Log inSubmit server
Kastell logo

Kastell

by kastelldev

Audits and hardens Linux servers, manages cloud infrastructure, and exposes security operations through MCP tools.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Kastell

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "kastelldev-kastell": {
      "command": "npx",
      "args": [
        "-y",
        "kastell"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

We couldn’t confirm it starts correctly

We ran the install command but it didn't respond within our test window — this can mean a slow first-time install rather than a real problem.

npx -y kastell

No response to initialize.

This is an experimental automated check and can have false negatives — missing environment variables, a slow cold install, etc. It doesn’t necessarily mean something’s wrong. Last checked 1mo ago.

Overview

kastelldev/kastell MCP server brings server auditing, hardening, maintenance, and infrastructure management into MCP-compatible AI clients. Kastell combines a CLI with a built-in MCP server and supports Linux servers managed over SSH, including infrastructure from Hetzner, DigitalOcean, Vultr, and Linode. Use it when an agent needs to inspect server security, configure UFW or SSH protections, collect evidence, manage snapshots, or run maintenance workflows.

Use cases

  • Audit Linux servers against security checks
  • Harden SSH and configure fail2ban
  • Manage UFW firewall settings
  • Run maintenance across multiple servers
  • Create backups and VPS snapshots

Key features

  • Server security audits with remediation
  • SSH hardening and fail2ban setup
  • UFW firewall management
  • Cloud server provisioning
  • Backup, restore, and snapshot workflows
  • MCP access for AI agents

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 2d ago

Recent health check succeeded.

21/21 checks healthy over the last 79d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 10d ago via OSV.dev · kastell (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars60Stargazers on the source repository.
npm downloads720Package downloads in the last 30 days.
Last commit23d agoMost recent push to the default branch.
Install checkInconclusiveDidn't respond in our test window — often a slow first install.
Directory activity5 viewsConfig copies, upvotes, and views on AllMCPs.

How Kastell works

What kastelldev/kastell MCP server does

kastelldev/kastell MCP server connects an MCP-compatible AI agent to Kastell's infrastructure security and server-management functions. The underlying Kastell CLI can provision servers, register existing hosts, inspect status, connect over SSH, configure firewalls, harden SSH, run audits, manage snapshots, perform backups, and maintain multiple servers.

Security auditing covers areas such as SSH, firewalls, Docker, TLS, and HTTP headers. Audit output can be rendered as JSON, HTML, a badge, a score, or a compact summary. Commands can also apply fixes interactively, preview changes with dry-run mode, watch for changes at an interval, and filter results by CIS, PCI-DSS, or HIPAA mappings.

How it works

Kastell runs as an npm-distributed command-line application and includes an MCP server for agent access. The README's quick start uses npx kastell to launch an interactive menu; known CLI commands can instead be entered directly.

The tool maintains server records locally and provides operations for individual servers or groups using options such as --all. Maintenance can combine a pre-update snapshot, platform update, health check, and reboot. Audits can target a registered server or an unregistered host supplied with --host.

Setup and configuration

The documented quick-start command is:

Terminal
npx kastell

The interactive interface guides users through actions and configuration options. Direct commands include kastell init for deployment, kastell add for an existing server, and kastell config for configuration management.

Kastell can configure server access, firewall settings, SSH hardening, fail2ban, domains, and SSL as part of its management workflows.

Tools and capabilities

The kastelldev/kastell MCP server is intended for agent-driven infrastructure work, including:

  • Checking server status and health
  • Deploying, adding, removing, importing, and exporting server records
  • Running security audits and explaining failed checks
  • Applying or previewing audit remediations
  • Configuring UFW, SSH hardening, and fail2ban
  • Creating, listing, and deleting VPS snapshots
  • Backing up and restoring databases and configuration
  • Updating platforms and running maintenance across all servers
  • Collecting forensic evidence and managing security-related workflows

Treat the exact tool count as version-dependent until confirmed from the installed release.

Limitations and notes

Cloud-provider support is limited to the four providers named in the listing. Destructive operations exist, including server destruction, snapshot deletion, and remediation fixes, so agents should use dry-run or preview options where available.

The README contains differing security-check totals: the listing cites 413 checks across 29 categories, while CLI examples describe 449 checks across 31 categories. The same material also gives different MCP-tool counts. Verify the installed version before relying on precise totals or tool names.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Kastell

It does not provide a separate MCP launch command.

Yes. The README explicitly names Claude as an MCP-compatible client for managing servers through Kastell.

The documented checks include SSH, firewalls, Docker, TLS, HTTP headers, and compliance mappings for CIS, PCI-DSS, and HIPAA.

Yes. Commands such as status, backup, snapshots, and maintenance support `--all`, and the listing describes fleet management.

Related MCP servers

All in Security All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewKastell AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/kastelldev-kastell?style=directory)](https://allmcps.com/mcp/kastelldev-kastell)
HTML Embed
<a href="https://allmcps.com/mcp/kastelldev-kastell"><img src="https://allmcps.com/api/badge/kastelldev-kastell?style=directory" alt="Kastell on AllMCPs" /></a>