The full upstream README, mirrored here for reference. Install config, tool schemas, adoption signals, and an original overview live on the Ellmos ServerCommander listing page.
Alpha Model Context Protocol (MCP) server for local-first server operations: deployment dry-runs, mail configuration status, access-log analysis, and resilient HTTP health checks.
German README: README_de.md
Part of the ellmos-ai family under the open-bricks open-source umbrella.
[!NOTE] Discoverability & AI Search: Published on npm as
ellmos-servercommander-mcp, cataloged for MCP ecosystems inserver.json,glama.json, andsmithery.yaml, and indexed for AI/LLM search inllms.txt.
| Goal | Start with | Key Features |
|---|---|---|
| Add ServerCommander to Claude Desktop, Claude Code, Cursor, or another MCP host | MCP Client Configuration | Zero-friction global npm install or npx invocation |
| Check a public or internal HTTP endpoint before a deploy | sc_health_check | Concurrent non-blocking requests, latency timings, resilient batch error handling |
| Inspect Apache/Nginx access logs for errors, bots, referrers, and suspicious paths | sc_logs_analyze | Status code breakdown, byte transfer sums, bot markers, optional JSON reports |
| Build a deterministic dry-run deployment manifest before SFTP/SSH execution | sc_deploy and sc_deploy_status | Recursive SHA-256 tree hashing, symlink bypass protection, SQLite history |
| Wire mail operations later without accidental email dispatches today | sc_mail_list, sc_mail_read, sc_mail_send, sc_mail_search | Protocol readiness validation, credential inspection, safe alpha staging |
| Capability / Invariant | Implementation Guarantee | Technical Details |
|---|---|---|
| 100% Local-First & Dry-Run Staging | Strict non-destructive default | Deployment tools calculate SHA-256 hashes locally without executing unauthorized remote writes. |
| Unprivileged Execution (Non-Elevation) | Zero root/administrator requirements | Runs entirely within standard user permissions; never requires sudo or privilege elevation. |
| Secret & Credential Isolation | Zero-leak release packaging | .env, .npmrc, .pypirc, private keys (id_rsa, *.pem), and tokens are excluded by .gitignore and .npmignore. |
| Deterministic Manifest Verification | Cryptographic release integrity | Calculates recursive SHA-256 digests; nested symlinks are tracked but excluded from tree traversal. |
| Resilient Health Probes | Non-blocking batch worker threads | HTTP probes execute via asyncio.to_thread with strict timeouts; malformed URLs never abort batches. |
| Structured Log Breakdown | Local forensic inspection | Parses Common/Combined log formats; detects HTTP 4xx/5xx spikes, bots, suspicious traversal attempts. |
| Mail Readiness Diagnostic | Non-executing safe staging | Reuses verified mail-connector module for IMAP probes only when explicitly configured; SMTP send stays disabled. |
| 6-Language i18n Engine | Comprehensive multilingual support | Full localization for tool descriptions, schema arguments, and errors in en, de, es, zh, ja, ru. |
stdio) via the Python MCP SDK and Node.js process wrapper.ellmos-ai organization.sc_deploy builds local SHA-256 manifests, configuration diagnostics, and opt-in SQLite history records in dry-run mode; sc_mail_* reports protocol-specific IMAP/SMTP readiness without opening mail connections by default.en, de, es, zh, ja, ru with automatic English fallback.The npm package contains a Node wrapper that starts the Python server. You still need Python 3.10+ and the Python package mcp>=1.0.0.
Avoid creating a .venv inside cloud-synced folders if your sync client locks files. If you need an isolated environment, create it outside that folder.
ServerCommander searches for configuration files in this hierarchical order:
SERVERCOMMANDER_CONFIG_PATH./servercommander.toml./config/servercommander.toml~/.config/servercommander/servercommander.tomlAn annotated template is included at config/servercommander.example.toml.
Secrets should always be referenced through environment variables, for example $MAIL_PASSWORD or $SFTP_PASSWORD.
sc_health_check: Checks HTTP/HTTPS endpoints and reports status codes, response headers, and latency. Malformed endpoint URLs are captured gracefully as failed checks rather than aborting the batch.sc_logs_analyze: Analyzes Apache/Nginx access logs from inline text or local files, reporting HTTP status classes (2xx/3xx/4xx/5xx), total bytes transferred, top referrers, 404/500 error paths, suspicious bot markers, and optional JSON report persistence via persist_report.sc_deploy: Creates a dry-run deployment plan with a local SHA-256 manifest and profile diagnostics without performing remote mutations. Nested symbolic links are tracked as skipped_symlinks to prevent unexpected directory traversal.sc_deploy_status: Displays configured deployment profiles, profile diagnostics, and recent dry-run deployment records retrieved from the local SQLite history database.sc_mail_list, sc_mail_read, sc_mail_send, sc_mail_search: Safe alpha status responses with action-specific IMAP/SMTP readiness diagnostics. With [mail].execution_enabled = true, sc_mail_list executes a read-only IMAP reachability probe (connect + folder listing) by reusing the canonical mail-connector module without reimplementing an IMAP client.ServerCommander is the ellmos operations MCP server for local-first server administration workflows. Use this repository when searching for:
It is not the GitHub MCP server, not a generic arbitrary shell-execution MCP server, not a cloud hosting provider control panel, and not an unverified production SFTP/IMAP auto-executor. The current alpha surface is intentionally diagnostic, dry-run first, and safe by default.
This MCP server is an integral component of the ellmos-ai ecosystem and the open-bricks open-source software family.
| Server | Tools | Primary Focus | npm Package |
|---|---|---|---|
| FileCommander | 46 | Filesystem operations, process supervision, sessions, cloud-lock handling | ellmos-filecommander-mcp |
| CodeCommander | 22 | Code analysis, AST inspection, JSON repair, imports, diffs, regex | ellmos-codecommander-mcp |
| Clatcher | 12 | File repair, encoding correction, format conversion, batch tools | ellmos-clatcher-mcp |
| n8n Manager | 18 | n8n workflow management, deployment, node exploration | n8n-manager-mcp |
| ControlCenter | 20 | MCP stack discovery, profile management, control plane routing | ellmos-controlcenter-mcp |
| Homebase | 45 | Local-first LLM memory, knowledge base, swarm orchestration | ellmos-homebase-mcp |
| ServerCommander | 8 | Server operations: health checks, log analysis, dry-run manifests | ellmos-servercommander-mcp |
| Blender Use | 3 | Headless Blender 3D asset QA and automated FBX reimport | ellmos-blender-use-mcp |
| Open Compute | 10 | Model-agnostic computer use: screen capture, safety-gated actions | open-compute-mcp |
| Project | Description |
|---|---|
| BACH | Local-first text-based OS for LLM agents — 113+ handlers, 550+ tools, SQLite memory |
| open-compute | Model-agnostic computer-use core powering Open Compute MCP |
| clutch | Provider-neutral LLM orchestration with auto-routing and budget tracking |
| rinnsal | Lightweight agent memory, connectors, and automation infrastructure |
| sqlite-transit-sync | Encrypted SQLite transit synchronization & additive read-replica engine |
| workflowhooker | Git-hook-driven workflow automation and execution safety boundaries |
| system-explorer | Local-first system composition, module introspection, and fleet verification |
| companion-for-agy | Antigravity developer companion & telemetry bridge |
Our partner organization open-bricks provides desktop productivity applications built for the age of AI:
For vulnerability reporting, response SLAs, and local-first security invariant details, see our bilingual SECURITY.md.
security@ellmos.ai / security@open-bricks.org.