Skip to main content

termix-mcp

CI PyPI License Python

Servidor MCP para o Termix, o gerenciador self-hosted de SSH/RDP/VNC. Deixa um agente (Claude Desktop, Claude Code, Cursor, VS Code...) listar e operar hosts, snippets, dashboard, metricas e auditoria do seu Termix, construido sobre o termix-sdk.

Nao e um wrapper 1:1 da API do Termix: e um conjunto curado de tools, seguro por padrao (sem segredos, sem sessao SSH persistente, sem tools destrutivas fora de toolsets explicitos).

Tambem disponivel no MCP Registry como io.github.sujirodev/termix-mcp.

Instalar

uvx termix-mcp

Alternativas: pip install termix-mcp ou a imagem ghcr.io/sujirodev/termix-mcp.

Requer uma API key do Termix (tmx_...) com permissao RBAC minima para o que o agente vai fazer - veja SECURITY.md.

Configurar no cliente

Claude Desktop / Claude Code (claude_desktop_config.json ou .mcp.json):

{
  "mcpServers": {
    "termix": {
      "command": "uvx",
      "args": ["termix-mcp"],
      "env": {
        "TERMIX_URL": "https://termix.example.com",
        "TERMIX_API_KEY": "tmx_xxxxxxxxxxxxxxxxxxxxxxxx"
      }
    }
  }
}

Cursor / VS Code: mesmo formato, no arquivo de configuracao MCP de cada um.

Voce diz / o que acontece

Voce diz O que a tool faz
"quais hosts eu tenho cadastrados?" termix_list_hosts
"mostra as metricas do host X" termix_get_host_metrics
"roda o snippet Y no host X" termix_run_snippet (bloqueada em modo read-only)
"cria um host novo pra esse servidor" termix_create_host (bloqueada em modo read-only)
"o que aconteceu de auditoria essa semana?" termix_list_audit_events

Variaveis de ambiente

Variavel Default Descricao
TERMIX_URL obrigatoria URL base do Termix
TERMIX_API_KEY obrigatoria API key tmx_... (JWT/TOTP nao sao suportados)
TERMIX_SERVICE_URLS vazio JSON {"database": "http://..."} para instalacoes sem proxy
TERMIX_VERIFY_SSL true Valida certificado TLS
TERMIX_TIMEOUT 30 Timeout por requisicao (s)
TERMIX_MAX_RETRIES 2 Repassado ao SDK
TERMIX_MCP_READ_ONLY false Esconde e bloqueia tools de escrita
TERMIX_MCP_TOOLSETS default default, all, ou lista hosts,snippets,files
TERMIX_MCP_ENABLED_TOOLS vazio Allowlist por nome de tool
TERMIX_MCP_DISABLED_TOOLS vazio Denylist por nome de tool
TERMIX_MCP_REDACT_SECRETS true Mascara segredos em todas as saidas
TERMIX_MCP_MAX_ITEMS 50 Limite default de itens em listagens
TERMIX_MCP_TRANSPORT stdio stdio ou http
TERMIX_MCP_HTTP_HOST / _PORT 127.0.0.1 / 8765 Bind do transporte HTTP
TERMIX_MCP_HTTP_PATH gerado e logado Path secreto do endpoint HTTP
TERMIX_MCP_LOG_LEVEL INFO Nivel de log (stderr no stdio, stdout no http)

Toolsets

Ligados por padrao: hosts, snippets, dashboard, metrics, system, audit.

Opt-in (TERMIX_MCP_TOOLSETS=hosts,files,docker,...): credentials, files, docker, tunnels, alerts, automations, users.

Desligados e explicitos (nunca entram em all): admin, dangerous.

TERMIX_MCP_READ_ONLY=true esconde e bloqueia toda tool que nao seja read-only, em qualquer toolset.

