servergardens/magic-aio repository overview

⁠Magic Cloud

Turn plain English into a working full-stack app — database, secured REST API, business logic and frontend — running on your own hardware, with zero lock-in. MIT licensed.

This is the all-in-one image: dashboard, backend, API and MCP server in a single container. For a two-container split, use servergardens/magic-backend⁠ and servergardens/magic-frontend⁠.

⁠Run it

docker run -p 4444:4444 \
  -v magic_data:/magic/files/data \
  -v magic_config:/magic/files/config \
  -v magic_modules:/magic/files/modules \
  -v magic_etc:/magic/files/etc \
  servergardens/magic-aio:latest

Open http://localhost:4444⁠ and log in with root / root. The dashboard is served at the root of the same port as the API.

⁠What you get

• Endpoint Generator — point it at any MySQL, PostgreSQL, MariaDB, SQL Server or SQLite schema and get a complete, secured CRUD API in seconds. Import third-party APIs straight from an OpenAPI/Swagger URL.
• MCP server with OAuth — every endpoint in your modules folder becomes a tool for Claude, Claude Code, Cursor or Codex, behind your own role-based access control. Endpoint: https://<your-host>/magic/modules/mcp/mcp
• Hyper IDE — edit, run and replay any file on the server. No build step: save the code and test it.
• SQL Studio — query and design your databases from the browser.
• Chatbot Wizard — crawl a website and get an embeddable chatbot grounded in your own content.
• Scheduled tasks, users and roles, plugin store, and a built-in web server for your frontends.

⁠Ports and volumes

Multi-arch: linux/amd64 and linux/arm64. Runs happily on a Mac mini or a Raspberry Pi class machine.

⁠Security

Hyperlambda runs sandboxed, with no file system access outside its sandbox, and individual functions can be whitelisted per role — so the server can accept AI-generated code as input and execute it safely. Every endpoint declares which roles may invoke it, enforced at execution time.

First run: an unconfigured backend ships a placeholder JWT secret, which is what makes root/root work. Complete the setup screen immediately — until you do, anyone who can reach the port can sign in as root.

⁠Links

• Website — https://hyperlambda.dev⁠
• Documentation — https://docs.ainiro.io⁠
• Source (MIT) — https://github.com/polterguy/magic⁠
• MCP setup guide — https://docs.ainiro.io/tutorials/how-to-connect-the-mcp-server/⁠