Termix

io.github.sujirodev由 GitHub 帳號 sujirodev 發布v0.1.0更新於 Oct 24, 2026

Manage hosts, snippets, dashboard, metrics and audit of a self-hosted Termix (SSH/RDP/VNC manager)

概覽

AI 產生的概覽

讓助理瀏覽與操作自架的 Termix(SSH/RDP/VNC 管理器):主機、程式碼片段、指標、儀表板、檔案與稽核記錄。

可以做什麼
以 termix-sdk 封裝 Termix API,提供精選的工具集,而非完整 API 對映。讀取類工具涵蓋主機、主機指標與狀態、儀表板摘要、程式碼片段、稽核事件與工作階段記錄、系統資訊以及 API 金鑰。寫入類工具可建立、更新與刪除主機、程式碼片段、認證資料、告警規則、通道與檔案,執行程式碼片段與自動化,並啟動、停止或重啟容器。工具依工具集分組,預設啟用 hosts、snippets、dashboard、metrics、system 與 audit。
適用情境
當你自架 Termix 執行個體,並希望助理回答已註冊主機、指標與稽核活動相關問題,或執行建立主機、執行程式碼片段、處理檔案等日常管理作業時適用。唯讀模式適合只想要可視性、不允許助理做任何變更的團隊。
執行需求
透過 uvx termix-mcp、pip 或 ghcr.io/sujirodev/termix-mcp 映像以 stdio 在本機執行。需要 TERMIX_URL 指向 Termix 執行個體,並在 TERMIX_API_KEY 中提供 Termix API 金鑰;不支援 JWT 與 TOTP。選用變數可控制唯讀模式、工具集、工具允許/拒絕清單、機密遮蔽、項目上限、逾時、TLS 驗證與 HTTP 傳輸。
安裝前請注意
TERMIX_API_KEY 中的 API 金鑰具有其 Termix 角色的權限,應依最小 RBAC 授權。寫入類工具可建立、更新與刪除主機、程式碼片段、認證資料、告警規則、通道與檔案,並可在主機上執行程式碼片段與自動化;TERMIX_MCP_READ_ONLY 會隱藏並封鎖這些工具。認證資料類工具可顯示已儲存的機密,credentials、files、docker、tunnels、alerts、automations 與 users 工具集需明確啟用。admin 與 dangerous 工具集不包含在 all 中。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Termix,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

termix-mcp

[CI] [PyPI] [License] [Python] [Docker]

MCP server for Termix, the self-hosted SSH/RDP/VNC manager. Lets an agent (Claude Desktop, Claude Code, Cursor, VS Code...) list and operate your Termix's hosts, snippets, dashboard, metrics and audit trail, built on top of termix-sdk.

Not a 1:1 wrapper of the Termix API: it's a curated set of tools, secure by default (no secrets, no persistent SSH session, no destructive tools outside of explicit toolsets).

[MCP Registry]

Install

bash
uvx termix-mcp

Alternatives: pip install termix-mcp or the ghcr.io/sujirodev/termix-mcp image.

Requires a Termix API key (tmx_...) with the minimum RBAC permissions for what the agent will do - see SECURITY.md.

Configure in your client

Claude Desktop / Claude Code (claude_desktop_config.json or .mcp.json):

json
{  "mcpServers": {    "termix": {      "command": "uvx",      "args": ["termix-mcp"],      "env": {        "TERMIX_URL": "https://termix.example.com",        "TERMIX_API_KEY": "tmx_xxxxxxxxxxxxxxxxxxxxxxxx"      }    }  }}

Cursor / VS Code: same format, in each one's MCP configuration file.

Install via the MCP Registry

termix-mcp is published in the official MCP Registry under the name io.github.sujirodev/termix-mcp, with both a PyPI (uvx) package and an OCI (Docker) image listed - see server.json.

Clients that support registry-based discovery can find and install it directly from there instead of hand-writing the JSON config above:

bash
curl -s "https://registry.modelcontextprotocol.io/v0/servers?search=io.github.sujirodev/termix-mcp"

Then follow your client's own "add from registry" flow, searching for io.github.sujirodev/termix-mcp. You'll still need to set TERMIX_URL and TERMIX_API_KEY yourself - the registry entry doesn't carry your credentials.

You say / what happens

You sayWhat the tool does
"what hosts do I have registered?"termix_list_hosts
"show me the metrics for host X"termix_get_host_metrics
"run snippet Y on host X"termix_run_snippet (blocked in read-only mode)
"create a new host for this server"termix_create_host (blocked in read-only mode)
"what audit activity happened this week?"termix_list_audit_events

