MCP Terminal Server
๐ A high-performance Model Context Protocol server for secure terminal execution
โจ Cross-platform โข โก High-performance โข ๐ Ultra-secure โจ
Features
- Cross-platform support: Works on macOS and Linux
- Configurable timeouts: Set custom timeout values for command execution
- Secure execution: Commands run in controlled environment with proper error handling
- Platform-aware: Automatically detects and adapts to the host platform
- Flexible shell support: Configurable shell for command execution
- GUI application support: Automatic DISPLAY environment variable forwarding for X11 applications
- Multiple transport modes:
- STDIO mode for traditional MCP clients
- ๐ StreamableHTTP transport: Standards-compliant HTTP-based MCP transport for web integrations
- Flexible session management: Use any session ID you want - no pre-registration required
- ๐ Persistent shell sessions: Maintain shell state between commands (working directory, environment variables, etc.)
Quick Start
# Build the server
make build
# Run in HTTP mode with StreamableHTTP transport
./mcp-terminal-server --http --port 8080
# Run in STDIO mode (default)
./mcp-terminal-server
๐ Quick Testing
Test StreamableHTTP Transport
# Start server in HTTP mode
./mcp-terminal-server --http --port 8080
# Test MCP initialization
curl -X POST http://localhost:8080/mcp \
-H "Content-Type: application/json" \
-d '{"jsonrpc": "2.0", "id": 1, "method": "initialize", "params": {"protocolVersion": "2024-11-05", "capabilities": {}, "clientInfo": {"name": "test-client", "version": "1.0.0"}}}'
# Test tools listing (use session ID from initialize response)
curl -X POST http://localhost:8080/mcp \
-H "Content-Type: application/json" \
-H "Mcp-Session-Id: <session-id>" \
-d '{"jsonrpc": "2.0", "id": 2, "method": "tools/list"}'
# Execute a command
curl -X POST http://localhost:8080/mcp \
-H "Content-Type: application/json" \
-H "Mcp-Session-Id: <session-id>" \
-d '{"jsonrpc": "2.0", "id": 3, "method": "tools/call", "params": {"name": "execute_command", "arguments": {"command": "echo Hello StreamableHTTP!"}}}'
Test Persistent Shell
# Test persistent shell functionality
chmod +x examples/persistent_shell_examples.sh
./examples/persistent_shell_examples.sh
Documentation
๐ Complete Documentation
- Quick Start Guide - Get up and running in minutes
- Getting Started - Comprehensive setup and configuration
- Vercel AI SDK Integration - Connect to Vercel AI SDK
- Architecture Overview - System design and modular structure
Available Tools
- execute_command - Execute single commands with timeout
- persistent_shell - Execute commands in persistent shell sessions
- session_manager - Manage shell sessions (list, close)
Environment Variables
The server supports the following environment variables:
MCP_COMMAND_TIMEOUT
- Default command timeout in seconds (default: 30)MCP_SHELL
- Custom shell to use for command execution (default: /bin/bash on Unix)DISPLAY
- X11 display for GUI applications (automatically forwarded to commands)
GUI Application Support
The server automatically forwards the DISPLAY
environment variable to all executed commands, enabling GUI applications to open on the correct display. This works for both non-persistent commands and persistent shell sessions.
Example: Launch a GUI application
# Set DISPLAY when starting the server
DISPLAY=:0 ./mcp-terminal-server
# GUI applications launched through MCP will use the correct display
# e.g., xterm, firefox, gedit, etc.
Server Endpoints
When running in HTTP mode (--http
flag), the server provides:
POST /mcp
- StreamableHTTP transport endpoint for all MCP operations- Supports
initialize
,tools/list
,tools/call
methods - Requires
Mcp-Session-Id
header for authenticated requests - Returns session ID in response headers for
initialize
calls
- Supports
MCP Protocol Support
The server implements the Model Context Protocol specification:
- JSON-RPC 2.0 communication
- Session management with UUID-based session IDs
- Tool execution with structured input/output
- Error handling with standard JSON-RPC error codes
Platform Support
- macOS (darwin): Full support - AMD64 & ARM64
- Linux: Full support - AMD64 & ARM64
- Docker: Multi-architecture support via buildx
Integration
Claude Desktop
Add to your claude_desktop_config.json
:
{
"mcpServers": {
"terminal": {
"command": "/path/to/mcp-terminal-server",
"env": {
"MCP_COMMAND_TIMEOUT": "30",
"DISPLAY": ":0"
}
}
}
}
Docker
# Run AMD64 image
docker run --rm -p 8080:8080 terminal-mcp:latest-linux-amd64 --http --port 8080
# Run ARM64 image
docker run --rm -p 8080:8080 terminal-mcp:latest-linux-arm64 --http --port 8080
# Run with persistent shell session
docker run --rm -p 8080:8080 -v /tmp:/tmp terminal-mcp:latest-linux-amd64 --http --port 8080
Other MCP Clients
The server follows the standard MCP protocol and should work with any compliant MCP client.
Development
Building
# Build for current platform
make build
# Build for all platforms
make build-all
# Build Docker images
make docker-build
# Build and push Docker images
REGISTRY=your-registry.com make docker-push
# Build DXT package for distribution
make dxt
Dependencies
github.com/mark3labs/mcp-go
- MCP Go library- Go 1.23+ (automatically managed)
Production Deployment
For production environments, it's recommended to run the server with proper process management and security measures:
Process Management
- s6: Lightweight process supervision with automatic restart
- systemd: Full-featured service management with resource limits
- Docker: Containerized deployment with security isolation
- Supervisor: Python-based process management
Security Features
- Non-root execution: Run with dedicated user account for limited privileges
- Resource limits: CPU, memory, and file access restrictions
- Network isolation: Bind to localhost only for enhanced security
- AppArmor/SELinux: Additional mandatory access controls
- File permissions: Restricted access to necessary directories only
๐ See Process Management Guide for detailed setup instructions
Integration with Iris Agent
This MCP server is used by the Iris Computer Use Agent, our advanced computer use agent for automated terminal interactions.
License
This project is provided as-is for development purposes.