lordraw/linux-mcp repository overview

# 1. Create your .env from the template
curl -fsSL https://raw.githubusercontent.com/lordraw77/linux-mcp/main/.env.example -o .env
$EDITOR .env   # fill in your SSH servers

# 2. Run (keep -i so the MCP client can pipe JSON-RPC to stdin)
docker run --rm -i --env-file .env lordraw/linux-mcp

# 1. Create your .env from the template (set UXMCP_TRANSPORT=sse)
curl -fsSL https://raw.githubusercontent.com/lordraw77/linux-mcp/main/.env.example -o .env
$EDITOR .env

# 2. Run as a persistent HTTP service
docker run --rm -p 9880:9880 \
  --env-file .env \
  -e UXMCP_TRANSPORT=sse \
  -e UXMCP_SSE_PORT=9880 \
  lordraw/linux-mcp

# Connect your MCP client to:  http://localhost:9880/sse

# stdio (default) — client spawns the container via stdin/stdout
UXMCP_TRANSPORT=stdio

# sse — container runs as a persistent HTTP+SSE service
# UXMCP_TRANSPORT=sse
# UXMCP_SSE_HOST=0.0.0.0   # bind address (default: 0.0.0.0)
# UXMCP_SSE_PORT=8080       # TCP port     (default: 8080)

# ── Server 1: root via SSH key ─────────────────────────────────────────────
UXMCP_SERVER_1_LABEL=web-server
UXMCP_SERVER_1_HOST=192.168.1.10
UXMCP_SERVER_1_PORT=22
UXMCP_SERVER_1_USER=root
UXMCP_SERVER_1_KEY_PATH=/root/.ssh/id_ed25519

# ── Server 2: unprivileged user + sudo ────────────────────────────────────
UXMCP_SERVER_2_LABEL=db-server
UXMCP_SERVER_2_HOST=192.168.1.20
UXMCP_SERVER_2_PORT=22
UXMCP_SERVER_2_USER=deploy
UXMCP_SERVER_2_KEY_PATH=/home/user/.ssh/deploy_rsa
UXMCP_SERVER_2_SUDO_PASSWORD=s3cr3t

# ── Server 3: password auth ───────────────────────────────────────────────
UXMCP_SERVER_3_LABEL=backup
UXMCP_SERVER_3_HOST=10.0.0.5
UXMCP_SERVER_3_PORT=2222
UXMCP_SERVER_3_USER=admin
UXMCP_SERVER_3_PASSWORD=mypassword
UXMCP_SERVER_3_SUDO_PASSWORD=mypassword

docker run --rm -i \
  --env-file .env \
  -v $HOME/.ssh:/root/.ssh:ro \
  lordraw/linux-mcp

docker compose run --rm linux-mcp

# Start in background
docker compose --profile sse up -d linux-mcp-sse

# View logs
docker compose logs -f linux-mcp-sse

# Stop
docker compose --profile sse down

{
  "mcpServers": {
    "linux-ssh": {
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "--env-file", "/path/to/.env",
        "-v", "/home/user/.ssh:/root/.ssh:ro",
        "lordraw/linux-mcp"
      ]
    }
  }
}

{
  "mcpServers": {
    "linux-ssh": {
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "--env-file", "/path/to/.env",
        "-v", "/home/user/.ssh:/root/.ssh:ro",
        "lordraw/linux-mcp"
      ]
    }
  }
}

http://localhost:8080/sse

{
  "mcpServers": {
    "linux-ssh": {
      "transport": "sse",
      "url": "http://localhost:8080/sse"
    }
  }
}

Which servers are configured?
Show system info for all servers.

Run `uptime` on web-server.
Execute `df -h` on all servers simultaneously.
Run `systemctl status nginx` on web-server with sudo.

Read /etc/nginx/nginx.conf from web-server.
Tail the last 100 lines of /var/log/syslog on db-server.
Create directory /opt/myapp/releases on web-server.
Download /etc/hosts from db-server.

Collect 5 CPU and memory samples from web-server, 3 seconds apart.
Show the top 10 processes by memory on db-server.

Restart the nginx service on web-server.
List all failing systemd units on db-server.
Kill process 1234 on web-server with sudo.

List running containers on web-server.
Show the last 200 log lines for the api container.
Restart the worker container on db-server.

Install htop on web-server.
List installed packages matching python on db-server.

Show firewall rules on web-server.
Open port 8080/tcp on web-server.
Block port 3306/tcp on db-server.

Ping 8.8.8.8 from web-server.
Traceroute to github.com from web-server.
Check if port 5432 is reachable on db-server.

List all non-system users on web-server.
Create user deploy with bash shell on web-server.
Show all groups on db-server.

Show disk usage for /var on db-server.
List all mounted filesystems on web-server.

List all crontabs on web-server.
Add cron job "0 2 * * * /opt/backup.sh" on web-server.
Remove cron jobs matching backup from web-server.

Check the TLS certificate for example.com:443 via web-server.
Is the certificate for api.mycompany.com expiring soon?

Show git status of /opt/myapp on web-server.
Pull the latest changes for /opt/myapp on web-server, branch main.
Show the last 5 commits for /opt/myapp on db-server.

Reload nginx on web-server.
Test the Apache config on db-server.
Show nginx status on web-server.

Run free -m on web-server and db-server at the same time.
Deploy /opt/deploy.sh across all servers in parallel.