LocalFree

opsgate MCP server

polymatx/opsgate

Safety gate between AI agents and your servers: 25 typed tools (services, logs, Docker, disk, ports, files, nginx) that build their own argv, so the agent never passes a command string. Deny-by-default observe / operate / full modes per host, human approval for every change via MCP elicitation, and a hash-chained audit log that also records refusals. Local or over SSH with known_hosts verification.

1 GitHub stars
Source code Website

Install opsgate in Claude Code

Claude Code
claude mcp add opsgate -- docker run -i --rm ghcr.io/polymatx/opsgate:0.1.3
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "opsgate": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/polymatx/opsgate:0.1.3"
      ]
    }
  }
}

Frequently asked questions

What does the opsgate MCP server do?

Safety gate between AI agents and your servers: 25 typed tools (services, logs, Docker, disk, ports, files, nginx) that build their own argv, so the agent never passes a command string. Deny-by-default observe / operate / full modes per host, human approval for every change via MCP elicitation, and a hash-chained audit log that also records refusals. Local or over SSH with known_hosts verification.

Is the opsgate MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does opsgate run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add opsgate to Claude Code?

Run: claude mcp add opsgate -- docker run -i --rm ghcr.io/polymatx/opsgate:0.1.3

More command line & os automation MCP servers

View all

Rootpilot

1

Easton-OU/rootpilot-mcp

Read-only SSH diagnostics for Linux and Docker servers using a fixed command allowlist, with secret redaction and per-command timeouts.

LocalFreeTypeScript

Terrarium

1

chryaner/terrarium

Fork, break and revert VirtualBox VMs with linked clones and RAM snapshots, and drive GUI-only guests via screenshots and input without SSH or a guest agent.

LocalFreeGo

Execkit

blinkingbit-oss/execkit

Stateful, auditable shell sessions over local, SSH and Docker, with secret redaction, output budgeting and a read-only live transcript viewer.

LocalFreeRust

Nemeton

1

juergenkoller-software/nemeton-mcp

Control Nemeton, a macOS virtual machine manager built on Apple's Virtualization framework: Linux and macOS VMs, APFS snapshots, console, files and networking.

LocalFree

Heliograph

dbhq-uk/heliograph

Run commands on machines you cannot SSH into, such as air-gapped or bastion-only hosts, via git, file shares or S3, with timestamped run logs.

LocalFreeGo

Freezetext

1

juergenkoller-software/freezetext-mcp

Screen OCR on macOS via FreezeText: freeze the screen and extract text with Apple Vision, OCR regions or images, and search capture history.

LocalFree