Environment variables

VariableDefaultDescription
TERMIX_URLrequiredTermix base URL
TERMIX_API_KEYrequiredtmx_... API key (JWT/TOTP are not supported)
TERMIX_SERVICE_URLSemptyJSON {"database": "http://..."} for installs without a proxy
TERMIX_VERIFY_SSLtrueValidates the TLS certificate
TERMIX_TIMEOUT30Timeout per request (s)
TERMIX_MAX_RETRIES2Passed through to the SDK
TERMIX_MCP_READ_ONLYfalseHides and blocks write tools
TERMIX_MCP_TOOLSETSdefaultdefault, all, or a list hosts,snippets,files
TERMIX_MCP_ENABLED_TOOLSemptyAllowlist by tool name
TERMIX_MCP_DISABLED_TOOLSemptyDenylist by tool name
TERMIX_MCP_REDACT_SECRETStrueMasks secrets in all outputs
TERMIX_MCP_MAX_ITEMS50Default item limit for listings
TERMIX_MCP_TRANSPORTstdiostdio or http
TERMIX_MCP_HTTP_HOST / _PORT127.0.0.1 / 8765HTTP transport bind
TERMIX_MCP_HTTP_PATHgenerated and loggedSecret path of the HTTP endpoint
TERMIX_MCP_LOG_LEVELINFOLog level (stderr on stdio, stdout on http)

Toolsets

Enabled by default: hosts, snippets, dashboard, metrics, system, audit.

Opt-in (TERMIX_MCP_TOOLSETS=hosts,files,docker,...): credentials, files, docker, tunnels, alerts, automations, users.

Disabled and explicit (never included in all): admin, dangerous.

TERMIX_MCP_READ_ONLY=true hides and blocks every tool that isn't read-only, in any toolset.

Tools

Full tool list (generated by scripts/generate_tool_docs.py)
ToolToolsetRead-onlyDestructiveFlags
termix_get_audit_forwardingadminyesnoadmin
termix_get_brandingadminyesnoadmin
termix_get_encryption_statusadminyesnoadmin
termix_get_host_defaultsadminyesnoadmin
termix_get_termix_id_statusadminyesnoadmin
termix_list_sso_providersadminyesnoadmin
termix_update_brandingadminnonoadmin
termix_acknowledge_alert_firingalertsnono-
termix_create_alert_rulealertsnono-
termix_delete_alert_rulealertsnoyes-
termix_list_alert_rulesalertsyesno-
termix_get_session_logaudityesno-
termix_list_audit_eventsaudityesno-
termix_list_session_logsaudityesno-
termix_get_automationautomationsyesno-
termix_list_automationsautomationsyesno-
termix_list_fleetsautomationsyesno-
termix_run_automationautomationsnonodata-access
termix_create_credentialcredentialsnono-
termix_delete_credentialcredentialsnoyes-
termix_get_credentialcredentialsyesno-
termix_list_credentialscredentialsyesno-
termix_reveal_credentialcredentialsyesnodata-access
termix_update_credentialcredentialsnono-
termix_get_dashboard_summarydashboardyesno-
termix_get_homepagedashboardyesno-
termix_list_open_tabsdashboardyesno-
termix_list_workspacesdashboardyesno-
termix_get_containerdockeryesnodata-access
termix_get_container_logsdockeryesnodata-access
termix_get_container_statsdockeryesnodata-access
termix_list_containersdockeryesnodata-access
termix_restart_containerdockernonodata-access
termix_start_containerdockernonodata-access
termix_stop_containerdockernonodata-access
termix_create_folderfilesnonodata-access
termix_delete_filefilesnoyesdata-access
termix_list_filesfilesyesnodata-access
termix_move_filefilesnonodata-access
termix_read_filefilesyesnodata-access
termix_rename_filefilesnonodata-access
termix_write_filefilesnonodata-access
termix_create_hosthostsnono-
termix_delete_hosthostsnoyes-
termix_disable_host_autostarthostsnono-
termix_enable_host_autostarthostsnono-
termix_get_hosthostsyesno-
termix_get_network_topologyhostsyesno-
termix_list_host_foldershostsyesno-
termix_list_host_tagshostsyesno-
termix_list_hostshostsyesno-
termix_update_hosthostsnono-
termix_get_host_metricsmetricsyesno-
termix_get_host_statusmetricsyesno-
termix_get_metrics_historymetricsyesno-
termix_get_proxmox_statsmetricsyesno-
termix_list_active_alertsmetricsyesno-
termix_list_host_statusesmetricsyesno-
termix_create_snippetsnippetsnono-
termix_delete_snippetsnippetsnoyes-
termix_get_snippetsnippetsyesno-
termix_list_snippetssnippetsyesno-
termix_run_snippetsnippetsnono-
termix_update_snippetsnippetsnono-
termix_get_preferencessystemyesno-
termix_get_system_infosystemyesno-
termix_list_api_keyssystemyesno-
termix_create_tunneltunnelsnonodata-access
termix_delete_tunneltunnelsnonodata-access
termix_get_tunneltunnelsyesno-
termix_list_tunnel_presetstunnelsyesno-
termix_list_tunnelstunnelsyesno-
termix_assign_roleusersnonoadmin
termix_get_userusersyesnoadmin
termix_list_credential_accessusersyesnoadmin
termix_list_folder_accessusersyesnoadmin
termix_list_rolesusersyesnoadmin
termix_list_usersusersyesnoadmin

Total: 78 tools.

Contributing

See CONTRIBUTING.md.

Security

See SECURITY.md for the threat model.

License

MIT

來源:README.md,提交 311eed7

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

1
  1. v0.1.0最新Sep 23, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分