LocalFree

Heliograph MCP server

dbhq-uk/heliograph

Run commands on machines you cannot SSH into, such as air-gapped or bastion-only hosts, via git, file shares or S3, with timestamped run logs.

Source code Website

Install Heliograph in Claude Code

Claude Code
claude mcp add heliograph -- npx -y @dbhq/heliograph
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "heliograph": {
      "command": "npx",
      "args": [
        "-y",
        "@dbhq/heliograph"
      ]
    }
  }
}

Frequently asked questions

What does the Heliograph MCP server do?

Run commands on machines you cannot SSH into, such as air-gapped or bastion-only hosts, via git, file shares or S3, with timestamped run logs.

Is the Heliograph MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does Heliograph run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Heliograph to Claude Code?

Run: claude mcp add heliograph -- npx -y @dbhq/heliograph

More command line & os automation MCP servers

View all

Mac Control

0

dockndevai/mcp-mac-control

Full Mac control: shell, AppleScript, files, processes and human-like GUI input with a screenshot loop, plus an optional safe mode with read-only, gated access.

LocalFreeTypeScript

Execkit

blinkingbit-oss/execkit

Stateful, auditable shell sessions over local, SSH and Docker, with secret redaction, output budgeting and a read-only live transcript viewer.

LocalFreeRust

Macos

0

dockndevai/mcp-macos

Read-only-by-default Mac control: files, processes, screenshots and clipboard, with opt-in allowlisted shell commands, AppleScript and GUI input.

LocalFreeTypeScript

Rootpilot

1

Easton-OU/rootpilot-mcp

Read-only SSH diagnostics for Linux and Docker servers using a fixed command allowlist, with secret redaction and per-command timeouts.

LocalFreeTypeScript

sudo-proxy

0

tarides/sudo-proxy

Run privileged commands locally or over SSH, each gated by a single-keypress human approval before sudo, with audit logging and no stored password.

LocalFreeRust

opsgate

1

polymatx/opsgate

Safety gate between AI agents and your servers: 25 typed tools (services, logs, Docker, disk, ports, files, nginx) that build their own argv, so the agent never passes a command string. Deny-by-default observe / operate / full modes per host, human approval for every change via MCP elicitation, and a hash-chained audit log that also records refusals. Local or over SSH with known_hosts verification.

LocalFreeGo