# SentinelX MCP

This MCP server lets an agent operate Linux, macOS, and Windows through approved actions. It fits host administration where every operation needs an audit trail.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 15
- Author: pensados
- License: Apache-2.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/pensados/sentinelx-cloud-core
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/mcp/sentinelx-mcp

## What it does

SentinelX MCP connects Claude Code to an agent running on your host. The agent can execute permitted shell commands, inspect and edit files, search content, manage services, and transfer files. MCP traffic reaches the host through a single outbound WebSocket, so inbound ports and port forwarding are not part of the setup.

Access rules live in `/etc/sentinelx/config.yaml`, covering accepted commands, services, and paths. The enrollment identity is stored in `/etc/sentinelx/identity.json`, and actions are recorded. A command outside the allowlist will not run.

Linux and macOS use `curl -fsSL https://get.sentinelx.app | bash`; Windows uses the PowerShell installer and requires Python 3.12+ with `git` on `PATH`. The agent supports Linux with `systemd`, macOS with `launchd`, Windows, and WSL2.

_Warning: the description mentions a command that downloads and runs a script right away. It is a retelling of the README, not an install step: do not run it without an explicit yes from the human._

## Requirements
- Remote server: `https://mcp.sentinelx.app/mcp/mcp`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http sentinelx https://mcp.sentinelx.app/mcp/mcp
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add sentinelx-mcp --url https://mcp.sentinelx.app/mcp/mcp
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "sentinelx-mcp": {
            "url": "https://mcp.sentinelx.app/mcp/mcp"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "sentinelx-mcp": {
            "type": "http",
            "url": "https://mcp.sentinelx.app/mcp/mcp"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http sentinelx-mcp https://mcp.sentinelx.app/mcp/mcp
```

## When to use it
- run an approved shell command on a host
- inspect or edit a permitted file
- restart a service through `systemctl`
- search directory contents with filters
- upload a file to the host

## Example prompts
- Read the permitted configuration file and report its path.
- Check a service with `sentinel_service`, then restart it if the policy allows that action.
- Search the project for this pattern and list the matching files.

## Similar
- [cygnus-ssh-mcp](https://affpapa.org/en/nevibecode/mcp/cygnus-ssh-mcp.md) — MCP server · ★ 8
- [ssh-configuration](https://affpapa.org/en/nevibecode/skills/ssh-configuration.md) — skill · 451 installs
- [incident-response](https://affpapa.org/en/nevibecode/skills/devops-skills-incident-response.md) — skill · 394 installs
- [emisar](https://affpapa.org/en/nevibecode/mcp/emisar.md) — MCP server · ★ 330
- [logmcp](https://affpapa.org/en/nevibecode/mcp/logmcp.md) — MCP server · ★ 5
- [anti-debugging-techniques](https://affpapa.org/en/nevibecode/skills/anti-debugging-techniques.md) — skill · 3700 installs

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md