Skip to main content
Version: Community (1.0.0)

Webxterm Documentation

Community Edition

This is the free Community Edition — a minimal, self-hosted way to reach your machines from a browser. For team management (RBAC), audit logs, session recording, OIDC/OAuth2 Login, Keycloak Authentication, and Multi-tenancy, switch to the Enterprise Edition.

WebXTerm Community Edition lets you securely connect to your own machines from a browser — no SSH client, no SSH keys, no VPN. Install the lightweight vsay-agent on a machine, log in, and it shows up ready to connect. That's the whole workflow.

WebXTerm Dashboard

What's in the Community Edition

Community is intentionally minimal — it covers the core access loop and nothing more:

FeatureStatusDescription
Sign up / LoginBuilt-in JWT authentication (email + password)
Add a MachineInstall vsay-agent, register it with your API key
Web TerminalBrowser-based terminal access powered by xterm.js
Command HistorySee the commands you've run per machine
Secure Agent TunnelOutbound-only connection over TLS — no inbound ports needed
WebXTerm Shell CLI / VSCode ExtensionConnect to the same machines from the CLI or your editor
API AccessREST API for machines and command history
Session RecordingEnterprise only
Audit LogsEnterprise only
Team Collaboration (RBAC / user management)Enterprise only — Community is single-user, one account per deployment
Real-time MonitoringEnterprise only
Multi-tenancyEnterprise only

What Makes Us Different?

Unlike traditional remote-access tools, WebXTerm uses an agent-based architecture — install a lightweight agent on any machine and it connects outbound to the backend. No open ports, no SSH key management, no bastion hosts. Access your machines from anywhere through:

Access MethodDescription
Web TerminalBrowser-based terminal access with full terminal capabilities
WebXTerm VSCode ExtensionManage and connect to machines directly from your IDE
WebXTerm Shell CLICommand-line tool for terminal access and machine management

The Core Workflow

  1. Sign up / log in — Community uses its own built-in JWT authentication (email + password, bcrypt-hashed).
  2. Add a machine — copy your API key from your Profile page, install vsay-agent on the machine, and run configure. It appears in your Machines list within seconds.
  3. Use it — click Connect and you get a live terminal in the browser (or connect the same machine from the Shell CLI or VSCode extension).
  4. Check command history — each machine keeps a simple log of the commands you've run on it, so you can look back at what happened.

There's no team setup, no roles to configure, and no audit dashboard — it's a single account managing its own machines.

Authentication — Built-in JWT

WebXTerm Community Edition uses its own JWT-based authentication. When you sign up or log in with email and password, credentials are hashed with bcrypt and stored in MongoDB. The backend issues a signed JWT (HS256) that is used for all API calls — no external identity provider required.

Enterprise-Only Features

If you need more than the core access loop, the Enterprise Edition adds:

  • Team Collaboration (RBAC): Multi-user organizations with Super Admin / Company Admin / User roles and per-machine sudo/non-sudo grants.
  • Audit Logs: Full activity history — logins, admin actions, and command events — with filtering and search.
  • Session Recording: Full terminal I/O playback, not just a command list.
  • Real-time Monitoring: Live CPU/memory/disk stats from agent heartbeats.
  • Keycloak Authentication & OIDC/OAuth2 Login: Sign in with Microsoft, GitHub, Okta, Azure AD.
  • Multi-tenancy: Multiple isolated organizations from a single deployment.

See the Enterprise Edition documentation for details.

API Reference

ResourceURL
Websitewebxterm.me
Community & Supportcommunity.webxterm.me
Documentationdocs.webxterm.me

Products & Clients

ProductDescription
WebXTerm Shell CLIGo CLI tool — vsay-shell-cli connect <machine>
WebXTerm VSCode ExtensionIntegrated IDE terminal, file browser, and port forwarding
WebXTerm AgentLightweight daemon installed on machines — the core of the system