"Shell" matching MCP servers:

Enables AI agents to monitor server health and capacity, diagnose outages, inspect Docker and deployment status, and perform safe, bounded recovery actions via MCP without granting unrestricted shell or SSH access.

More than just an MCP server that covers the entire range of Docker management tasks, it helps you create workflows to easily manage your Docker environments at scale. It allows you manage multiple local or remote (TCP, TLS, SSH) docker instances and exposes things like logs and stats as resources so that you can monitor and triage all of them.

MCP server — read-only log access for AI assistants. Debug your Linux server with AI, without giving the AI shell access.

A read-only MCP server that exposes AI Disk Doctor Core's scan, model inventory, and history tools via local stdio, with no mutation or shell capabilities.

Security, cost, and health governance proxy for MCP infrastructure. Enforces YAML-configurable security policies (blocklists, rate limits, token budgets), tracks real token costs via tiktoken, monitors server health with live JSON-RPC probes. Features OAuth 2.1/OIDC with RBAC, web dashboard, payload normalization, semantic shell AST analysis, mTLS, and a formal STRIDE threat model.

Provides read-only access to systemd units, failed units, timers, unit status and files, journal entries, boots, and system summaries through eight queries. Enables inspection and triage of systemd services without granting write access or shell execution.

Enables secure, read-only inspection of a VPS over SSH through approved operations such as system health, disk usage, container logs, and service status, without giving the AI unrestricted shell access.

Enables recording a Wine or macOS program on an Apple silicon Mac and analyzing its GPU usage — GPU milliseconds per frame, frame pacing, FPS and memory — through Instruments' Metal System Trace, and also reads Metal .gputrace captures without Xcode and reports Apple's published GPU family facts. Recording, listing, comparing, and paging through traces and captures are exposed as tools that a shell or an AI coding agent can call directly.

MCP server enabling local network interaction, shell command execution, system resource monitoring, and SSH-based remote device management.

Enables read-only inspection of local Windows and Linux systems for host, resource, network, service, software, identity, startup, certificate, SSH key metadata, and environment-variable name evidence through MCP tools. It normalizes platform outputs into stable schemas while avoiding arbitrary shell execution, credential reads, secret values, or remediation.

A read-only MCP server that lets an AI assistant inspect a single AWS lab instance's EC2 health, recent system/nginx errors from CloudWatch, and nginx service status via SSM, with strict allowlisting and no generic shell access.

Enables safe VPS diagnostics and Docker/Docker Compose management over SSH, providing predefined read-only and mutating tools for system monitoring, container inspection, and Compose orchestration without exposing arbitrary shell execution.

Enables AI assistants to run real Exchange Management Shell tasks against on-premise Microsoft Exchange for administration, monitoring, and troubleshooting, including recipient provisioning, transport troubleshooting, and DAG/health monitoring.

Gives AI coding agents read-only access to Grafana's Loki logs, Prometheus metrics, Tempo traces and active alerts from within a project, using per-project context declared in the repo and one-command switching between test and prod environments. Credentials are discovered by parsing shell rc files directly, so it works even when spawned as a non-interactive MCP client process.

Enables read-only observability of a Linux host via MCP, exposing allowlisted systemd, docker, nginx, logs, disk, and cert info without shell access.

MCP server for full control of STB (Amlogic S9xx / Armbian) via SSH, enabling shell commands, file management, Docker operations, AdGuard Home configuration, and system monitoring.

Enables AI agents to autonomously check, diagnose, and recover Dockerized services through safe, tool-based ops without direct host shell access.

Read-only MCP server to inspect allowlisted Docker containers, systemd services, JSONL logs, and HTTP health endpoints without arbitrary shell access.

Enables AI agents to access Zabbix monitoring, MeshCentral inventory and admin shell execution, and read-only Express Accounting data through role-separated MCP endpoints secured by token-based RBAC.

A read-only MCP server for observing registered local and SSH hosts, providing system, service, container, Git, and GPU status/log inspection through a closed-world registry without arbitrary shell access.