termius-mcp
Connects to machines saved in a Termius vault with native GUI approval for each connection, token-authorized SSH tunnels through jump-host chains, one-shot and persistent shell execution, background task management, and SFTP operations including read, write, upload, download, and list.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
@c0dingbear/termius-mcp
An MCP server that lets agents connect to the machines saved in your Termius vault — safely.
Native GUI approval: every connection pops a dialog on your computer (Allow / Allow-for-session / Deny), via
@c0dingbear/access-prompt. "Allow for this session" mints aconsentTokenso the agent can reconnect to that machine without re-prompting until the computer restarts.Token-authorized SSH tunnels (forward / reverse), through jump-host chains.
Exec: one-shot (
termius_tunnel_exec, with automatic PTY fallback) and a persistent interactive shell (termius_session_exec).Background tasks: start / check / kill long-running commands.
SFTP:
termius_sftp_write(plain-text only),read,upload,download,list— so agents stop smuggling files through base64 echoes.Resilient: keepalive on connections, and dropped tunnels are marked dead with a clear message telling the agent to reconnect (instead of a bare "Not connected").
Host discovery/decryption comes from
@c0dingbear/termius-vault.
Install & configure
npm install -g @c0dingbear/termius-mcp
termius-mcp setup # detect your agents and add the MCP configtermius-mcp setup finds installed agents — opencode, Claude Code, Claude
Desktop, Cursor, Pi — and offers to add the server to each (merges into the
existing config, backs it up first, and is idempotent). Flags: --yes
(non-interactive), --print (just show the manual snippet).
On a global install the installer also runs this automatically if it's
interactive; it auto-skips after 10 seconds and never edits a config
without an explicit "yes". Non-interactive/CI installs just print a hint. So the
two things you need are always: the package installed && your agent
configured (the setup step does the second).
Running the server directly (what the agent launches):
termius-mcp # speaks MCP over stdioManual MCP client config
{
"mcp": {
"termius": {
"type": "local",
"command": ["termius-mcp"],
"environment": { "DISPLAY": ":0" }
}
}
}DISPLAY (Linux) must point at your desktop session so the approval dialog can
appear. Requires the Termius desktop app installed and logged in.
Related MCP server: quick-shell
License
MIT
This server cannot be deployed
Maintenance
Related MCP Connectors
Scoped, audited SSH exec, sessions, and SFTP on your saved servers without exposing credentials
Manage remote servers, SSH terminals, files, databases and proxies with scoped access and approvals.
Securely control computers you explicitly pair through files, terminals, processes, screenshots, desktop UI/input, clipboard, browser automation, diagnostics, and document tools.
Connect AI assistants to your approved computer for files, commands, browser and desktop tasks.
Related MCP Servers
- AlicenseBqualityDmaintenanceEnables secure SSH connections to remote servers for executing shell commands and managing active sessions. It supports authentication via passwords or private keys and provides optional host-based access control.473 npmMIT
- AlicenseNot gradedqualityCmaintenanceEnables human-approved SSH terminal sessions and confined SFTP file operations for SSH-configured devices, with user-controlled terminal and file explorer.AGPL 3.0
- AlicenseNot gradedqualityAmaintenanceEnables AI agents to securely execute commands on remote hosts via SSH and SFTP, with persistent shells, file transfers, screenshots, and an audit log.5MIT
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to manage remote servers via SSH, including command execution, multi-host batch operations, SFTP file transfer, background job handling, DevOps diagnostics, port tunneling, and safety guardrails like high-risk command blocking and read-only mode.MIT