[{"_1":2,"_239":-5,"_240":-5},"loaderData",{"_3":4,"_30":31,"_32":33,"_191":192},"root",{"_5":6,"_18":19},"toasts",[7,14,16],{"_8":9,"_10":11,"_12":13},"uid","a43d1376-efe1-47c9-827f-b8c7c5f67a4b","title","This MCP server does not support inspection","type","error",{"_8":15,"_10":11,"_12":13},"1aee283f-8f9e-4823-b099-2c026cc07746",{"_8":17,"_10":11,"_12":13},"880efd44-10ff-4a22-b7ed-ba5db39d5ce1","visitor",{"_20":21,"_22":23},"viewportWidth",1280,"visitorSession",{"_24":25,"_27":-5,"_8":28,"_29":-5},"attributes",[26],"BOT","membership","VJAbRAp3pt","userAccount","routes/_public/_layout",{},"routes/_public/mcp/servers/~namespace/~slug/_pages/_layout",{"_34":35,"_36":-5,"_37":38,"_39":50,"_109":110,"_190":89},"availableLocales",[],"githubUser","locale",{"_39":40,"_43":47,"_48":49},"mcpServer",{"_41":42,"_43":44,"_45":46},"description","Secure network administration MCP server that enables AI assistants to safely execute networking commands like SSH, ping, and DNS lookups inside a Docker container sandbox.","name","ITMCP","readme","# ITMCP\n\nSecure network administration tools for AI assistants through the Model Context Protocol (MCP).\n\n[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)\n\n## Overview\n\nITMCP is an MCP server that enables AI assistants to safely execute networking commands inside a Docker container sandbox. It provides a secure interface for running common network diagnostic and administration tools while maintaining strict security controls.\n\nThe project implements the Model Context Protocol (MCP) to expose networking tools as callable functions for AI assistants, allowing them to perform network diagnostics and system administration tasks in a controlled environment.\n\n## Features\n\n- **Docker Isolation**: All commands run in a sandboxed Docker container for enhanced security\n- **Security Controls**: Comprehensive whitelisting of hosts, directories, and commands\n- **Network Diagnostic Tools**: SSH, ping, nslookup, telnet, dig, tcpdump, and more\n- **File Operations**: Secure access to view and analyze files with tools like cat, grep, head, tail\n- **Process Management**: View running processes with ps and top tools\n- **Credential Management**: Secure handling of SSH keys and passwords\n- **MCP Integration**: Full compatibility with the Model Context Protocol\n- **Enterprise-Grade Security**: Session management, audit logging, and access controls\n\n## Installation\n\n### Prerequisites\n\n- Python 3.10 or higher\n- Docker (for containerized execution)\n- MCP library (version 1.0.0 or higher)\n\n### Basic Installation\n\n1. Clone the repository:\n ```bash\n git clone https://github.com/yourusername/itmcp.git\n cd itmcp\n ```\n\n2. Install dependencies:\n ```bash\n pip install -e .\n ```\n\n### Docker Setup\n\n1. Build the Docker container:\n ```bash\n docker build -t itmcp_container .\n ```\n\n2. Run the container:\n ```bash\n docker-compose up -d\n ```\n\n## Configuration\n\nITMCP uses a YAML-based configuration system and environment variables for setup.