Tessera rents you Linux machines by the hour. Then it hands your AI the keys: point Claude Code or ChatGPT at it and describe what you want — it gets built.
No card to look around · sign in with a passkey or a magic link
The prompt, the API, and the wizard are the same machine underneath. Start in one, switch to another whenever it suits you.
Connect Tessera as an MCP server and your AI can create machines, open ports, attach domains and deploy — in plain language.
$ claude mcp add --transport http tessera \ https://api.tesserahosting.com/mcp \ --header "Authorization: Bearer orb_YOURPREFIX_YOURSECRET"
Paste your token in place of orb_YOURPREFIX_YOURSECRET — no leading $.
Every action in Tessera is a REST call with a bearer token. Curl it, put it in CI, build your own control panel.
$ curl -X POST https://api.tesserahosting.com/api/machines \ -H "Authorization: Bearer orb_YOURPREFIX_YOURSECRET" \ -d '{"name":"shop","size":"standard", "image":"debian-12","stack":"lamp"}'
Live endpoint — swap in your token.
A step-by-step wizard walks you through size, image, network and stack. Same machine, same result — no terminal required.
size presets, or custom vCPU / RAM / disk image Debian, Ubuntu, Rocky … network private net + firewall stack LAMP / PostgreSQL / bare OS
Nothing to install — it runs in your browser.
A tessera is a single tile in a mosaic. Assemble yours: compute, network, stack, and access — each one a real, built feature.
Presets, or dial in exact vCPU, memory and disk. Pay while it runs; stop it when you're done.
LAMP and PostgreSQL, domain-and-TLS ready. One click to a working server — not a blank box.
Attach a repo and push. Your machine pulls the update on a schedule — no deploy scripts to babysit.
Wire your machines together privately, and reach them over your own personal WireGuard tunnel.
Per-machine security groups, deny-by-default inbound. Open exactly the ports you mean to, nothing more.
Route your own domain through the edge, with TLS. Point it somewhere else any time — it's yours.
Sign in without a password. SSH is key-only; a browser console is there as a fallback when you need it.
Debian · Ubuntu · Rocky · AlmaLinux · Fedora · Alpine
Current images, each signature-verified before it boots.
Tessera runs on hardware we own and operate in the United States — not capacity rented from a hyperscaler, and not a shared corporate cloud. Your machines run in their own isolated private network, so your data and your traffic never mix with another customer's.
Real servers we bought and run ourselves — not resold public-cloud capacity. No hyperscaler's terms sit between you and your machine.
Every customer runs in their own private network, deny‑by‑default. Your VMs and your data are isolated from every other tenant — they never share a network, and never see each other.
Your machines run in US facilities we operate — not scattered across regions you can't name or jurisdictions you didn't choose.
The strongest promise we can make is that you're never stuck here. Export any machine as a qcow2 disk plus a full configuration bundle, and run it somewhere else. Your data was always yours.
# export a machine and everything around it $ curl https://api.tesserahosting.com/api/machines/shop/exports \ -H "Authorization: Bearer orb_YOURPREFIX_YOURSECRET" \ -o shop-export.zip shop.qcow2 40 GB disk image config.json 4 KB size, network, firewall stack.yaml 2 KB LAMP definition → run it anywhere that boots a standard image
Machines are billed by the hour — running only while they're on. The shape below is a placeholder while we finalize the model.
Create an account, connect your AI, and describe what you want built.
Get started → Already have an account? Sign in