New

Introducing Free Tier: Get Started with Cedalo MQTT Platform |Get Started

From the team behind Eclipse Mosquitto™

Control every connection, topic, and ACL.

Live broker telemetry, role-based access, audit history, and a browser MQTT client. Monitor, secure, and operate Mosquitto from one production web interface.

Included with all Pro Mosquitto plans • No additional cost • Quick setup

Powering MQTT infrastructure for 200+ enterprise customers worldwide

EDF power solutions logo
Seadrill logo
Boehringer Ingelheim logo
KVB logo
Aqualisa logo
Voith logo
Commend logo
Prometheus Security Group logo
EDF power solutions logo
Seadrill logo
Boehringer Ingelheim logo
KVB logo
Aqualisa logo
Voith logo
Commend logo
Prometheus Security Group logo

Why Management Center

Running Mosquitto without a GUI is operating blind.

The Command Line Gets You Running. It Doesn't Keep You in Control.

Which clients are connected? Which topics are active? Why did that device drop its session? The answers are somewhere in the logs, if logging is configured correctly, if the right person has SSH access, if they know what to grep for.

mosquitto.log

1711243891: New connection from 10.0.3.17:52841

1711243891: New client connected as sensor-gw-04

1711243892: Client sensor-gw-02 disconnected

1711243893: Received PUBLISH (d0, q1, r0)

1711243894: Socket error on edge-node-11

Or open the browser and just look.

Connected clients, active topics, message rates, cluster health, ACLs, and certificates sit behind one role-scoped browser view.

Management Center - Live
Connected

Clients

1,247

Topics

489

Msg/sec

3,812

Recent Connections

sensor-gw-04factory/line-2 - 2s
edge-node-11warehouse/dock - 4s
plc-west-03hvac/zone-a - 7s
plc-west-03 - write hvac/*allowed
sensor-99 - read /admin/*denied

Capabilities

Run Mosquitto in production from the browser.

Monitor

Know what the broker is doing right now

Live Broker Insights

Track connected clients, message rates, peak load, and throughput from one dashboard.

Cluster Health

Node status, failover state, and replication health for clustered deployments. Know which node is leader, which nodes are in sync, and where attention is needed.

Topic Explorer

Browse the topic hierarchy with per-topic subscription counts and traffic. See which topics are loud, quiet, or unused.

Audit Trail

Filter broker, security, HA, and bridge events by source, operation, and timestamp, then ship them to syslog.

Secure

Manage access without editing broker files

Client & ACL Management

Provision clients, assign roles, and update topic permissions from the UI. Changes apply live without a broker restart.

Project & Role Management

Separate production, staging, and development clusters by project. Grant scoped access by role.

Certificate Management

Import, deploy, and revoke CAs and client certificates for brokers and clients from the UI.

SSO Integration

SAML, OIDC, and LDAP for centralized identity and offboarding that removes access cleanly.

Integrate & Test

Validate flows where you configure them

Browser MQTT Client

Publish, subscribe, and inspect payloads without switching to a CLI or desktop client.

Integrations

Configure bridges to Azure Event Hubs, InfluxDB, MongoDB, and more in the Management Center.

Streams

Filter, transform, and aggregate JSON payloads in the broker using SQL-like queries. Republish to different topics from the same interface.

REST API

Automate Management Center operations from CI/CD pipelines, Ansible playbooks, provisioning scripts, or any HTTP client.

API & Automation

Run Mosquitto the way you run the rest of your infrastructure.

REST endpoints cover clients, ACLs, bridges, certificates, streams, cluster control, and more. Plug the Management Center into CI/CD pipelines, Ansible playbooks, or any HTTP client.

Onboarding workflow

New site goes live. One pipeline run creates the project and provisions a few hundred clients with role-based ACLs and client certificates.

Day-2 operations

Cert expiring? Disconnect a rogue device? Add a new bridge target? Use the REST API instead of manual UI work or ticket handoffs.

See full API reference
REST API

GET /api/projects/my_project/brokers/my_broker/clients

Authorization: Bearer ******

200 OK - 23ms

{
  "username": "sensor-01",
  "clientid": "swg-11-00",
  "textname": "Sensor site 1",
  "textdescription": "Workshop floor, room 1",
  "roles": [{ "rolename": "client" }],
  "groups": [{ "groupname": "l1-pub" }]
}

POST /api/projects/my_project/brokers/my_broker/groups

PUT /api/projects/my_project/brokers/my_broker/roles

GET /api/projects/my_project/clusters/status

POST /api/projects/my_project/brokers

What you'll actually do with it.

The same Management Center, across factories, drilling rigs, and data centers.

01

Run it day-to-day

Run the broker without surprises and act fast when something needs attention.

Live Production Cluster

Clients1,247
Msg/sec3,812
HealthOK
  • See live broker state, client connections, message rates, and cluster health in one workspace.
  • Drill into individual sessions, topic traffic, and ACL configurations.
  • Disconnect rogue clients and manage problematic connections from the UI.
  • Inspect broker logs and message flows without SSH access.
  • Track capacity and usage trends with historical charts.

02

Stand up new sites and integrations

Get a new broker, cluster, or bridge from zero to production.

Add New Client

namesensor-gw-12
roleedge-publisher
  • Set up clients, ACLs, and certificate authorities through the UI or REST API.
  • Add Azure Event Hubs, InfluxDB, MongoDB, and more integrations without editing config files.
  • Define project- and role-scoped access for the people who will operate it.
  • Validate publish/subscribe, ACL rules, and bridges where you configure them.
  • Verify the topology with the live topic tree and connection inventory.

03

Prove control and compliance

Show auditors, stakeholders, and your own team that the broker is under control.

Audit Trail, Last 24h

role.update14:32 - ops-admin
acl.create13:18 - security-team
  • Ship broker, security, HA, and bridge events to your SIEM via syslog.
  • Scope role-based access per project and broker for least-privilege operations.
  • Centralize identity via SAML, OIDC, or LDAP instead of local user stores.
  • Import, deploy, and revoke CAs and client certificates with audit history.
  • Backed by Cedalo's ISO 27001, SOC 2 Type II, and EU Cyber Resilience Act compliance work.

Stop operating Mosquitto blind.

Your Pro Mosquitto trial includes the full Management Center experience. Bring broker visibility, access control, and audit history into one browser workspace.

14-day cloud or 30-day on-prem trial • No credit card • Cancel anytime

Frequently Asked Questions