Infra MCP

by esp4ce

281 downloads Not rated yet

About

Read-only MCP server for on-prem Linux VMs and PostgreSQL over SSH — service health, logs, DB state, and schema exploration without terminal access.

Explore

- Read‑only SSH access to Linux VMs and PostgreSQL databases
- Allowlist‑gated commands, services, and log file paths
- All remote operations written to an append‑only JSONL audit log
- Server‑side output bounds (200 log lines, 100 DB rows, 200 tables max)
- Schema caching with configurable TTL and manual refresh
- Read‑only DB transactions using a dedicated PostgreSQL role

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

  1. Download and install Highlight from highlightai.com/download
  2. Navigate to the plugins tab and select "Add Custom Plugin"
  3. Configure the plugin with the settings below
    Plugin Name Infra MCP
    Command (node, npx, python, etc.)

    Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.

  4. Enable "Start Automatically" if you want the plugin to start when Highlight launches

From the repository

``bash
uv tool install infra-mcp

infra-mcp generate-config -o ~/.infra-mcp/infra-mcp.yaml

infra-mcp discover --in-place
`

Override the config path with
--config or INFRA_MCP_CONFIG`.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "infra mcp": {
            "infra-mcp": {
                "command": "infra-mcp",
                "args": [
                    "run"
                ]
            }
        }
    }
}

McpServers

{
    "infra-mcp": {
        "command": "infra-mcp",
        "args": [
            "run"
        ]
    }
}
PyPI Python License: MIT Read-only MCP access to on-prem Linux VMs and PostgreSQL databases over SSH. `` agent ──stdio──▶ infra-mcp ──SSH──▶ VMs (journald · log files) └──▶ DBs (read-only PostgreSQL) ` </div> --- An agent can check service health, retrieve bounded logs, inspect DB state, and explore table schemas — without terminal access. Every remote operation is allowlist-gated and written to an append-only audit log.

Install

``bash uv tool install infra-mcp
No reviews yet — be the first

Sign in to leave a review

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.