gravitational/teleport

Health v2 · maintenance only

Adoption not part of the score

20852 stars · 2142 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Teleport is an identity-aware access proxy and certificate authority that provides unified, credential-free access to SSH servers, Kubernetes clusters, databases, desktops, web apps, and cloud APIs. It combines SSO, short-lived certificates, RBAC/ABAC, just-in-time access, tunneling, and full session audit in a single Go binary.

Use cases

• set up SSO for cloud and on-prem infrastructure access
• replace SSH keys and passwords with short-lived certificates
• access servers behind NAT and firewalls without a VPN or bastion host
• record and audit SSH, Kubernetes, database, and RDP sessions
• enforce RBAC and just-in-time elevated access requests
• securely access Kubernetes clusters and databases like PostgreSQL
• manage access for AI agents and MCP servers

When to choose

• you need zero-trust, identity-based access to heterogeneous infrastructure
• you want to eliminate long-lived credentials and standing privileges
• compliance requires session recording and detailed audit logs
• you need a unified access layer for humans, machines, and AI agents

When to avoid

• you only need a simple SSH jump host with no access governance
• you want a lightweight VPN replacement without identity features
• AGPL-3.0 licensing is incompatible with your usage or you need commercial support terms

Facets

service · maturity stable

auth authorization security ssh networking secrets-management api-gateway security infrastructure-as-code self-hosted cloud-computing networking windows go self-hosted cloud zero-trust bastion jump-host certificate-authority sso rbac session-recording infrastructure-access identity-aware-proxy mcp audit devops containers linux macos docker kubernetes

Member repositories

For agents

markdown · JSON · MCP: product_card(name="gravitational/teleport")