emisar — Claude Code MCP server: what it does, how to install
Lets coding agents run pre-declared infrastructure actions on Linux without raw SSH access. Keeps risk bounded with approval checks and audit trails.
claude mcp add --transport http emisar https://emisar.dev/api/mcp/rpcWhat emisar does
emisar replaces open terminal access with a fixed catalog of declared action packs. The AI client picks a pre-built task with schema-validated arguments instead of assembling shell commands. Before execution, the control plane checks policy rules, scope, and holds risky calls until an operator approves them.
Execution on the host relies on an outbound-only daemon using a TLS WebSocket, keeping inbound network ports closed. This runner verifies the cryptographic hash of each action pack on disk, strips sensitive tokens from stdout, and records every run in a local hash-chained JSONL log.
Setup fails immediately on systems without Linux systemd and sudo. Because the runner does not isolate operating system processes on its own, operators still need strict OS permissions or an external container sandbox like coop.
What it helps with
- Execute maintenance tasks on Linux hosts without handing over shell access
- Require human sign-off before running disruptive system operations
- Filter sensitive terminal output before it reaches the model
- Track host modifications in a tamper-resistant local log
Example prompts for the agent
- Check system uptime and runner health on the staging server via emisar
- Run the linux.uptime declared action and provide a reason for the audit trail
- Trigger a maintenance pack task on the connected host
How to install emisar
Platform CLI: remote server
claude mcp add --transport http emisar https://emisar.dev/api/mcp/rpcPlatform CLI: remote server
codex mcp add emisar --url https://emisar.dev/api/mcp/rpcConfig file
{
"mcpServers": {
"emisar": {
"url": "https://emisar.dev/api/mcp/rpc"
}
}
}Config file
{
"servers": {
"emisar": {
"type": "http",
"url": "https://emisar.dev/api/mcp/rpc"
}
}
}Platform CLI: remote server
gemini mcp add -t http emisar https://emisar.dev/api/mcp/rpcStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about emisar
How to install emisar in Claude Code?
Run claude mcp add --transport http emisar https://emisar.dev/api/mcp/rpc. You will also need an account on emisar.dev and an active runner installed on your Linux machine.
What does emisar do?
It exposes declared host tasks to agents instead of a generic shell. Risk policies enforce human sign-off, while an outbound runner executes commands locally without listening on inbound ports.
What are the host requirements for running emisar?
The target machine must run Linux with systemd and grant sudo rights. Outbound HTTPS traffic on port 443 to emisar.dev and trust verification endpoints is also mandatory.
