), published on your domain.
Self-hosted password manager (Bitwarden-compatible), on your domain.
Self-hosted publishing & newsletters, on your domain.
Privacy-friendly self-hosted web analytics, on your domain.
Self-hosted status & uptime monitor, on your domain.
Your own WireGuard VPN server with a web admin UI.
Tessera runs on hardware we own and operate in the United States — not capacity rented from a hyperscaler, and not a shared corporate cloud. Your machines run in their own isolated private network, so your data and your traffic never mix with another customer's.
Real servers we bought and run ourselves — not resold public-cloud capacity. No hyperscaler's terms sit between you and your machine.
Every customer runs in their own private network, deny‑by‑default. Your VMs and your data are isolated from every other tenant — they never share a network, and never see each other.
Your machines run in US facilities we operate — not scattered across regions you can't name or jurisdictions you didn't choose.
The strongest promise we can make is that you're never stuck here. Export any machine as a qcow2 disk plus a full configuration bundle, and run it somewhere else. Your data was always yours.
# export a machine and everything around it $ curl https://api.tesserahosting.com/api/machines/shop/exports \ -H "Authorization: Bearer orb_YOURPREFIX_YOURSECRET" \ -o shop-export.zip shop.qcow2 40 GB disk image config.json 4 KB size, network, firewall stack.yaml 2 KB LAMP definition → run it anywhere that boots a standard image
Machines are billed by the hour — running only while they're on. Pick a preset or size one yourself; you're metered per vCPU, GB of RAM and GB of disk. Monthly figures below assume it runs non-stop (730 hours).
Create an account, connect your AI, and describe what you want built.
Get started → Already have an account? Sign in