MSP Atlas

Chapter 1

How Atlas fits together

Atlas is one place for everything your team knows about each client: their devices, procedures, contacts, locations and passwords. It runs on a server you own, and everyone reaches it with a web browser.

Everyone reaches Atlas over HTTPS through the web proxy on the same server. Dashed lines are connections Atlas makes itself, on a schedule.

The parts

Part What it does
Atlas The application. One service that serves the web pages and the API, runs scheduled jobs (syncs, checks, backups, alerts), and holds the vault key while it runs.
PostgreSQL The database. Every client, asset, document, password and log entry is stored here. Passwords and other secrets are encrypted before they reach it.
Web proxy Caddy on Linux installs. It serves Atlas over HTTPS and keeps its certificate up to date.
The master key A key kept outside the database. It protects the vault key and every backup. Without it, encrypted data can't be read, so the person who runs the server keeps a copy offline.
The updater A small helper on Linux installs. It installs new releases and carries out restarts and repairs when an administrator asks from the web page.

What a client workspace holds

Every client you support gets a workspace. Its tabs are the same for every client:

Tab What goes there
Overview The client at a glance: primary contact, hours, maintenance window, asset counts, warranty, device health, security, trackers, tickets and recent activity.
Assets Servers, workstations, firewalls, switches, domains, SSL certificates, licences and anything else, each in a layout with its own fields.
Documents Runbooks, procedures and notes for this client.
Passwords The client's vault: logins, secure notes, one-time codes and BitLocker keys.
Contacts and Locations The people you deal with and the sites you visit.
Checklists Onboarding, offboarding and maintenance procedures worked through step by step.
Map How the client's assets, passwords, documents, contacts and locations link together.
Activity Every change, by whom and when.
Trackers Domain and SSL certificate expiry for the client's websites.

Where your data comes from

You can type everything in, but most teams start by bringing it in:

Chapter 12, Data and integrations, explains each one.

Who sees what

Atlas decides everything by role and by client. A technician sees only the clients they have been given, and a client they can't open looks the same as one that doesn't exist. Passwords need a higher level of access than documentation. Client accounts see only their own organization. Getting started has the full table.