---
title: "Control plane and server agent - Deplo"
description: "The control plane is the dashboard: it holds the data, renders the deployment and decrypts secrets. A small agent on every server is the only thing that ever runs Docker. The two talk over mutual TLS with a pinned certificate."
url: "https://web-isometric-9487cf1e.deplo.site/features/control-plane-and-server-agent"
image: "https://web-isometric-9487cf1e.deplo.site/api/media/file/control-plane-and-server-agent.webp"
updated: "2026-09-06"
---

# Control plane and server agent

The control plane is the dashboard: it holds the data, renders the deployment and decrypts secrets. A small agent on every server is the only thing that ever runs Docker. The two talk over mutual TLS with a pinned certificate.

![Control plane and server agent](https://web-isometric-9487cf1e.deplo.site/api/media/file/control-plane-and-server-agent.webp)

## Why it matters

The part exposed to the internet never holds a Docker socket, so reaching the panel is not root on the box. There is exactly one way to reach a server, and it is the same path for the local machine and a remote one.

[Learn more](https://web-isometric-9487cf1e.deplo.site/docs/concepts/how-deplo-works#the-two-planes)

```json
{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@type": "Organization",
      "@id": "https://web-isometric-9487cf1e.deplo.site/#organization",
      "name": "Deplo",
      "url": "https://web-isometric-9487cf1e.deplo.site",
      "description": "Ridicolously good alternative to cloud providers.",
      "logo": {
        "@type": "ImageObject",
        "url": "https://web-isometric-9487cf1e.deplo.site/api/media/file/og_logo.png",
        "width": 824,
        "height": 824
      },
      "sameAs": [
        "https://ds.deplo.build",
        "https://x.com/deplocloud",
        "https://www.instagram.com/deplocloud",
        "https://github.com/DeploCloud/deplo"
      ]
    },
    {
      "@type": "WebSite",
      "@id": "https://web-isometric-9487cf1e.deplo.site/#website",
      "name": "Deplo",
      "url": "https://web-isometric-9487cf1e.deplo.site",
      "description": "Ridicolously good alternative to cloud providers.",
      "publisher": {
        "@id": "https://web-isometric-9487cf1e.deplo.site/#organization"
      }
    }
  ]
}
```

```json
{
  "@context": "https://schema.org",
  "@type": "BreadcrumbList",
  "itemListElement": [
    {
      "@type": "ListItem",
      "position": 1,
      "name": "Features",
      "item": "https://web-isometric-9487cf1e.deplo.site/features"
    },
    {
      "@type": "ListItem",
      "position": 2,
      "name": "Control plane and server agent",
      "item": "https://web-isometric-9487cf1e.deplo.site/features/control-plane-and-server-agent"
    }
  ]
}
```