\n\n### Environment Variables\n\nCreate a `.env` file in the project root with the following variables:\n\n```\n# Docker configuration\nUSE_DOCKER=true\nDOCKER_CONTAINER=itmcp_container\n\n# SSH credentials configuration\nSSH_CREDENTIALS_PATH=/app/secrets/ssh_credentials.json\nSSH_KEYS_PATH=/app/secrets/keys\n\n# Security whitelists\nALLOWED_HOSTS=localhost,127.0.0.1,example.com\nALLOWED_DIRECTORIES=/tmp,/var/log\nALLOWED_REMOTE_COMMANDS=ls,cat,grep\n```\n\n### Security Whitelists\n\nITMCP implements three key whitelists for security:\n\n1. **Allowed Hosts**: Restricts which hosts can be targeted by network tools\n2. **Allowed Directories**: Limits file system access to specific directories\n3. **Allowed Remote Commands**: Controls which commands can be executed remotely\n\n## Available Tools\n\nITMCP provides the following network administration tools:\n\n| Tool | Description |\n|------|-------------|\n| `ssh_tool` | Connect to a target via SSH |\n| `ping_tool` | Ping a host to check connectivity |\n| `nslookup_tool` | Perform DNS lookup on a hostname or IP address |\n| `telnet_tool` | Test TCP connectivity to a host and port |\n| `dig_tool` | Perform DNS lookup with dig command |\n| `tcpdump_tool` | Capture network packets (limited time) |\n| `ps_tool` | List running processes |\n| `cat_tool` | Display content of a file |\n| `top_tool` | Display system processes (snapshot) |\n| `grep_tool` | Search for patterns in files |\n| `head_tool` | Display the beginning of a file |\n| `tail_tool` | Display the end of a file |\n\n## Security Features\n\nITMCP implements enterprise-grade security features:\n\n### Session Management\n\n- Secure session creation with cryptographic tokens\n- Session expiration and timeout controls\n- Concurrent session limits\n- Session validation and regeneration\n\n### Audit Logging\n\n- Comprehensive command logging\n- User attribution for all actions\n- Success/failure logging\n- Security event flagging\n- Tamper-evident logs\n\n### Access Control\n\n- Command whitelisting\n- Directory restrictions\n- Host restrictions\n- Input validation and sanitization\n\n## Docker Integration\n\nITMCP uses Docker to create a secure sandbox for command execution:\n\n1. All commands are routed through the Docker container\n2. The container has limited access to the host system\n3. Resource limits can be applied to prevent abuse\n4. Network isolation provides an additional security layer\n\n## Usage Examples\n\n### MCP Configuration\n\n#### Claude Desktop Configuration\n\nTo use ITMCP with Claude desktop, add the following to your `config.json` file:\n\n```json\n{\n \"servers\": [\n {\n \"name\": \"itmcp\",\n \"command\": [\"python\", \"-m\", \"itmcp.server\"],\n \"environment\": {\n \"USE_DOCKER\": \"true\",\n \"DOCKER_CONTAINER\": \"itmcp_container\",\n \"ALLOWED_HOSTS\": \"localhost,127.0.0.1,yahoo.com,firewall.local\"\n }\n }\n ]\n}\n```\n\n#### Cline Configuration\n\nFor Cline AI, a more detailed configuration is provided in the `mcp-config.json` file included in this repository:\n\n```json\n{\n \"servers\": [\n {\n \"name\": \"itmcp\",\n \"command\": [\n \"python\",\n \"-m\",\n \"itmcp.server\"\n ],\n \"environment\": {\n \"USE_DOCKER\": \"true\",\n \"DOCKER_CONTAINER\": \"itmcp_container\",\n \"ALLOWED_HOSTS\": \"localhost,127.0.0.1,yahoo.com,firewall.local\",\n \"ALLOWED_DIRECTORIES\": \"/tmp,/var/log\",\n \"ALLOWED_REMOTE_COMMANDS\": \"ls,cat,grep,ping,ssh,nslookup,dig,telnet,tcpdump,ps,top,head,tail\"\n },\n \"description\": \"Secure network administration tools running in a Docker sandbox\",\n \"tools\": [\n {\n \"name\": \"ssh_tool\",\n \"description\": \"Connect to a target via SSH\"\n },\n {\n \"name\": \"ping_tool\",\n \"description\": \"Ping a host to check connectivity\"\n },\n {\n \"name\": \"nslookup_tool\",\n \"description\": \"Perform DNS lookup on a hostname or IP address\"\n },\n {\n \"name\": \"telnet_tool\",\n \"description\": \"Test TCP connectivity to a host and port\"\n },\n {\n \"name\": \"dig_tool\",\n \"description\": \"Perform DNS lookup with dig command\"\n },\n {\n \"name\": \"tcpdump_tool\",\n \"description\": \"Capture network packets (limited time)\"\n },\n {\n \"name\": \"ps_tool\",\n \"description\": \"List running processes\"\n },\n {\n \"name\": \"cat_tool\",\n \"description\": \"Display content of a file\"\n },\n {\n \"name\": \"top_tool\",\n \"description\": \"Display system processes (snapshot)\"\n },\n {\n \"name\": \"grep_tool\",\n \"description\": \"Search for patterns in files\"\n },\n {\n \"name\": \"head_tool\",\n \"description\": \"Display the beginning of a file\"\n },\n {\n \"name\": \"tail_tool\",\n \"description\": \"Display the end of a file\"\n }\n ]\n }\n ]\n}\n```\n\nTo use this configuration with Cline:\n\n1. Copy the `mcp-config.json` file to your Cline configuration directory\n2. Start Cline with the `--mcp-config` flag pointing to this file\n3. The ITMCP tools will be available for use in your Cline sessions\n\n### Example 1: Ping a Host\n\n```\n# Using the ping_tool to check connectivity to yahoo.com\n\nitmcp\nping_tool\n\n{\n \"target\": \"yahoo.com\",\n \"count\": 4\n}\n\n\n```\n\n### Example 2: SSH Connection to Firewall\n\n```\n# Using the ssh_tool to connect to a firewall and run a command\n\nitmcp\nssh_tool\n\n{\n \"target\": \"firewall.local\",\n \"user\": \"admin\",\n \"command\": \"show interface status\"\n}\n\n\n```\n\n### Example 3: DNS Lookup\n\n```\n# Using the dig_tool to perform a DNS lookup\n\nitmcp\ndig_tool\n\n{\n \"target\": \"yahoo.com\",\n \"type\": \"MX\"\n}\n\n\n```\n\n## Contributing\n\nContributions are welcome! Please feel free to submit a Pull Request.\n\n1. Fork the repository\n2. Create your feature branch (`git checkout -b feature/amazing-feature`)\n3. Commit your changes (`git commit -m 'Add some amazing feature'`)\n4. Push to the branch (`git push origin feature/amazing-feature`)\n5. Open a Pull Request\n\n## License\n\nThis project is licensed under the MIT License - see the LICENSE file for details.\n\n## Author\n\n**Andrew Hopper**\n\n- Email: hopperab@gmail.com\n- Twitter: [x.com/andrewhopper](https://x.com/andrewhopper)\n- Website: [andyhop.316.dev](https://andyhop.316.dev)\n- LinkedIn: [linkedin.com/in/andrewhopper](https://linkedin.com/in/andrewhopper)\n\n## Security Considerations\n\nITMCP is designed with security in mind, but proper configuration is essential:\n\n- Always run in a Docker container for isolation\n- Carefully configure whitelists for hosts, directories, and commands\n- Regularly review audit logs for suspicious activity\n- Keep the system updated with security patches\n- Follow the security best practices in the documentation\n","English","tag","en-US",{"_51":52,"_53":-5,"_24":54,"_56":42,"_57":42,"_58":59,"_62":63,"_85":-5,"_86":87,"_88":89,"_90":91,"_43":44,"_92":76,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":98,"_102":-5,"_103":72,"_104":-5,"_105":-5,"_8":106,"_107":108},"addedAt",["D",1745172021403],"argumentsJsonSchema",[55],"language:python","descriptionMarkdown","descriptionPlainText","githubProject",{"_45":46,"_60":61},"url","https://github.com/andrewhopper/itmcp","githubRepository",{"_64":65,"_66":67,"_68":69,"_70":71,"_43":72,"_73":74,"_78":79,"_80":81,"_83":84},"defaultBranch","main","fullName","andrewhopper/itmcp","githubTreeId",109158,"language","Python","itmcp","owner",{"_75":76,"_8":77},"login","andrewhopper","71q4fj5g7p","recentStargazers",0,"spdxLicense",{"_43":82},"MIT