This MCP server provides Linux host diagnostics through four tools.
Check CPU load averages, RAM utilization, and disk partition space.
Tail log/text files with a required filepath, optional line count (default 50, max 500), and optional regex filtering.
List systemd --user services and active states, optionally only failed units.
List systemd --user scheduled timers and next trigger times.
Provides tools for inspecting local Linux system resources (CPU load, RAM, disk partitions), safely tailing bounded log files with optional regex filtering, and auditing systemd user services and timers.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@SysFlow MCP check my CPU, RAM and disk health, then show failed user services"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
SysFlow MCP is a zero-dependency Linux administration and diagnostics Model Context Protocol server for Claude Desktop, Cursor, Windsurf, and Antigravity. It exposes host CPU/RAM/disk metrics, path-guarded log tailing, systemd --user service and timer inspection, validated unit generation, TCP port auditing, and timeout-bounded argv command execution.
Run directly via uvx:
uvx sysflow-mcpClaude Desktop / Cursor configuration:
{
"mcpServers": {
"sysflow-mcp": {
"command": "uvx",
"args": ["sysflow-mcp"]
}
}
}Related MCP server: DevOps Dashboard MCP Server
System Resource Telemetry: Reads CPU load averages, /proc/meminfo memory usage, and root partition utilization without requiring root privileges.
Path-Guarded Log Tailer: Reads backward in chunks from /var/log, /tmp, or configured SYSFLOW_LOG_DIRS, filtering regex matches before slicing and rejecting binary files or sensitive dotfiles (.env, .ssh, .git/config).
Systemd User Plane Inspection: Lists systemd --user services, failed units, and scheduled timers.
Validated Systemd Unit Generator: Generates .service and .timer definitions, rejecting control-character injection and distinguishing OnUnitActiveSec intervals (12h, 30min) from OnCalendar expressions (hourly, daily, *-*-* 04:00:00).
Listening TCP Port Auditor: Inspects active TCPv4/TCPv6 listeners via ss with a /proc/net/tcp{,6} hex-decoding fallback.
Timeout-Bounded Task Runner: Executes non-interactive argv commands (shell=False by default, secret environment variables scrubbed) inside a dedicated process group that is cleanly killed if the timeout expires.
Tool | Parameters | Description |
| (none) | Returns CPU load averages, RAM usage, and disk space |
|
| Tails text log files inside allowed directories with optional regex filter |
|
| Lists |
| (none) | Lists active |
|
| Runs an argv command with secret scrubbing and process-group timeout |
|
| Emits validated |
| (none) | Lists listening TCPv4 and TCPv6 ports |
Package | Description | Repository |
genesis-blackbox | Runtime flight recorder and AST blast-radius crash compiler | |
pgsafe-mcp | Read-only PostgreSQL/SQLite query guard and PII masker | |
crawlengine-mcp | HTTP web extraction, clean Markdown conversion, and proxy rotation | |
browserbridge-mcp | Session-pooled HTTP DOM inspection and SHA-256 action trail receipts | |
omnibridge-mcp | Multi-channel notification bus with SQLite retry queue | |
fastmcp-forge | MCP server framework and project scaffolder |
If this project is useful in your workflow, you can support ongoing maintenance on Ko-fi.
MIT License. Copyright (c) 2026 Johann Schiffer.
Inspect CPU load average, RAM utilization, and disk partition space.
Inputs: no named parameters.
List systemd --user services, active states, and detect failed background units.
Inputs: failed_only.
List systemd --user scheduled timers and their next trigger times.
Inputs: no named parameters.
Safely read recent lines from a log or text file with optional regex filtering.
Inputs: filepath (required), lines, pattern.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Scored across 4 tools
Each tool targets a clearly distinct area: system resources, log tailing, systemd services, and systemd timers. The service and timer tools are related but their descriptions make the boundary explicit.
All tool names follow a consistent snake_case verb_noun pattern: check_system_resources, tail_logs, inspect_systemd_services, inspect_systemd_timers. There are no mixed conventions or vague standalone verbs.
Four tools are focused and each has a clear purpose, but the set is somewhat thin for a general system diagnostics server. Additional common operations could reasonably be expected.
Core diagnostic areas are covered: resources, logs, services, and timers. Minor gaps exist around process listing, network status, or journal-specific queries, but agents can work around them with the provided tools.
Operate Linux, macOS and Windows from your LLM. Every action runs through an auditable allowlist.
Read-only server insight: why a Linux server or K8s cluster is slow, failing or changed.
Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step.
Linux server administration over OAuth MCP: shell, Docker, systemd, files and monitoring.
