"Ghost" matching MCP servers:

GhostLink is a security-hardened MCP server that gives AI coding agents safe, deterministic access to local repositories through sandboxed, policy-gated tools for searching, reading, patching, and running curated commands.

Enables a machine to expose its registered folders and locally added tools to remote callers over MCP, deciding each request against local policy with default-deny access, per-person tool grants, pre-approval for anything not marked read-only, and an on-machine audit log. Also runs a folder file server offering directory listing, text reading, and text writing where permitted.

Enables Claude Desktop to control a local host machine through shell, file, git, network, Docker, package, and system monitoring tools, with approval-gated destructive operations.

Exposes a Windows or Linux host terminal to remote MCP clients via Streamable HTTP, enabling command execution, tunnel management, and privileged operations with security features like OAuth and audit logging.

Enables MCP clients such as ChatGPT and Claude to administer Linux or macOS hosts through authenticated Streamable HTTP, including running shell commands, reading and writing files within a workspace, listing directories, and retrieving system metrics.

An HTTP-based MCP server that provides filesystem tools and code analysis, enabling LLMs to read, write, list files, and analyze code securely.

Enables AI-controlled administration of remote Linux hosts and containers, including bounded shell execution, persistent PTY sessions, durable jobs/tasks, hardened filesystem access, process/service control, and resumable transfers.