MCP.Market

Kvm Pilot MCP server

by DustinTrap·io.github.DustinTrap/kvm-pilot·v1.0.1·11 stars
No reviews yet

Smart hands for your AI agents - write-capable KVM+BMC+SSH MCP server: gated, verified, audited.

B75/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
Growing

11 stars175 downloads/wk

Reviews

Write one

Nobody has reviewed Kvm Pilot yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Kvm Pilot tools (34, 4 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • access_paths

    Which INDEPENDENT recovery paths are live for the device — the lockout view.

  • amt_enable

    Enable an Intel AMT redirection listener over WS-Man (Intel AMT/vPro only). CONFIG MUTATION.

  • appliance_reboot

    Reboot the KVM APPLIANCE (not the target) to clear a wedged encoder. DESTRUCTIVE.

  • appliance_status

    Read-only diagnostics from the KVM APPLIANCE's own OS over SSH.

  • boot_options

    Show the host's current boot override (Redfish BootSourceOverride) — read-only.

  • calibrate_mouse

    Measure and store this host's mouse commanded→observed correction (#128).

  • capabilities

    List the capabilities the target's driver supports (read-only, offline).

  • classify_screen

    Classify the current screen's boot/run phase (read-only).

  • ctrl_alt_deletewrite action

    Send Ctrl+Alt+Del to the managed host over the keyboard. DESTRUCTIVE (reboot).

  • doctrine

    Re-serve the bundled operating doctrine (read-only; offline, no device I/O).

  • eject

    Detach the virtual media presented to the host (inverse of ``mount_iso``). GATED, reversible.

  • events

    Collect typed device events from the kvmd stream (read-only, bounded).

  • file_firmware_report

    File the device's firmware-currency report as a GitHub issue when the registry is behind (MCP twin of CLI ``firmware-check``, #189/#190). EXTERNAL WRITE — writes outside the managed device.

  • firmware_check

    Report the device's firmware currency vs the bundled registry (read-only).

  • healthcheck

    Audit the device's readiness/recovery, security posture, and firmware (#80).

  • info

    Identify the device and the system behind it (read-only).

  • list_virtual_media

    Inventory the KVM's virtual-media (MSD) storage (read-only).

  • logs

    Return the device/host event log as text (read-only).

  • mount_iso

    Mount an ISO as virtual media on the host. GATED act (media effect gate); reversible.

  • mouse

    Move the mouse (and optionally click) on the host. DESTRUCTIVE (HID input).

  • power

    Change host power state. DESTRUCTIVE.

  • power_state

    Report whether the managed host is powered on (read-only).

  • press_key

    Press and release one key on the managed host's console. DESTRUCTIVE (HID).

  • send_shortcutwrite action

    Send a key chord — comma-separated kvmd key codes, e.g. ``ControlLeft,AltLeft,Delete`` or ``ControlLeft,AltLeft,F2``. DESTRUCTIVE.

  • session

    Report this server's current operating posture (read-only; offline, no device I/O — answers even when the device is down).

  • set_boot_device

    Set the next-boot (or persistent) boot device via BootSourceOverride. CONFIG MUTATION.

  • snapshot

    Capture the current KVM screen (read-only).

  • ssh_discover

    Scan a CIDR for hosts with an open SSH port. RISKY — opt-in.

  • ssh_execwrite action

    Run a command on the managed host's OS over SSH. DESTRUCTIVE / in-band.

  • ssh_reachable

    Is the managed host's OS reachable over SSH? (read-only, in-band).

  • support_matrix

    What has actually been exercised on real hardware, per device+firmware+capability (read-only, offline — no device call).

  • type_text

    Type a string on the managed host's console over the HID keyboard. DESTRUCTIVE.

  • wait_for_state

    Wait (bounded) until the screen reaches a boot/run phase (read-only).

  • wakewrite action

    Send a Wake-on-LAN magic packet to power the host on. POWER (soft).

