Run commands and read/write files on your servers over Termalin's keyless tunnels (hosted MCP).
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Bearer <API key> — create one at termal.in/account (API keys & MCP section)
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
What Termalin's monitoring says is wrong with the user's servers right now (disk filling up, memory or load pinned, a failed service, a restarting container, a certificate about to expire, a server offline), plus what cleared in the last seven days. Start here when asked how the servers are doing. Covers servers with metrics switched on.
This tool takes no arguments.
What Termalin's monitoring says is wrong with the user's servers right now (disk filling up, memory or load pinned, a failed service, a restarting container, a certificate about to expire, a server offline), plus what cleared in the last seven days. Start here when asked how the servers are doing. Covers servers with metrics switched on.
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}Make an encrypted backup of one of the user's servers now, through Termalin's backup job for that server, and wait for it (up to about a minute; a longer one keeps running and shows up in backup_list). Call it BEFORE a risky change — a migration, a config rewrite, a bulk delete — and say so in 'label'. The server needs a backup job set up in the Termalin cabinet (that is where the owner chooses the paths and the encryption key); without one this tool explains how to add it. Uses the owner's storage quota.
| Argument | Type | Description |
|---|---|---|
| job | string | Name of the backup job when the server has several (default: the first) |
| host* | string | Server id or exact name from hosts_list |
| label | string | Why this backup is being made, e.g. 'before upgrading postgres' |
{
"type": "object",
"required": [
"host"
],
"properties": {
"job": {
"type": "string",
"description": "Name of the backup job when the server has several (default: the first)"
},
"host": {
"type": "string",
"description": "Server id or exact name from hosts_list"
},
"label": {
"type": "string",
"description": "Why this backup is being made, e.g. 'before upgrading postgres'"
}
},
"additionalProperties": false
}The backup jobs and recent archives of one of the user's servers: when each ran, whether it succeeded, how big it is and where it is stored. Use it to check that a backup exists before a risky change, or to see whether last night's backup worked.
| Argument | Type | Description |
|---|---|---|
| host* | string | Server id or exact name from hosts_list |
{
"type": "object",
"required": [
"host"
],
"properties": {
"host": {
"type": "string",
"description": "Server id or exact name from hosts_list"
}
},
"additionalProperties": false
}Run a database query on one of your servers — passwordless. It executes the engine's own client on the host over Termalin's keyless tunnel, using the database's local trust (Postgres peer auth via `sudo -u postgres`, MySQL/MariaDB unix-socket via `sudo mysql`, redis-cli, mongosh, sqlite3) — so no database password is needed or stored anywhere. Read-only by default: only SELECT/SHOW-style statements run unless allowWrites is set (full-access keys only). SQL engines return CSV/TSV with a header. For MongoDB pass a shell expression, e.g. db.products.find({}).limit(20).toArray().
| Argument | Type | Description |
|---|---|---|
| host* | string | Server id from hosts_list |
| query* | string | The statement / command / expression to run |
| engine | string | Database engine on that server (default postgres) |
| database | string | Database name (for sqlite: the .db file path) |
| username | string | SSH login user (defaults to the tunnel's user, else root) |
| allowWrites | boolean | Allow a non-read statement (full-access keys only; default false) |
| timeoutSeconds | number | Max seconds to wait (default 60). Calls longer than about 90 seconds are usually cut off by the network before they answer — run long jobs in the background instead. |
Describe one table of a database on one of your servers: its columns with type, whether they can be empty, default value and primary key. Call it before writing a query against a table you have not seen. Works for postgres, mysql, mariadb and sqlite.
| Argument | Type | Description |
|---|---|---|
| host* | string | Server id (or exact name) from hosts_list |
| table* | string | Table name, optionally with its schema (e.g. users or public.users) |
| engine | string | Database engine on that server (default postgres) |
| database | string | Database name (for sqlite: the .db file path) |
| username | string | SSH login user (defaults to the server's user, else root) |
{
"type": "object",
"required": [
"host",
"table"
],
"properties": {
"host": {
"type": "string",
"description": "Server id (or exact name) from hosts_list"
},
"table": {
"type": "string",
"description": "Table name, optionally with its schema (e.g. users or public.users)"
},
"engine": {
"enum": [
"postgres",
"mysql",
"mariadb",
"sqlite"
],
"type": "string",
"description": "Database engine on that server (default postgres)"
},
"database": {
"type": "string",
"description": "Database name (for sqlite: the .db file path)"
},
"username": {
"type": "string",
"description": "SSH login user (defaults to the server's user, else root)"
}
},
"additionalProperties": false
}List the tables / collections / keys of a database on one of your servers — passwordless, over the same local-client path as data_query.
| Argument | Type | Description |
|---|---|---|
| host* | string | Server id from hosts_list |
| engine | string | Database engine on that server (default postgres) |
| database | string | Database name (for sqlite: the .db file path) |
| username | string | SSH login user (defaults to the tunnel's user, else root) |
{
"type": "object",
"required": [
"host"
],
"properties": {
"host": {
"type": "string",
"description": "Server id from hosts_list"
},
"engine": {
"enum": [
"postgres",
"mysql",
"mariadb",
"redis",
"mongodb",
"sqlite"
],
"type": "string",
"description": "Database engine on that server (default postgres)"
},
"database": {
"type": "string",
"description": "Database name (for sqlite: the .db file path)"
},
"username": {
"type": "string",
"description": "SSH login user (defaults to the tunnel's user, else root)"
}
},
"additionalProperties": false
}Generate a strong random password — handy when creating a user or setting a password on a server. Returns the password only; nothing is stored.
| Argument | Type | Description |
|---|---|---|
| length | integer | length (default 20, 8-128) |
{
"type": "object",
"properties": {
"length": {
"type": "integer",
"description": "length (default 20, 8-128)"
}
},
"additionalProperties": false
}List the servers reachable through Termalin (your tunnel agents). Returns id, name, whether the server is online, the user commands run as, when it was last seen, its country, ip (the public address the server's Connector connects from; null until it has connected), and ownerNote — what the owner wrote about that server for you (what it is, what to leave alone); follow it. 'policy' says what you may do there: full, allowlist (only listed commands; allowedCommands holds the server's list, no file writes) or readonly (no commands, no file writes). Use the id (or the exact name) as 'host' in the other tools.
