VPS Guardian MCP server

Read from the package source without running it. The installed server may list more.

• analyze_disk_usage

  Analyze disk usage for a directory to discover space bottlenecks and large files.

• apply_change_set

  Apply, validate, reload, health-check, and automatically roll back one ChangeSet.

• apply_project_patchwrite action

  Apply a confirmed bounded source patch with backups; it never executes project code.

• audit_ssh_config

  Audit the SSH daemon configuration against security best practices.

• begin_change_set

  Open a short-lived, bounded, reversible Nginx configuration ChangeSet.

• begin_project_patchwrite action

  Open a short-lived, bounded source patch; no project code runs.

• check_dns_health

  Audit system DNS resolution health, configured nameservers, and query responsiveness.

• check_failed_logins

  Inspect recent failed SSH login attempts to detect brute-force attackers.

• check_guardian_updates

  Check if a newer version or commit of VPS-Guardian-MCP is available on GitHub.

• check_http_endpoint

  Check a public HTTP(S) URL: response status, redirects, TLS, latency, and optional text.

• check_http_endpoints

  Check up to 20 public HTTP(S) endpoints in one compact deployment health report.

• check_kernel_errors

  Audit kernel logs for hardware failures, storage I/O errors, or application segfaults.

• check_oom_events

  Inspect kernel logs for Linux Out-Of-Memory (OOM) Killer invocations.

• check_service_status

  Check the operational status of a systemd service unit.

• check_ssl_certificates

  Audit SSL/TLS certificates configured on the host (Let's Encrypt / Certbot).

• check_system_limits

  Audit system-wide and user limits: file descriptors, max PIDs, virtual memory, socket backlogs.

• check_system_updates

  Audit available operating system package updates and pending security patches.

• clean_docker_garbage

  Safely reclaim disk space by pruning dangling images, stopped containers, unused volumes, and networks.

• close_agent_session

  Close a session with an outcome; historical records remain secret-redacted.

• close_maintenance_window

  Close a maintenance window with a secret-redacted outcome note.

• compare_system_snapshots

  Compare two snapshots and rank configuration or infrastructure drift by risk.

• compare_workload_baseline

  Compare a saved workload baseline with the current workload state.

• compose_project_action

  Token-confirmed Docker Compose up, restart, or stop for selected project services.

• create_backupwrite action

  Create a compressed tar.gz archive of an authorized website or configuration directory.

• create_maintenance_windowwrite action

  Create an expiring maintenance window for agent coordination.

• create_system_snapshotwrite action

  Save a privacy-preserving, read-only VPS state baseline.

• create_workload_baselinewrite action

  Save a secret-free known-good workload baseline for later drift comparison.

• deploy_config_changewrite action

  Commit a validated configuration plan, reload its service, and auto-rollback on failure.

• detect_zombie_processes

  Scan system process table for defunct/zombie processes and identify non-reaping parents.

• diagnose_workload

  Gather bounded read-only logs, OOM, kernel, and health evidence for a workload.

• discover_projects

  Find bounded Git/application projects in configured VPS project roots.

• docker_container_action

  Safely execute lifecycle operations (start, stop, restart, pause, unpause) on a container.

• execute_recoverywrite action

  Execute an emergency recovery operation from a strictly whitelisted list.

• find_workload

  Find an application by domain, container, Compose service, port, or path fragment.

• generate_incident_report

  Generate one prioritized, read-only VPS incident report.

• get_agent_session

  Read a session's objective, findings, handoff note, and expiry state.

• get_audit_events

  Return recent redacted audit events for state-changing operations.

• get_backup_status

  List isolated Guardian backups with sizes and creation times, without reading contents.

• get_change_impact

  Show what a prospective restart, stop, config deployment, or update may affect.

• get_database_health

  Discover running databases and verify responsiveness, latency, and socket states.

• get_docker_container_logs

  Safely read stdout/stderr logs from a specific Docker container.

• get_docker_stats

  Retrieve live resource utilization metrics for all running Docker containers.

• get_event_watch

  Retrieve events seen since an active event watch was opened; this does not push notifications.

• get_fail2ban_status

  Check Fail2ban status, active protection jails, and currently banned IP addresses.

• get_failed_systemd_units

  Find all degraded or failed systemd services across the entire system.

• get_firewall_status

  Return normalized UFW, firewalld, or nftables firewall state and rules.

• get_open_ports

  Discover all listening network ports (TCP and UDP) and identify bound processes.

• get_package_updates

  List available updates via APT, DNF, YUM, Pacman, or Zypper without changing state.

• get_platform_capabilities

  Detect package, firewall, service-manager, and Docker Compose backends on this host.

• get_process_details

  In-depth diagnostics for a specific PID: hierarchy, threads, memory, open files, sockets, I/O.

• get_project_changes

  Read Git working-tree changes and diff statistics without modifying the project.

• get_recent_server_events

  Return a compact timeline of Guardian actions and important journal events.

