AI MCP server
Let AI agents such as Claude Code manage hosts and drive terminal tabs through a local MCP server.
AI MCP server
Let an AI agent on this computer, such as Claude Code, Claude Desktop, Cursor or any other MCP client, work with Kubexer Terminal. Through a local Model Context Protocol (MCP) server, an agent can manage hosts, groups, port forwards and command snippets, open terminals, and run commands in them, with your approval.
Turn it on
- Open Settings → AI MCP.
- Switch on Allow AI agents to control Kubexer Terminal. The status changes to Running.
- Optionally change the Port (default
47821).
The server only runs while the app is open and you're signed in.
Connect an agent
Under Connect an agent:
- Claude Code — copy the command and run it once in your terminal. It looks like
claude mcp add --transport http kubexer-terminal http://127.0.0.1:47821/… --header "Authorization: Bearer …". - Other MCP clients — copy the JSON config into the client's MCP settings.
Both include the Access token. Show reveals it, Copy copies it, and Regenerate replaces it, which disconnects every agent set up with the old one.
What agents can do
- Vaults and hosts — list vaults; list, read, create, update and delete hosts and groups; list identities.
- Port forwards — list, create, update, delete, start and stop.
- Snippets — list, create, update and delete.
- Terminals — open a terminal to a host, list terminals, run a command, read output, send input and close a terminal.
Every change an agent makes shows a notification in the app.
Per-tab control
Each terminal tab has an MCP badge. Click it to cycle:
- Confirm (default) — every command needs your approval. An approval bar lets you approve, edit or skip it.
- Auto — the agent's commands run straight away.
- Off — the agent can't use this tab.
Security
- The server listens on
127.0.0.1only, so other machines on your network can't reach it. Requests from web pages are refused. - Agents can reach only vaults you've unlocked. They never see passwords or keys, and can't set them: you enter credentials in the app.
- Treat the token like a password. Anything that has it can change your hosts while the app is running.
AI MCP is a Pro feature.