TAK Server core

Enrolls ATAK, WinTAK, and iTAK out of the box

CoT XML + protobuf on TCP/TLS/UDP, group routing, async DuckDB persistence, and the Marti HTTPS API surface clients hit during connect, mission, sync, and enrollment.

PortProtocolRole
8087TCPPlain CoT streaming (XML → protobuf)
8089TLS / mTLSSecure CoT streaming (client cert required)
6969UDPCoT datagram input (+ Mesh SA multicast)
8443HTTPS / mTLSMarti API + TLS enrollment
18443HTTPAdmin API + Blazor /console + COP /cop
9000TLSServer-to-server federation

Protobuf negotiation

TAK Protocol v1 advertised → client request → server response → framed 0xbf messages.

Local CA enrollment

tls/configsignClient/v2 issues client certs from a per-tenant CA.

Group-filtered CotHub

The same OUT ∩ IN routing as standard TAK — async DuckDB writes never block fan-out.

Honest scope: practical client + admin surface (connect, enroll, stream, mission, sync), not 100% parity with the ~391-operation TAK Server OpenAPI. Plugins are not supported.

TMG TAK Server Console

Day-to-day ops without a Linux shell

The TMG TAK Server Console is a native Windows desktop app — point it at the service and manage everything from one window: Home, Network, Clients, Certificates, Users, Packages, Missions, Collab, and Settings. No SSH, no scp, no ProgramData hunting. A browser console at /console is also included for remote/admin access.

TMG TAK Server Console — Admin base: http://127.0.0.1:18443
TeamTrack ▣ Dashboard PEOPLE Users Groups Certificates DAY-TO-DAY Missions Packages Profiles Iconsets Backup ADVANCED Data Feeds Federation Video · Collab Dashboard Common tasks · Integrated health · Live status 12Devices 48Users 6Groups 9Missions OKHealth 23Certs COMMON TASKS + Add a TAK operatoruser · groups · .p12 + Create a missionname · description Upload a packageZIP in browser 🔑 Issue device certificatedownload .p12 + CA USERS CALLSIGNGROUPS INGROUPS OUT ALPHA-1red,whiteredEdit · ✕ BRAVO-2blueblue,whiteEdit · ✕ TOC-OPSwhitewhiteEdit · ✕

People

  • Users — create/edit/delete, reset password, bulk import, assign IN/OUT groups
  • Groups — create/update + view membership
  • Certificates — issue, revoke, download .p12 + CA PEM

Day-to-day

  • Missions — create, list, delete
  • Packages — upload/list/delete ZIPs (no SCP)
  • Profiles / Iconsets — upload/download/delete
  • Backup — one-click ProgramData zip, restore, prune

Advanced

  • Federation — federate CRUD, group mapping, sync/stop
  • Data Feeds / Video / Collab — see below*
  • ExCheck / Tenants
Honest scope: the Settings page is read-only (edit appsettings for bind changes), mission contents are managed via the Marti API rather than the UI, and there's no in-console profile/icon editor or plugin system.

Multitenancy (SaaS-ready)

Isolated TAK environments from one deployment

Each tenant gets a private data directory with its own DuckDB file, JSON stores, identity, missions, feeds, and certificate authority. Cross-tenant CoT delivery is structurally impossible because every tenant has its own CotHub instance.

DemuxSurface
TLS SNICoT TLS (8089) & Marti mTLS (8443)
Host header / pathWeb admin, COP, REST
COP login claimtenant_id pins user to tenant
Tenant A CotHub · DuckDB identity · CA missions · feeds Tenant B CotHub · DuckDB identity · CA missions · feeds Shared host SNI / Host demux shared ports no cross-tenant CoT path

Shared with GeoInsights *

Beyond TAK — when you need it

TeamTrack ships with optional data-integration capabilities drawn from the same engine that powers our real-time platform. For the full event-driven IoT and sensor-processing story, that's GeoInsights.today.

For Windows

Real-Time Geospatial Engine

Our desktop event-driven data-processing solution. Ingests sensors, RF, IoT, and ISR video and sends CoT to TeamTrack so non-TAK data reaches every EUD and the COP.

Real-Time Geospatial Engine →
For cloud / server

GeoInsights

Our server-side real-time event-driven IoT platform for cloud deployments. Processes streams at scale and publishes CoT into TeamTrack over the same Marti/CoT interface.

GeoInsights.today →

Data integration *

Turn sensors and SCADA into live CoT

An optional FeedIngestHost connects to decoded sensor streams, normalizes each payload through a single parser, and publishes group-scoped CoT — with live bbox + predicate filtering that updates without reconnecting.

This is the same ingest technology that powers GeoInsights.today; TeamTrack includes a compatible subset wired into the CotHub.

Feed typeURL scheme
AprsKisskiss://host:port
AprsIsaprs-is://rotate.aprs2.net:14580
MqttSensormqtt:// · mqtts://
ScadaMqttmqtts://broker:8883/?topic=scada/#
UdpJsonudp://0.0.0.0:19000

ISR video & KLV/MISB *

Optional ISR video overlays

Tap KLV-bearing MPEG-TS streams and synthesize a moving air-platform marker and a sensor-footprint polygon — turning ISR video into a georeferenced overlay on the tactical picture.

The full motion-imagery and telemetry-processing platform lives at GeoInsights.today.

u-d-f sensor footprint a-f-A-M-F platform flat-earth frustum projection

Collaboration *

Optional GeoChat, voice & video

An optional integration with a paired Fluxer instance fuses GeoChat messaging, attachments, and LiveKit voice/video calling into the CoT bus — all off by default.

Identity federation and event bridging here share a lineage with the real-time event platform at GeoInsights.today.

TAK Server Fluxer LiveKit GeoChat CoT identity · chat call signaling

Ready to see it run?

Get a guided walkthrough on your own network, or start a self-host trial.