Tools

Lista completa de tools (gerada por scripts/generate_tool_docs.py)
Tool Toolset Read-only Destrutiva Flags
termix_get_audit_forwarding admin sim nao admin
termix_get_branding admin sim nao admin
termix_get_encryption_status admin sim nao admin
termix_get_host_defaults admin sim nao admin
termix_get_termix_id_status admin sim nao admin
termix_list_sso_providers admin sim nao admin
termix_update_branding admin nao nao admin
termix_acknowledge_alert_firing alerts nao nao -
termix_create_alert_rule alerts nao nao -
termix_delete_alert_rule alerts nao sim -
termix_list_alert_rules alerts sim nao -
termix_get_session_log audit sim nao -
termix_list_audit_events audit sim nao -
termix_list_session_logs audit sim nao -
termix_get_automation automations sim nao -
termix_list_automations automations sim nao -
termix_list_fleets automations sim nao -
termix_run_automation automations nao nao data-access
termix_create_credential credentials nao nao -
termix_delete_credential credentials nao sim -
termix_get_credential credentials sim nao -
termix_list_credentials credentials sim nao -
termix_reveal_credential credentials sim nao data-access
termix_update_credential credentials nao nao -
termix_get_dashboard_summary dashboard sim nao -
termix_get_homepage dashboard sim nao -
termix_list_open_tabs dashboard sim nao -
termix_list_workspaces dashboard sim nao -
termix_get_container docker sim nao data-access
termix_get_container_logs docker sim nao data-access
termix_get_container_stats docker sim nao data-access
termix_list_containers docker sim nao data-access
termix_restart_container docker nao nao data-access
termix_start_container docker nao nao data-access
termix_stop_container docker nao nao data-access
termix_create_folder files nao nao data-access
termix_delete_file files nao sim data-access
termix_list_files files sim nao data-access
termix_move_file files nao nao data-access
termix_read_file files sim nao data-access
termix_rename_file files nao nao data-access
termix_write_file files nao nao data-access
termix_create_host hosts nao nao -
termix_delete_host hosts nao sim -
termix_disable_host_autostart hosts nao nao -
termix_enable_host_autostart hosts nao nao -
termix_get_host hosts sim nao -
termix_get_network_topology hosts sim nao -
termix_list_host_folders hosts sim nao -
termix_list_host_tags hosts sim nao -
termix_list_hosts hosts sim nao -
termix_update_host hosts nao nao -
termix_get_host_metrics metrics sim nao -
termix_get_host_status metrics sim nao -
termix_get_metrics_history metrics sim nao -
termix_get_proxmox_stats metrics sim nao -
termix_list_active_alerts metrics sim nao -
termix_list_host_statuses metrics sim nao -
termix_create_snippet snippets nao nao -
termix_delete_snippet snippets nao sim -
termix_get_snippet snippets sim nao -
termix_list_snippets snippets sim nao -
termix_run_snippet snippets nao nao -
termix_update_snippet snippets nao nao -
termix_get_preferences system sim nao -
termix_get_system_info system sim nao -
termix_list_api_keys system sim nao -
termix_create_tunnel tunnels nao nao data-access
termix_delete_tunnel tunnels nao nao data-access
termix_get_tunnel tunnels sim nao -
termix_list_tunnel_presets tunnels sim nao -
termix_list_tunnels tunnels sim nao -
termix_assign_role users nao nao admin
termix_get_user users sim nao admin
termix_list_credential_access users sim nao admin
termix_list_folder_access users sim nao admin
termix_list_roles users sim nao admin
termix_list_users users sim nao admin

Total: 78 tools.

Contribuindo

Veja CONTRIBUTING.md.

Seguranca

Veja SECURITY.md para o modelo de ameaças.

Licenca

MIT

Release files for termix-mcp 0.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for termix-mcp 0.1.0
File Size Uploaded
termix_mcp-0.1.0.tar.gz 164.2 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for termix-mcp 0.1.0
File Interpreter ABI Platform
termix_mcp-0.1.0-py3-none-any.whl Python 3 none any Details

Total release size: 202.8 kB

Release files / termix_mcp-0.1.0.tar.gz

Download URL termix_mcp-0.1.0.tar.gz
Size 164.2 kB
Tags Source
SHA-256 checksum
How to use checksums
801ff822fc7ca82bdcc5b8e2cff9fb5872da900fac28f824aa1d189359f741bc
BLAKE2b-256 checksum
How to use checksums
ff1e99d4d110aa30677e5a6edd69203c13bc064546c816d014ea0a0acf7190c5
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 23, 2026.

Transparency log

Release files / termix_mcp-0.1.0-py3-none-any.whl

Download URL termix_mcp-0.1.0-py3-none-any.whl
Size 38.6 kB
Tags Python 3
SHA-256 checksum
How to use checksums
d5b115290110daf775dd8bffe500db1754464b7c3af9ddc8967ef70a9ca86409
BLAKE2b-256 checksum
How to use checksums
ffc751825f113993f0dcd2c45b9f8232dd912918c925277097f29cc2cb304a6e
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 23, 2026.

Transparency log

Release history Release notifications | RSS feed

This release

0.1.0 This release

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page