Log inSubmit server
Rootpilot MCP logo

Rootpilot MCP

by Easton-OU

Collects redacted, read-only Linux and Docker diagnostics over SSH through a fixed command whitelist.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Rootpilot MCP

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "easton-ou-rootpilot-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@rootpilot/mcp-ssh-diagnose"
      ],
      "env": {
        "RP_HOSTS": "YOUR_VALUE_HERE",
        "RP_PROBE_URL": "YOUR_VALUE_HERE",
        "RP_NO_PROMO": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

Install not yet sandbox-tested— the server itself is confirmed live (we called its tools/list endpoint). The stdio install command is a separate, ongoing check.

Overview

Easton-OU/rootpilot-mcp MCP server collects read-only Linux and Docker diagnostics from configured hosts over SSH. An MCP client selects from 38 fixed commands, while the server validates inputs, applies timeouts, redacts secrets, truncates output, and returns the evidence. It does not diagnose issues itself or call an LLM; the connected model interprets the results. Reach for it when you need auditable host or container evidence without permitting arbitrary remote commands.

Use cases

  • Diagnose Linux host failures from disk, memory, uptime, and kernel evidence
  • Inspect Docker containers with logs, state, statistics, and redacted metadata
  • Check SSH reachability for configured diagnostic hosts
  • Collect a bounded first-look health snapshot from a server

Key features

  • 38-command read-only whitelist
  • Secret redaction before model output
  • Per-command 15-second timeouts
  • Container-name validation
  • Base diagnostics and container deep-dive shortcuts
  • SSH host configuration through JSON

Tools5

What Rootpilot MCP lets your agent do. Expand a tool for its parameters.

Verified live~485 tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked Today

Recent health check succeeded.

19/19 checks healthy over the last 79d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 11d ago via OSV.dev · @rootpilot/mcp-ssh-diagnose (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars1Stargazers on the source repository.
npm downloads149Package downloads in the last 30 days.
Last commit3mo agoMost recent push to the default branch.
Tools exposed5Callable tools this server registers over MCP.
Directory activity4 viewsConfig copies, upvotes, and views on AllMCPs.

How Rootpilot MCP works

What Easton-OU/rootpilot-mcp MCP server does

Easton-OU/rootpilot-mcp MCP server gathers diagnostic evidence from Linux hosts and Docker environments through direct SSH connections. It is designed for read-only inspection: the server exposes a fixed set of 38 commands and does not provide an arbitrary shell execution tool.

The model using the MCP client decides which evidence to request and interprets the returned output. The server itself does not perform root-cause analysis, invoke a built-in LLM, or coordinate multiple diagnostic rounds. This makes it suitable when the agent should reason from clearly bounded command results while the operator retains control of the hosts.

How it works

Host definitions are loaded from a JSON file controlled by the operator. Each host can specify a name, address, SSH port, user, and either key-based or password authentication. The MCP client sends a request for a host and either a predefined diagnostic shortcut or a set of approved command keys.

Before execution, the server renders only a whitelisted command template. Container names are the only injected value and must contain only letters, numbers, underscores, periods, and hyphens. Each command has a 15-second timeout, and returned output is truncated to limit hangs and excessive responses.

Output is scrubbed before it reaches the model. Redaction covers common key-value secrets, bearer and basic-auth tokens, recognizable API-key formats, PEM private-key blocks, credentials in URLs, and Docker inspection environment values. Data travels between the local MCP process and the configured hosts over SSH, then to the MCP client's model.

Setup and configuration

Run the package through the documented npx command and configure it as a stdio MCP server in the client. Set RP_HOSTS to the path of a hosts.json file. The file can contain entries using key authentication with a keyPath or password authentication with a password.

RP_PROBE_URL optionally changes the target used by outbound-connectivity and DNS probes; its default is https://cloudflare.com. Set RP_NO_PROMO=1 to suppress the one-line pointer to the full RootPilot product. A dedicated least-privilege SSH account is recommended instead of a root account.

Tools and capabilities

Easton-OU/rootpilot-mcp MCP server exposes four tools:

  • list_hosts returns configured host names and can optionally perform a TCP and SSH-banner reachability probe.
  • get_whitelist lists every permitted command, its purpose, shell template, and whether it requires a container argument.
  • collect runs up to eight approved command keys for one host and returns redacted, truncated output. Invalid keys are rejected.
  • collect_base runs a standard first-look group covering Docker processes, filesystem space and inodes, memory, uptime, OOM messages, and Docker daemon status.
  • container_deep_dive collects logs, redacted inspection data, container state, and Docker statistics for one container.

Two built-in prompts are also provided: diagnose-host for an evidence-first troubleshooting walkthrough and health-check for a lighter inspection.

Limitations and notes

The server targets Linux hosts reached directly over SSH and does not support Windows servers or jump hosts in version 1. It only collects evidence; diagnosis quality depends on the MCP client's model and the commands it chooses to request. It does not change host state, send telemetry, or provide the broader history, alert-triggered diagnosis, and multi-host management features of the separate RootPilot product.

The repository is licensed under MIT. Credentials remain in the operator-controlled host configuration and are not logged by the server, but the configured MCP client still receives command output after redaction.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Rootpilot MCP

Easton-OU/rootpilot-mcp is an MCP server that connects an MCP client to Linux and Docker hosts over direct SSH. Its main tools list configured hosts, expose a fixed diagnostic whitelist, collect selected command output, run a base health snapshot, and inspect one container. Results are redacted and truncated; the model performs the diagnosis.

Install it by adding the documented npx command, `npx -y @rootpilot/mcp-ssh-diagnose`, to your MCP client's server configuration. Set `RP_HOSTS` to a JSON host-definition file, restart the client, and then request diagnostics for a configured host.

No, it runs only commands from its fixed 38-command whitelist. The `get_whitelist` tool exposes the complete set, and keys outside it are rejected. Container names are validated before being inserted into command templates.

No, version 1 targets Linux hosts over direct SSH and does not support Windows servers or jump hosts. The server collects evidence only; the connected MCP model interprets the results.

Related MCP servers

All in Command Line All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewRootpilot MCP AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/easton-ou-rootpilot-mcp?style=directory)](https://allmcps.com/mcp/easton-ou-rootpilot-mcp)
HTML Embed
<a href="https://allmcps.com/mcp/easton-ou-rootpilot-mcp"><img src="https://allmcps.com/api/badge/easton-ou-rootpilot-mcp?style=directory" alt="Rootpilot MCP on AllMCPs" /></a>