Turn your phone into a powerful, secure Linux-style server.

Kyanja transforms your Android device into a full-featured web server, terminal environment, and CI/CD runner. Host static websites, test backend APIs, manage embedded databases, transfer files via jailed SFTP, run local AI agents, and cluster multiple devices together with automatic failover.

Whether you are hosting a staging site, running offline developer tooling, or turning an old Android phone into a 24/7 home server, Kyanja gives you full server control directly in your pocket.

═══════════════════════════════════
CORE SERVER FEATURES
═══════════════════════════════════
• High-Performance Web Server: Embedded HTTP & HTTPS engine with Nginx-style virtual host routing, custom headers, and longest-prefix location matching.
• Multi-Runtime Hosting: Serve static web apps, single-page applications (SPAs), or connect backends running Node.js, Python, Go, PHP, Bun, and Deno.
• Built-in Terminal & Console: Run server commands, inspect processes, and execute local deployment scripts directly on device.
• Secure SSH & SFTP Server: Connect securely from your laptop or VS Code. File transfers are jailed to the app directory with Keystore-backed authentication.
• Embedded Databases: Built-in SQLite management and JSON document NoSQL stores with schema visualization and query execution.
• Web Admin Dashboard: Access an encrypted browser-based control panel inspired by Proxmox with live CPU, memory, and disk telemetry.

═══════════════════════════════════
NETWORKING & PUBLIC ACCESS
═══════════════════════════════════
• Custom Domain Routing: Verify and bind your own public domain names via HTTP token probes.
• Dynamic DNS (DDNS): Built-in automatic synchronization for Cloudflare and DuckDNS.
• Secure Built-In Tunnels: Expose your local server to the public internet through encrypted outbound relay tunnels without port forwarding.
• Upstream Firewall: Granular IP and port filtering rules to protect your services.

═══════════════════════════════════
SWITCH: MULTI-DEVICE CLUSTERING
═══════════════════════════════════
• Combine Phones into a Cluster: Link multiple Android devices over Wi-Fi with encrypted HMAC pairing.
• Load Balancing & Failover: Distribute incoming traffic across nodes using parallel load balancing or automatic health-check failover.
• Pooled Resources: View real-time combined CPU cores, RAM, and storage across your entire device fleet.
• Peer Deployment: Push app builds and site files across your cluster in a single operation.

═══════════════════════════════════
CI/CD RUNNER & CLOUD DEPLOYMENT
═══════════════════════════════════
• Native CI Pipeline Runner: Execute build pipelines locally on device or orchestrate remote deployments.
• Inbound Rolling Deploys: Receive build artifacts directly from GitHub Actions, CircleCI, or GitLab and roll them across your server cluster.
• Cloud VM Provisioning: Spin up and manage dedicated cloud servers on AWS and Google Cloud directly from your phone with pre-flight cost verification.

═══════════════════════════════════
AI & MODEL CONTEXT PROTOCOL (MCP)
═══════════════════════════════════
• Built-in MCP Server: Expose device tools and server endpoints to AI clients over Server-Sent Events (SSE).
• On-Device MCP Agent: Run an interactive, approval-gated AI assistant that can inspect logs, manage files, and execute safe server tools.
• Local AI Gateway: Compatible with small on-device LLMs (1B–3B) and multi-device inference pooling.

═══════════════════════════════════
SECURITY & PRIVACY FIRST
═══════════════════════════════════
• Local-First: Zero telemetry, tracking SDKs, or cloud analytics. Your data stays entirely on your device.
• Hardware-Backed Encryption: Admin tokens, SSH keys, and cloud credentials are encrypted using the Android Keystore (AES-GCM).
• Mandatory PIN Protection: Biometric and PIN authentication protect all on-device controls.