Let AI assistants operate your Linux servers — behind a human co…

What is devops-mcp?

devops-mcp is a mode-based MCP (Model Context Protocol) server that lets AI assistants such as Claude Desktop, Cursor, and Windsurf operate Linux servers through a human consent gate the AI cannot self-approve. It runs on Node.js (≥18) and is designed for developers who want AI help managing servers without full shell access to production machines.

How to use devops-mcp?

Clone the repository, run npm install && npm run build, then generate an elevation token using openssl rand -hex 24 and save it. Add the server to your MCP client's config (e.g., claude_desktop_config.json) with the token in the env block, fully quit and reopen the client. Afterwards, ask the AI to "add my server at …" and it will guide you through onboarding.

Key features of devops-mcp

• Three-tier mode: SAFE (read-only), PROVISION, FULL with expiry
• Out-of-band consent token invisible to the model
• Production write-gate requiring backup verification on catastrophic ops
• Read-only server discovery scan and profile diff
• Port-conflict check before deployment
• JSON-lines audit log of all commands and approvals

Use cases of devops-mcp

• Add a production or staging server and have the AI scan its OS, ports, and services in read-only mode.
• Deploy a new project by generating a reviewable script that checks port conflicts first.
• Rotate SSH credentials or consent token without re-adding the server.
• Operate multiple servers simultaneously with per-server identity and anti-drift checks.

FAQ from devops-mcp

How is devops-mcp different from generic "run-any-command" MCP servers?

Generic servers give the AI full shell on a live server, risking unintended changes. devops-mcp separates reading (always allowed in SAFE mode) from changing, which requires a human-provided consent token that the AI never sees.

What MCP clients does devops-mcp support?

It works with any MCP client that supports the stdio transport, including Claude Desktop, Cursor, and Windsurf. The same config structure applies to all.

What happens if I lose my elevation token?

There is no recovery flow – the token is the sole gate. You can hand-edit your MCP client config to set a new one, or ask the AI to call rotate_consent_token if you still have the old token (circular if lost). No back door is shipped.

How does devops-mcp handle multiple servers?

Each server gets a unique serverId and a keyed SSH connection. Commands require the serverId when more than one server is connected; ambiguous calls are refused. The response always echoes the target server ID and active connections.

Is devops-mcp free and open source?

The README does not mention pricing or licensing. It is available as a GitHub repository under the listed steps.