Kvm Pilot MCP server
Smart hands for your AI agents - write-capable KVM+BMC+SSH MCP server: gated, verified, audited.
6 stars
Reviews
Write oneNobody has reviewed Kvm Pilot yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Kvm Pilot tools (34, 4 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
access_pathsWhich INDEPENDENT recovery paths are live for the device — the lockout view.
amt_enableEnable an Intel AMT redirection listener over WS-Man (Intel AMT/vPro only). CONFIG MUTATION.
appliance_rebootReboot the KVM APPLIANCE (not the target) to clear a wedged encoder. DESTRUCTIVE.
appliance_statusRead-only diagnostics from the KVM APPLIANCE's own OS over SSH.
boot_optionsShow the host's current boot override (Redfish BootSourceOverride) — read-only.
calibrate_mouseMeasure and store this host's mouse commanded→observed correction (#128).
capabilitiesList the capabilities the target's driver supports (read-only, offline).
classify_screenClassify the current screen's boot/run phase (read-only).
ctrl_alt_deletewrite actionSend Ctrl+Alt+Del to the managed host. DESTRUCTIVE.
doctrineRe-serve the bundled operating doctrine (read-only; offline, no device I/O).
ejectDetach virtual media (the inverse of ``mount_iso``). GATED act (media effect gate); reversible.
eventsCollect typed device events from the kvmd stream (read-only, bounded).
file_firmware_reportFile the device's firmware-currency report as a GitHub issue when the registry is behind (MCP twin of CLI ``firmware-check``, #189/#190). EXTERNAL WRITE — writes outside the managed device.
firmware_checkReport the device's firmware currency vs the bundled registry (read-only).
healthcheckAudit the device's readiness/recovery, security posture, and firmware (#80).
infoReturn device / system info (read-only).
list_virtual_mediaInventory the KVM's virtual-media (MSD) storage (read-only).
logsReturn the device/host event log as text (read-only).
mount_isoMount an ISO as virtual media on the host. GATED act (media effect gate); reversible.
mouseMove the mouse (and optionally click) on the host. DESTRUCTIVE (HID input).
powerChange host power state. DESTRUCTIVE.
power_stateReturn whether the host is powered on, plus ATX detail where the driver has it (read-only).
press_keyPress a single key (a kvmd key code, e.g. ``Enter``/``Escape``/``F2``). DESTRUCTIVE.
send_shortcutwrite actionSend a key chord — comma-separated kvmd key codes, e.g. ``ControlLeft,AltLeft,Delete`` or ``ControlLeft,AltLeft,F2``. DESTRUCTIVE.
sessionReport this server's current operating posture (read-only; offline, no device I/O — answers even when the device is down).
set_boot_deviceSet the next-boot (or persistent) boot device via BootSourceOverride. CONFIG MUTATION.
snapshotCapture the current KVM screen (read-only).
ssh_discoverScan a CIDR for hosts with an open SSH port. RISKY — opt-in.
ssh_execwrite actionRun a command on the managed host's OS over SSH. DESTRUCTIVE / in-band.
ssh_reachableIs the managed host's OS reachable over SSH? (read-only, in-band).
support_matrixWhat has actually been exercised on real hardware, per device+firmware+capability (read-only, offline — no device call).
type_textType ``text`` on the managed host's console over the HID keyboard. DESTRUCTIVE.
wait_for_stateWait (bounded) until the screen reaches a boot/run phase (read-only).
wakewrite actionSend a Wake-on-LAN magic packet to power the host on. POWER (soft).
Public scan report
scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it
- Code scan57 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 21 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumsubprocess with shell=True
exec.shell-truekvm_pilot-0.1.0rc4/src/kvm_pilot/benchmark.py: …rShell interpreter name, not subprocess shell=True except CapabilityError: ret…
Install directly
claude mcp add kvm-pilot -- uvx kvm-pilot
Kvm Pilot: common questions
- Is Kvm Pilot MCP server safe?
- Mostly: it is graded B (75/100). Read the Kvm Pilot safety report
- How do I install Kvm Pilot?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does Kvm Pilot need an API key?
- Yes. The registry entry asks for
KVM_PILOT_PASSWD,ANTHROPIC_API_KEY. - Is Kvm Pilot maintained?
- The last commit was 21 days ago (2026-08-30). The latest release is v0.1.0rc4.
- What can I use instead of Kvm Pilot?
- Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server.
Alternatives to Kvm Pilot
Same job from other publishers: the closest match first, then the best rated.
- SSH — policy-gated remote accessPolicy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.not reviewedEstablishedB