Public scan report

scanner v0.1.10 · 2026-10-30 · same rubric, same numbers if you re-run it

1 medium
  • Code scan63 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • mediumsubprocess with shell=Trueexec.shell-true
    kvm_pilot-1.0.1/src/kvm_pilot/benchmark.py: …rShell interpreter name, not subprocess shell=True except CapabilityError: ret…
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Kvm Pilot compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
75/100
higher than 45% of 48,243 servers
Tools
34
the typical server has 7
Tools that change things
12%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
11
more than 88% of 28,706 servers
Downloads a week
175
more than 73% of 12,306 servers with a package

What its tools let an agent do: 29 read · 4 change · 1 send or post

Release history: 3 versions in the registry since 2026-08-30, latest 2026-10-23, typically one every 46 days.

Install Kvm Pilot in Claude Code, Cursor or VS Code

claude mcp add kvm-pilot -- uvx kvm-pilot
Add to Cursor

What the publisher says

From the Kvm Pilot repository's README, as published. We do not edit it. Read it on GitHub

<!-- mcp-name: io.github.DustinTrap/kvm-pilot -->

kvm-pilot

Smart hands for your AI agents. A write-capable, multi-plane (KVM + BMC + SSH) MCP server for controlling physical machines — gated, verified, audited.

kvm-pilot lets an agent drive a headless box through POST, firmware, the bootloader, and an OS install with no agent on the target: it works at the pixel level through an IP-KVM (PiKVM, the GL.iNet GLKVM fork GL-RM1 / GL-RM1PE, BliKVM), at the structured-state level through a BMC (Redfish on iDRAC/iLO/OpenBMC, IPMI on BMCs that predate Redfish), at the firmware level through Intel AMT/vPro (a BIOS/POST/GRUB screenshot + power + SOL on a business laptop an HDMI-capture KVM can't see boot on), and over SSH once an OS is up. A pluggable vision subsystem reads a KVM screenshot and tells you what boot phase the machine is in — biosmenu, grubmenu, installerprogress, loginprompt, crash_screen, and so on — and a safety layer gates every destructive operation behind operator opt-ins and per-call approvals.

Vision runs on Claude or any local OpenAI-compatible VLM (LM Studio, Ollama, vLLM, llama.cpp). Point it at a model on your own GPU and the screenshots never leave your network and cost nothing per frame.

How it works

kvm-pilot runs a see → decide → act loop, and the screen is its only sensor: it pulls a screenshot from the KVM, a vision model classifies the boot phase, and kvm-pilot acts back through the KVM's keyboard and power. Because it works at the pixel level, there is no agent on the target — the same loop drives POST, firmware, the bootloader, and an OS install.

A real, unedited run against a GLKVM on the home fleet — an honest preflight, a headless snapshot (watch it wake the on-demand encoder), a gated dry-run power-cycle, and the boot console the agent actually saw:

Quickstart

One install gives you the whole product — the kvm-pilot CLI, the kvm-pilot-mcp MCP server, and the bundled Claude skill — nothing to clone. The current release line is a pre-release: install it with --pre, which is explicit and keeps selecting the beta line once a stable release ships (0.1.0a1 is yanked and much older than this README — don't pin it).

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Kvm Pilot: common questions

Is Kvm Pilot MCP server safe?
Mostly: it is graded B (75/100). Read the Kvm Pilot safety report
How do I install Kvm Pilot?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Kvm Pilot need an API key?
Yes. The registry entry asks for KVM_PILOT_PASSWD, ANTHROPIC_API_KEY.
Is Kvm Pilot maintained?
The last commit was 7 days ago (2026-10-29). The latest release is v1.0.1.
What can I use instead of Kvm Pilot?
Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server.
How does Kvm Pilot compare with other MCP servers?
safety score 75/100 (higher than 45% of 48,243 servers); tools 34 (the typical server has 7); tools that change things 12% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Kvm Pilot

Same job from other publishers: the closest match first, then the best rated.