Documentation, source code, API references and community — your stepping stone into the osctrl and osquery ecosystem.
The complete osctrl documentation: concepts, components, deployment guides and usage.
docs.osctrl.net →Deep dives into osctrl-tls, osctrl-api, osctrl-cli, osctrl-mcp and the operator UI.
Deploy with Docker or natively with the provisioning script, including production guidance.
Deployment docs →The osctrl repository on GitHub — Go services, React frontend, deployment configs and tooling. MIT licensed.
jmpsec/osctrl →The full REST API contract for osctrl-api — generate clients or explore endpoints.
The complete osctrl-mcp reference — tool list, authentication model, the hosted /api/v1/mcp endpoint and client configuration examples.
The repository's architecture overview and project structure, plus the docs site source.
ARCHITECTURE.md →Release notes, binaries and Docker images for every osctrl version.
Releases →osctrl is a security-sensitive project — vulnerability reporting and responsible disclosure guidelines.
SECURITY.md →Contributions are welcome — fork, open a pull request, or start with an issue for larger changes.
Contributing guide →Find us in the #osctrl channel of the official osquery Slack community.
Request an auto-invite →Report bugs, request features or ask questions on the GitHub issue tracker.
GitHub issues →Star the repository, spread the word, and share how you use osctrl in production.
Star on GitHub →osctrl builds on osquery and speaks MCP — these references pair well with it.
The SQL-powered operating system instrumentation framework by the osquery foundation.
osquery.io →Deployment, configuration and the remote API that osctrl implements as its TLS endpoint.
osquery docs →Browse every table and column available for your queries — osctrl ships schema metadata through 5.23.1.
Schema browser →The open protocol behind osctrl-mcp — how AI clients discover and call tools.
Start with the docs, or go straight to a running deployment.