MCP Server Control
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@MCP Server Controlcheck disk space"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
MCP Server Control š„ļø
A production-grade MCP (Model Context Protocol) server that lets AI cloud services (Claude, ChatGPT, Gemini, Cursor, etc.) control and manage your Linux server securely via HTTP/SSE.
⨠Features
20 MCP Tools ā run commands, manage files, control services, manage users & SSH keys
10 Security Layers ā API key + JWT tokens + IP whitelist + rate limiting + audit logs + command blacklist + path sandboxing + HTTPS + Helmet + CORS
Role-Based Access ā
admingets full control;useris sandboxed to their home directoryPer-User API Keys ā issue scoped keys for different users/services
Audit Logging ā every tool call logged with user, IP, duration, result (daily rotating JSON)
systemd Ready ā auto-start on boot
Related MCP server: mcp-devtools
š Quick Start
# 1. Clone
git clone https://github.com/MarketingLimited/mcp-server-control.git
cd mcp-server-control
# 2. Install dependencies
npm install
# 3. Setup (generates secrets, .env, optional TLS cert)
node setup.js
# 4. Start
npm start
# 5. Or run as system service
cp mcp-server.service /etc/systemd/system/
systemctl enable --now mcp-serverš Connect Your AI Client
Claude Desktop
{
"mcpServers": {
"server-control": {
"type": "sse",
"url": "http://YOUR_SERVER_IP:4444/mcp",
"headers": { "X-API-Key": "YOUR_ADMIN_KEY" }
}
}
}Cursor / VS Code
{
"mcpServers": {
"server-control": {
"url": "http://YOUR_SERVER_IP:4444/mcp",
"type": "sse",
"headers": { "X-API-Key": "YOUR_ADMIN_KEY" }
}
}
}š ļø Available Tools
Category | Tools |
System |
|
Files |
|
Services |
|
Users |
|
š Security Architecture
AI Client ā HTTPS ā IP Whitelist ā API Key/JWT ā Rate Limit ā Scope Check ā Sandbox ā ToolLayer | Details |
HTTPS/TLS | TLS 1.2+ with strong cipher suites |
IP Whitelist | Per-key or global CIDR restrictions |
API Key | 64-byte cryptographically random hex keys |
JWT Tokens | IP-bound, 8h expiry, issued per-session |
Rate Limiting | 60 req/min global, 10/15min auth |
Command Guard | Blacklist of destructive patterns |
Path Sandbox | Users restricted to |
Audit Logs | Structured JSON, 30-day retention |
š Project Structure
āāā server.js # Main MCP server (Express + SSE)
āāā security.js # All auth & security middleware
āāā audit.js # Structured audit logging
āāā keygen.js # API key generator
āāā setup.js # First-time setup wizard
āāā mcp-server.service # systemd unit file
āāā .env.example # Config template
āāā tools/
āāā system.js # Shell commands, processes, system info
āāā files.js # File system CRUD
āāā services.js # systemd & firewall management
āāā users.js # User & SSH key managementāļø Configuration
Copy .env.example to .env and configure:
PORT=4444
USE_HTTPS=true
JWT_SECRET=<64-byte random hex>
ADMIN_API_KEY=<generated with keygen.js>
ALLOWED_IPS=203.0.113.10,192.168.1.0/24 # optional
RATE_LIMIT_MAX_REQUESTS=60
AUDIT_LOG_KEEP_DAYS=30š Generate API Keys
# Generate admin key
node keygen.js admin admin
# Generate scoped user key
node keygen.js alice user run_command,read_file,write_fileš Monitor
# Live audit log
tail -f logs/audit-$(date +%Y-%m-%d).log | jq
# View active sessions
curl http://localhost:4444/admin/sessions -H "X-API-Key: YOUR_KEY"
# Health check
curl http://localhost:4444/healthRequirements
Node.js 18+
Linux (systemd-based)
openssl(for HTTPS)Root or sudo for full admin tools
License
MIT
This server cannot be deployed
Maintenance
Related MCP Connectors
MCP server for AI agents to plan, verify, and deploy Cloudflare-native apps.
- ArcjetOAuthcom.arcjet
An MCP server for Arcjet - the runtime security platform that ships with your AI code.
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
An MCP server that provides an API to LLMs to manage their JumpCloud resources.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceAn MCP server that gives AI assistants full SSH/SFTP remote operations ā session management, command execution, interactive shells, file transfers, port forwarding, and system diagnostics.2MIT
- AlicenseBqualityDmaintenanceProduction-grade MCP server that gives AI agents safe access to your local dev environment: filesystem, databases, processes, and OpenAPI specs.1528 npm3MIT
- AlicenseAqualityDmaintenanceA production-ready MCP server that enables AI assistants to execute shell commands, manage files, monitor system resources, and automate complex workflows with advanced features like stock tracking and web automation.718 npmMIT
- FlicenseNot gradedqualityCmaintenanceAn MCP server for managing Ubuntu/Linux systems, enabling AI assistants to execute commands, manage services, files, logs, and packages via local or SSH connection.-