in.termal/termalin-web

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Run commands and read/write files on your servers over Termalin's keyless tunnels (hosted MCP).

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "termalin-web": {
      "url": "https://termal.in/api/v1/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (21)

• hosts_list read-only

  List the servers reachable through Termalin (your tunnel agents). Returns id, name, whether the server is online, the user commands run as, when it was last seen, its country, ip (the public address the server's Connector connects from; null until it has connected), and ownerNote — what the owner wrote about that server for you (what it is, what to leave alone); follow it. 'policy' says what you may do there: full, allowlist (only listed commands; allowedCommands holds the server's list, no file writes) or readonly (no commands, no file writes). Use the id (or the exact name) as 'host' in the other tools.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• generate_password read-only

  Generate a strong random password — handy when creating a user or setting a password on a server. Returns the password only; nothing is stored.

  Parameters:

  • length — integer — length (default 20, 8-128)

  Hints: read-only yes · destructive no · idempotent no · open-world no

• ssh_exec destructive

  Run a single shell command on one of your servers and return its combined output and exit code. Runs keyless over Termalin's tunnel — no SSH key, and the server needs no open inbound port. Each call is a fresh shell (cd does not persist — chain with &&). Keep a call under about 90 seconds: for anything longer (installs, builds, backups) use job_start and check on it with job_status.

  Parameters:

  • host (required) — string — Server id from hosts_list
  • command (required) — string — Shell command to execute
  • username — string — Login user (defaults to the tunnel's user, else root)
  • timeoutSeconds — number — Max seconds to wait (default 60). Calls longer than about 90 seconds are usually cut off by the network before they answer — run long jobs in the background instead.

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• ssh_exec_many destructive

  Run the same shell command on several of your servers at once and return each server's output and exit code. Use it to compare or check a fleet (disk space, versions, a service's state) in one call instead of one call per server. Up to 10 servers; the same 90-second limit as ssh_exec applies.

  Parameters:

  • hosts (required) — array — Server ids (or exact names) from hosts_list
  • command (required) — string — Shell command to execute on each server
  • timeoutSeconds — number — Max seconds to wait per server (default 60, at most 80)

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• job_start destructive

  Start a long-running shell command on a server in the background and return a job id right away. Use it for anything that can take more than about a minute — package installs, builds, backups, migrations, large downloads. The job keeps running after this call returns and survives the connection closing; its output goes to a log you read with job_status. The command runs from the login user's home directory.

  Parameters:

  • host (required) — string — Server id (or exact name) from hosts_list
  • command (required) — string — Shell command to run in the background
  • username — string — Login user (defaults to the server's user, else root). Use the same one for job_status/job_stop.

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• job_status read-only

  Check a background job started with job_start: whether it is still running or finished (with its exit code), when it started, and the last lines of its output.

  Parameters:

  • host (required) — string — Server id (or exact name) from hosts_list
  • job (required) — string — Job id returned by job_start
  • lines — integer — How many last lines of output to return (default 40, at most 500)
  • username — string — Login user the job was started as (if one was given to job_start)

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• job_stop destructive

  Stop a background job started with job_start (asks it to terminate, then forces it after two seconds). Does nothing if the job already finished.

  Parameters:

  • host (required) — string — Server id (or exact name) from hosts_list
  • job (required) — string — Job id returned by job_start
  • username — string — Login user the job was started as (if one was given to job_start)

  Hints: read-only no · destructive yes · idempotent yes · open-world yes

• job_list read-only

  List the recent background jobs on a server (newest first): id, state, start time and the command.

  Parameters:

  • host (required) — string — Server id (or exact name) from hosts_list
  • username — string — Login user whose jobs to list (defaults to the server's user, else root)

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• server_metrics read-only

  Numbers Termalin's monitoring collects from the user's servers every minute, without running anything now: CPU, memory, disk, load, network, the busiest processes, failed services, containers, certificates. Without `host`: one line per server with its latest numbers. With `host`: that server's latest sample in full and the average and peak over the last `hours` (default 6). Use it for 'how is the server doing' and 'what happened at night' before reaching for ssh_exec. Covers servers with metrics switched on.

  Parameters:

  • host — string — Server name or id from hosts_list. Leave out for all servers.
  • hours — number — How far back to summarise, in hours. Default 6.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• backup_create destructive

  Make an encrypted backup of one of the user's servers now, through Termalin's backup job for that server, and wait for it (up to about a minute; a longer one keeps running and shows up in backup_list). Call it BEFORE a risky change — a migration, a config rewrite, a bulk delete — and say so in 'label'. The server needs a backup job set up in the Termalin cabinet (that is where the owner chooses the paths and the encryption key); without one this tool explains how to add it. Uses the owner's storage quota, and keeps the job's 'keep last' count: when that many archives exist, the oldest one is removed.

  Parameters:

  • host (required) — string — Server id or exact name from hosts_list
  • job — string — Name of the backup job when the server has several (default: the first)
  • label — string — Why this backup is being made, e.g. 'before upgrading postgres'

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• backup_list read-only

  The backup jobs and recent archives of one of the user's servers: when each ran, whether it succeeded, how big it is and where it is stored. Use it to check that a backup exists before a risky change, or to see whether last night's backup worked.