• get_resource_alerts

  Evaluate active resource watches once and return current threshold alerts.

• get_runtime_budget

  Show the active low-resource profile and limits VPS-Guardian applies on this host.

• get_safety_status

  Return the active safety mode, confirmation policy, TTL, and audit destination.

• get_system_health

  Retrieve a complete system health snapshot of the Linux VPS.

• get_top_processes

  Retrieve the top resource-consuming processes running on the VPS.

• get_ufw_status

  Inspect the status and active filtering rules of the UFW firewall.

• get_vps_topology

  Map websites, reverse proxies, Compose projects, containers, ports, and databases.

• get_web_deployment_status

  Verify one website end to end: public HTTPS response, local Nginx host, and certificate.

• get_workload_health

  Return concise health, resource, container, and matching SSL state for one workload.

• handoff_agent_session

  Leave a concise handoff note so another agent can continue without rediscovery.

• inspect_compose_project

  Return Docker Compose service topology, images, ports, dependencies, and healthchecks.

• inspect_docker_container

  Deep inspection of container networks, volume mounts, restart policy, healthcheck, and masked env vars.

• inspect_project

  Inspect an approved project: stack markers, Git branch/commit, and dirty state.

• list_agent_sessions

  List active shared agent sessions; expired sessions are marked automatically.

• list_compose_projects

  Discover conventional Docker Compose files in an authorized directory tree.

• list_cron_jobs

  Discover all scheduled cron jobs on the Linux system.

• list_directory

  Inspect file and directory structures within authorized administrative paths.

• list_docker_containers

  List Docker containers with their status, image, port bindings, volumes, and health.

• list_maintenance_windows

  List active maintenance windows, or include closed and expired history.

• list_runbook_templates

  List command-free agent runbooks built from existing guarded MCP tools.

• list_runbooks

  List active agent runbooks, with optional completed history.

• list_system_snapshots

  List stored VPS state snapshots without exposing their collected content.

• list_systemd_timers

  Audit active and pending systemd timers via 'systemctl list-timers'.

• list_virtual_hosts

  Inspect active Nginx virtual hosts, listening ports, SSL, and reverse proxy targets.

• lock_workload

  Reserve a workload briefly so concurrent agents do not make conflicting changes.

• open_event_watch

  Open an expiring workload watch. Use get_event_watch later to retrieve new events.

• plan_config_deployment

  Validate and preview an Nginx config or Caddyfile deployment.

• prepare_repair_planwrite action

  Create an evidence-backed repair plan without changing the VPS.

• preview_change_set

  Show secret-redacted diffs and request one confirmation for a ChangeSet.

• preview_project_patchwrite action

  Show secret-redacted source diff and obtain one confirmation token for a patch.

• read_project_file

  Read one non-binary project file without following symlinks; redact common secrets.

• read_service_logs

  Safely fetch and optionally filter recent log lines for a service or Docker container.

• record_session_finding

  Save one bounded, secret-redacted finding or decision to an active agent session.

• run_project_checkswrite action

  Run only fixed safe checks: Git whitespace validation or bounded Python syntax parsing.

• search_project_code

  Bounded literal code search with ignored dependency folders and redacted output.

• set_web_file_mode

  Set a safe web-readable mode (0644 or 0640) for a static file under /var/www.

• stage_file_change

  Stage one Nginx configuration change; content is not applied yet.

• stage_project_file_change

  Stage one source-file replacement in an active project patch without applying it.

• start_agent_sessionwrite action

  Create an expiring, secret-safe shared task context for agents working on this VPS.

• start_runbook

  Open a bounded agent runbook; it never runs commands or bypasses confirmation.

• test_network_connectivity

  Benchmark outbound network connectivity and latency using direct Python sockets.

• test_nginx_config

  Test Nginx configuration for syntax errors ('nginx -t') without reloading.

• update_runbook_stepwrite action

  Record the outcome of one runbook step after its separate guarded tool call.

• verify_backup

  Verify a Guardian tar.gz archive without extracting it.

• view_file_content

  Safely read the content of an authorized configuration or web file.

• watch_resource_thresholdwrite action

  Create an expiring CPU, memory, swap, or disk threshold watch.

• write_file_contentwrite action

  Atomically write or update a configuration file within authorized directories.

• Code scan2 source files scanned; 29 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 2 days ago15/15
• Maintainer identityregistry namespace matches repository owner6/10

Grade history

• 2026-09-19restoreB → Ascore 89
• 2026-09-18restoreC → Bscore 76: Whole environment serialized (possible credential exfil)

VPS Guardian: common questions

Is VPS Guardian MCP server safe?

Yes, by our scan: it is graded A (89/100). Read the VPS Guardian safety report

How do I install VPS Guardian?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does VPS Guardian need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is VPS Guardian maintained?

The last commit was 3 days ago (2026-09-17). The latest release is v0.21.0.

What can I use instead of VPS Guardian?

Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server.