How do I install Kvm Pilot?

Kvm Pilot is a local plugin. Install it using PyPI package: kvm-pilot and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Kvm Pilot safe to use?

Kvm Pilot was flagged by MCP Marketplace's security scan, scoring 4.2/10 (high risk). It has 7 high or critical findings to review. Review the security report on this page carefully before installing it.

What credentials does Kvm Pilot need?

Kvm Pilot requires the following credentials or environment variables: KVM_PILOT_PROFILE, KVM_PILOT_MCP_READ_ONLY, KVM_PILOT_MCP_DRY_RUN, KVM_PILOT_MCP_ALLOW_POWER, KVM_PILOT_HOST, KVM_PILOT_USER, KVM_PILOT_PASSWD, ANTHROPIC_API_KEY. You can find setup instructions on the server detail page.

What AI apps work with Kvm Pilot?

Kvm Pilot uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Kvm Pilot MCP Server

by DustinTrap

Developer ToolsUse Caution4.2MCP RegistryLocal

Free

Server data from the Official MCP Registry

Smart hands for your AI agents - write-capable KVM+BMC+SSH MCP server: gated, verified, audited.

About

Smart hands for your AI agents - write-capable KVM+BMC+SSH MCP server: gated, verified, audited.

Security Report

4.2

Use Caution4.2High Risk

kvm-pilot is a write-capable KVM/BMC/SSH MCP server whose destructive tools (power, HID injection, virtual media, SSH exec, external writes) are disabled by default behind per-class environment gates, per-call approval, and a read-only mode. The visible code shows no malicious patterns or hardcoded secrets, but the vision backend defaults to a cloud service that would receive target screenshots, and the supplied source is truncated so the SSH execution path and credential handling could not be fully verified. Supply chain analysis found 9 known vulnerabilities in dependencies (0 critical, 7 high severity). Package verification found 1 issue.

4 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

network_websocket

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

process_spawn

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Profile name from ~/.config/kvm-pilot/config.toml naming the KVM/BMC to targetOptional

Environment variable: KVM_PILOT_PROFILE

Least-privilege posture: only read-only tools are registered; effect gates force-closed. Recommended for first contact (set to 1)Optional

Environment variable: KVM_PILOT_MCP_READ_ONLY

Rehearsal posture: destructive calls are logged, never sent (set to 1)Optional

Environment variable: KVM_PILOT_MCP_DRY_RUN

Operator opt-in enabling power control of the managed host (per-effect gate; see also _ALLOW_HID, _ALLOW_MEDIA, _ALLOW_SSH, _ALLOW_APPLIANCE, _ALLOW_EXTERNAL_WRITE)Optional

Environment variable: KVM_PILOT_MCP_ALLOW_POWER

Device address (KVM/BMC) when not using a config-file profileOptional

Environment variable: KVM_PILOT_HOST

Device username when not using a config-file profileOptional

Environment variable: KVM_PILOT_USER

Device password when not using a config-file profile (KVM_PILOT_HOST / KVM_PILOT_USER accompany it)Required

Environment variable: KVM_PILOT_PASSWD

Optional: enables server-side vision for classify_screen / wait_for_state; without it, classification falls back to the calling agentRequired

Environment variable: ANTHROPIC_API_KEY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-dustintrap-kvm-pilot": {
      "env": {
        "KVM_PILOT_HOST": "your-kvm-pilot-host-here",
        "KVM_PILOT_USER": "your-kvm-pilot-user-here",
        "KVM_PILOT_PASSWD": "your-kvm-pilot-passwd-here",
        "ANTHROPIC_API_KEY": "your-anthropic-api-key-here",
        "KVM_PILOT_PROFILE": "your-kvm-pilot-profile-here",
        "KVM_PILOT_MCP_DRY_RUN": "your-kvm-pilot-mcp-dry-run-here",
        "KVM_PILOT_MCP_READ_ONLY": "your-kvm-pilot-mcp-read-only-here",
        "KVM_PILOT_MCP_ALLOW_POWER": "your-kvm-pilot-mcp-allow-power-here"
      },
      "args": [
        "kvm-pilot"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!

4.7

Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.

Kvm Pilot MCP Server

About

Security Report

Findings (14)Action required

Permissions Required

What You'll Need

How to Install

Reviews

No reviews yet

More Developer Tools MCP Servers

Rea

Paperclip

Git

Fetch

Toleno

MCP Marketplace