  Parameters:

  • host (required) — string — Server id or exact name from hosts_list

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• alerts_list read-only

  What Termalin's monitoring says is wrong with the user's servers right now (disk filling up, memory or load pinned, a failed service, a restarting container, a certificate about to expire, a server offline), plus what cleared in the last seven days. Start here when asked how the servers are doing. Covers servers with metrics switched on.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• sftp_list read-only

  List a directory on one of your servers over SFTP. Returns each entry's name, whether it's a directory, size and modified time. Runs keyless over Termalin's tunnel, like ssh_exec.

  Parameters:

  • host (required) — string — Server id from hosts_list
  • path — string — Directory to list (default the login home, ".")
  • username — string — Login user (defaults to the tunnel's user, else root)

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• sftp_read read-only

  Read a text file from one of your servers over SFTP and return its contents. Files over 512 KB or non-text (binary) files are refused — use ssh_exec (e.g. sed/tail) for those.

  Parameters:

  • host (required) — string — Server id from hosts_list
  • path (required) — string — Absolute or home-relative file path
  • username — string — Login user (defaults to the tunnel's user, else root)

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• sftp_write destructive

  Create or overwrite a text file on one of your servers over SFTP. 'content' is written as UTF-8. Capped at 512 KB; for binary uploads use a terminal/scp instead.

  Parameters:

  • host (required) — string — Server id from hosts_list
  • path (required) — string — Destination file path (created or overwritten)
  • content (required) — string — UTF-8 text to write
  • username — string — Login user (defaults to the tunnel's user, else root)

  Hints: read-only no · destructive yes · idempotent yes · open-world yes

• data_query destructive

  Run a database query on one of your servers — passwordless. It executes the engine's own client on the host over Termalin's keyless tunnel, using the database's local trust (Postgres peer auth via `sudo -u postgres`, MySQL/MariaDB unix-socket via `sudo mysql`, redis-cli, mongosh, sqlite3) — so no database password is needed or stored anywhere. Read-only by default: only SELECT/SHOW-style statements run unless allowWrites is set (full-access keys only). SQL engines return CSV/TSV with a header. For MongoDB pass a shell expression, e.g. db.products.find({}).limit(20).toArray().

  Parameters:

  • host (required) — string — Server id from hosts_list
  • query (required) — string — The statement / command / expression to run
  • engine — string — Database engine on that server (default postgres)
  • database — string — Database name (for sqlite: the .db file path)
  • username — string — SSH login user (defaults to the tunnel's user, else root)
  • allowWrites — boolean — Allow a non-read statement (full-access keys only; default false)
  • timeoutSeconds — number — Max seconds to wait (default 60). Calls longer than about 90 seconds are usually cut off by the network before they answer — run long jobs in the background instead.

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• data_tables read-only

  List the tables / collections / keys of a database on one of your servers — passwordless, over the same local-client path as data_query.

  Parameters:

  • host (required) — string — Server id from hosts_list
  • engine — string — Database engine on that server (default postgres)
  • database — string — Database name (for sqlite: the .db file path)
  • username — string — SSH login user (defaults to the tunnel's user, else root)

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• data_schema read-only

  Describe one table of a database on one of your servers: its columns with type, whether they can be empty, default value and primary key. Call it before writing a query against a table you have not seen. Works for postgres, mysql, mariadb and sqlite.

  Parameters:

  • host (required) — string — Server id (or exact name) from hosts_list
  • table (required) — string — Table name, optionally with its schema (e.g. users or public.users)
  • engine — string — Database engine on that server (default postgres)
  • database — string — Database name (for sqlite: the .db file path)
  • username — string — SSH login user (defaults to the server's user, else root)

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• web_link_create

  Put an internal web service of one of the user's servers into the owner's Termalin cabinet as an 'internal site': a dashboard, admin panel or app that listens only inside that server's network (e.g. localhost:3000 on the server, or 10.0.0.5:8080 next to it). Termalin gives it its own address that only the owner can open, signed in to Termalin, through the server's Connector — nothing is exposed to the internet and no port is opened. Only private addresses are accepted. Returns the link's id and address; the owner opens it from the Termalin cabinet or app (Internal sites). This tool does not open or read the site, and it can't give anyone else access: sharing with other people is done by the owner in the cabinet. An account can hold a limited number of internal sites; when it is reached, ask the owner to remove one (web_link_delete).

  Parameters:

  • server (required) — string — Server id (or exact name) from hosts_list — the server whose Connector reaches the site
  • target (required) — string — host:port of the site as seen from that server, e.g. localhost:3000 or 10.0.0.5:8080 (a path may follow, e.g. 10.0.0.5:3000/grafana/)
  • name — string — A short name for the owner's list, e.g. 'Grafana' (optional)
  • https_inside — boolean — The site itself speaks https (default false)

  Hints: read-only no · destructive no · idempotent no · open-world no

• web_link_list read-only

  The internal sites in the owner's Termalin cabinet on the servers you can reach: id, name, server, target, address, who added it (the owner or an AI app), when, and how many people the owner shared it with. Sharing is managed by the owner in the cabinet.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• web_link_delete destructive

  Remove an internal site from the owner's Termalin cabinet by its id (from web_link_list). Its address stops working at once, for the owner and for anyone the owner shared it with. The service on the server is not touched.

  Parameters:

  • id (required) — string — Internal site id from web_link_list or web_link_create

  Hints: read-only no · destructive yes · idempotent yes · open-world no

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.