License","stargazers",7,"glamaJson","id",5736,"inspectable",false,"integrations",[],"namespace","npmPackage","prompts","redditPostForeignId","resources","scores",{"_99":-5,"_100":-5,"_101":-5},"license","quality","security","simpleIcon","slug","supportedPlatforms","tools","nqgk4vmea7","updatedAt",["D",1745172037043],"meta",[111,113,115,122,125,127,130,133,136,139,142,144,147,150,152,154,156,158,160],{"_10":112},"ITMCP | Glama",{"_114":42,"_43":41},"content",{"_116":117,"_118":119,"_120":121},"href","https://glama.ai/mcp/servers/@andrewhopper/itmcp","rel","canonical","tagName","link",{"_114":44,"_123":124},"property","og:title",{"_114":42,"_123":126},"og:description",{"_114":128,"_123":129},"https://glama.ai/logo.png","og:logo",{"_114":131,"_123":132},"https://glama.ai/mcp/servers/@andrewhopper/itmcp/og-image","og:image",{"_114":134,"_123":135},"630","og:image:height",{"_114":137,"_123":138},"1200","og:image:width",{"_114":140,"_123":141},"website","og:type",{"_114":117,"_123":143},"og:url",{"_114":145,"_123":146},"Glama – MCP Hosting Platform","og:site_name",{"_114":148,"_43":149},"summary_large_image","twitter:card",{"_114":145,"_43":151},"twitter:title",{"_114":42,"_43":153},"twitter:description",{"_114":131,"_43":155},"twitter:image",{"_114":134,"_43":157},"twitter:image:height",{"_114":137,"_43":159},"twitter:image:width",{"_161":162},"script:ld+json",{"_163":164,"_165":166},"@context","http://schema.org","@graph",[167],{"_163":168,"_169":170,"_171":172},"https://schema.org","@type","BreadcrumbList","itemListElement",[173,180,184,188],{"_169":174,"_175":176,"_43":177,"_178":179},"ListItem","item","https://glama.ai/","Glama","position",1,{"_169":174,"_175":181,"_43":182,"_178":183},"https://glama.ai/mcp","MCP",2,{"_169":174,"_175":185,"_43":186,"_178":187},"https://glama.ai/mcp/servers","Servers",3,{"_169":174,"_175":117,"_43":44,"_178":189},4,"visitorIsMaintainer","routes/_public/mcp/servers/~namespace/~slug/_pages/reviews/_route",{"_36":-5,"_39":193,"_109":203,"_238":-5},{"_51":194,"_53":-5,"_24":195,"_56":42,"_57":42,"_58":196,"_62":197,"_85":-5,"_86":87,"_88":89,"_90":200,"_43":44,"_92":76,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":201,"_102":-5,"_103":72,"_104":-5,"_105":-5,"_8":106,"_107":202},["D",1745172021403],[55],{"_45":46,"_60":61},{"_64":65,"_66":67,"_68":69,"_70":71,"_43":72,"_73":198,"_78":79,"_80":199,"_83":84},{"_75":76,"_8":77},{"_43":82},[],{"_99":-5,"_100":-5,"_101":-5},["D",1745172037043],[204,206,208,210,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226],{"_10":205},"Reviews | ITMCP | Glama",{"_114":207,"_43":41},"Read community reviews and feedback for ITMCP. Discover user experiences, ratings, strengths, and potential limitations of this MCP implementation from actual users.",{"_116":209,"_118":119,"_120":121},"https://glama.ai/mcp/servers/@andrewhopper/itmcp/reviews",{"_114":211,"_123":124},"Reviews | ITMCP",{"_114":207,"_123":126},{"_114":128,"_123":129},{"_114":131,"_123":132},{"_114":134,"_123":135},{"_114":137,"_123":138},{"_114":140,"_123":141},{"_114":209,"_123":143},{"_114":145,"_123":146},{"_114":148,"_43":149},{"_114":145,"_43":151},{"_114":207,"_43":153},{"_114":131,"_43":155},{"_114":134,"_43":157},{"_114":137,"_43":159},{"_161":227},{"_163":164,"_165":228},[229],{"_163":168,"_169":170,"_171":230},[231,232,233,234,235],{"_169":174,"_175":176,"_43":177,"_178":179},{"_169":174,"_175":181,"_43":182,"_178":183},{"_169":174,"_175":185,"_43":186,"_178":187},{"_169":174,"_175":117,"_43":44,"_178":189},{"_169":174,"_175":209,"_43":236,"_178":237},"Reviews",5,"review","actionData","errors"]

Rate & Review