Server MCP Agent
Provides tools for inspecting and diagnosing Docker resources, including allowlisted containers and container logs.
Provides tools for inspecting Git repositories within allowlisted workspaces, including git status and diffs.
Provides tools for monitoring and managing a Linux host, including host status, processes, listening ports, and systemd service status/logs.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Server MCP Agentwhy is nginx failing? check service status and recent logs"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Server MCP Agent
ChatGPT-first, host-resident Linux server MCP — an open-source Python MCP server with OAuth, explicit workspace policies, system monitoring, Docker/systemd diagnostics, safe file edits and human-approved operations.
Status: v0.1 experimental. Not audited or penetration-tested. Install on a disposable VM before using a production host. It is deliberately not an unauthenticated root shell. SSH remains an emergency recovery channel.
Features
Tool | Scope | Effect |
|
| Identity and host health |
|
| Workspace-bounded UTF-8 files, hashes |
|
| Inspect repositories |
|
| Process/network diagnostics |
|
| Allowlisted systemd services |
|
| Allowlisted Docker resources |
|
| Recent approval and mutation events |
|
| Optional atomic compare-and-swap workspace editing |
|
| Human-approved restarts/runbooks |
Administrative operations require BOTH an OAuth access token with server:operate AND permissions.operate_enabled=true AND approval via local CLI, with five-minute, one-use requests. There is no tool to self-approve.
Related MCP server: ChatGPT VPS MCP
Architecture
ChatGPT custom MCP app
|
HTTPS + OAuth 2.x (OIDC/JWT audience-scoped)
|
Caddy/NGINX TLS reverse proxy
|
127.0.0.1:8765/mcp <-- MCP Python SDK Streamable HTTP
|
non-root server-mcp service
|---- allowlisted workspaces / Git
|---- systemd and journalctl read-only
|---- Docker diagnostics (optional; socket access has high privilege!)
|---- out-of-band operator approvals in SQLite
|---- predefined runbooks, never arbitrary model-supplied shellImportant requirements
Linux, Python 3.11+,
systemdfor service management, optionallydocker,git,ss,journalctl.An external OAuth 2.1/OIDC authorization server (Keycloak/Auth0/etc) that issues JWT access tokens with the exact MCP resource URL in the
audclaim, properscopestrings andRS256/ES256signing. Server MCP is a resource server, not an identity provider.Public HTTPS address or supported secure MCP tunnel. The agent binds only to localhost.
Availability of write tools in ChatGPT depends on its plan/workspace permissions and whether the custom MCP app is enabled.
Quick deployment
Follow docs/DEPLOY.md and configure config.example.toml. This repository does not ship a remotely executable curl-to-shell installer.
python3 -m venv .venv
.venv/bin/python -m pip install -e '.[dev]'
.venv/bin/pytest -qDo not run the MCP service as root. See SECURITY.md, THIRD_PARTY.md, and docs/CODEX_DEPLOY_PROMPT.md.
Source inspirations
Built on the official MIT-licensed MCP Python SDK, psutil, and PyJWT. The server-operations model is informed by MIT-licensed fleet and Dozor. Their code has not been copied or vendored: tools are newly implemented around established dependencies. GPL-3.0 1Panel is not copied.
MIT license. Experimental and provided without warranties.
This server cannot be deployed
Maintenance
Related MCP Connectors
Operate Linux, macOS and Windows from your LLM. Every action runs through an auditable allowlist.
Remote MCP server exposing your Node Command fleet (files, shell, processes, browser) to AI hosts.
Termalin's hosted MCP server. Claude, ChatGPT or any MCP client runs commands, moves files over SFTP, queries databases and reads server metrics and monitoring alerts on your servers, keylessly through Termalin Connectors: no SSH key is handed over and no inbound port is opened. Per-host command policy and an audit log. Needs a termal.in Pro or Team account (new accounts start with a 14-day Pro trial).
Work on your own computers from Claude or ChatGPT: run commands, edit and search files.
Related MCP Servers
- AlicenseNot gradedqualityAmaintenanceTurns any Linux server into an AI-agent-accessible machine over HTTPS, allowing MCP clients like ChatGPT, Claude, and Grok to securely control files, run shell commands, inspect system state, query SQLite, and work with git behind a bearer token.136 npm4MIT
- AlicenseNot gradedqualityBmaintenanceEnables ChatGPT to securely inspect and administer a Linux VPS over Streamable HTTP, with OAuth protection, workspace file tools, and optional root command execution.MIT
- AlicenseNot gradedqualityBmaintenanceEnables ChatGPT to securely control remote development servers over OAuth-protected MCP, exposing workspace-bounded tools for file editing, command execution, Git operations, and running Codex or GitHub Copilot subagents.10 npmMIT
- AlicenseNot gradedqualityBmaintenanceEnables MCP clients such as ChatGPT and Claude to administer Linux or macOS hosts through authenticated Streamable HTTP, including running shell commands, reading and writing files within a workspace, listing directories, and retrieving system metrics.110 PyPI1MIT