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}List the recent background jobs on a server (newest first): id, state, start time and the command.
| Argument | Type | Description |
|---|---|---|
| host* | string | Server id (or exact name) from hosts_list |
| username | string | Login user whose jobs to list (defaults to the server's user, else root) |
{
"type": "object",
"required": [
"host"
],
"properties": {
"host": {
"type": "string",
"description": "Server id (or exact name) from hosts_list"
},
"username": {
"type": "string",
"description": "Login user whose jobs to list (defaults to the server's user, else root)"
}
},
"additionalProperties": false
}Start a long-running shell command on a server in the background and return a job id right away. Use it for anything that can take more than about a minute — package installs, builds, backups, migrations, large downloads. The job keeps running after this call returns and survives the connection closing; its output goes to a log you read with job_status. The command runs from the login user's home directory.
| Argument | Type | Description |
|---|---|---|
| host* | string | Server id (or exact name) from hosts_list |
| command* | string | Shell command to run in the background |
| username | string | Login user (defaults to the server's user, else root). Use the same one for job_status/job_stop. |
{
"type": "object",
"required": [
"host",
"command"
],
"properties": {
"host": {
"type": "string",
"description": "Server id (or exact name) from hosts_list"
},
"command": {
"type": "string",
"description": "Shell command to run in the background"
},
"username": {
"type": "string",
"description": "Login user (defaults to the server's user, else root). Use the same one for job_status/job_stop."
}
},
"additionalProperties": false
}Check a background job started with job_start: whether it is still running or finished (with its exit code), when it started, and the last lines of its output.
| Argument | Type | Description |
|---|---|---|
| job* | string | Job id returned by job_start |
| host* | string | Server id (or exact name) from hosts_list |
| lines | integer | How many last lines of output to return (default 40, at most 500) |
| username | string | Login user the job was started as (if one was given to job_start) |
{
"type": "object",
"required": [
"host",
"job"
],
"properties": {
"job": {
"type": "string",
"description": "Job id returned by job_start"
},
"host": {
"type": "string",
"description": "Server id (or exact name) from hosts_list"
},
"lines": {
"type": "integer",
"description": "How many last lines of output to return (default 40, at most 500)"
},
"username": {
"type": "string",
"description": "Login user the job was started as (if one was given to job_start)"
}
},
"additionalProperties": false
}Stop a background job started with job_start (asks it to terminate, then forces it after two seconds). Does nothing if the job already finished.
| Argument | Type | Description |
|---|---|---|
| job* | string | Job id returned by job_start |
| host* | string | Server id (or exact name) from hosts_list |
| username | string | Login user the job was started as (if one was given to job_start) |
{
"type": "object",
"required": [
"host",
"job"
],
"properties": {
"job": {
"type": "string",
"description": "Job id returned by job_start"
},
"host": {
"type": "string",
"description": "Server id (or exact name) from hosts_list"
},
"username": {
"type": "string",
"description": "Login user the job was started as (if one was given to job_start)"
}
},
"additionalProperties": false
}Numbers Termalin's monitoring collects from the user's servers every minute, without running anything now: CPU, memory, disk, load, network, the busiest processes, failed services, containers, certificates. Without `host`: one line per server with its latest numbers. With `host`: that server's latest sample in full and the average and peak over the last `hours` (default 6). Use it for 'how is the server doing' and 'what happened at night' before reaching for ssh_exec. Covers servers with metrics switched on.
| Argument | Type | Description |
|---|---|---|
| host | string | Server name or id from hosts_list. Leave out for all servers. |
| hours | number | How far back to summarise, in hours. Default 6. |
{
"type": "object",
"properties": {
"host": {
"type": "string",
"description": "Server name or id from hosts_list. Leave out for all servers."
},
"hours": {
"type": "number",
"description": "How far back to summarise, in hours. Default 6."
}
},
"additionalProperties": false
}List a directory on one of your servers over SFTP. Returns each entry's name, whether it's a directory, size and modified time. Runs keyless over Termalin's tunnel, like ssh_exec.
| Argument | Type | Description |
|---|---|---|
| host* | string | Server id from hosts_list |
| path | string | Directory to list (default the login home, ".") |
| username | string | Login user (defaults to the tunnel's user, else root) |
{
"type": "object",
"required": [
"host"
],
"properties": {
"host": {
"type": "string",
"description": "Server id from hosts_list"
},
"path": {
"type": "string",
"description": "Directory to list (default the login home, \".\")"
},
"username": {
"type": "string",
"description": "Login user (defaults to the tunnel's user, else root)"
}
},
"additionalProperties": false
}Read a text file from one of your servers over SFTP and return its contents. Files over 512 KB or non-text (binary) files are refused — use ssh_exec (e.g. sed/tail) for those.
| Argument | Type | Description |
|---|---|---|
| host* | string | Server id from hosts_list |
| path* | string | Absolute or home-relative file path |
| username | string | Login user (defaults to the tunnel's user, else root) |
{
"type": "object",
"required": [
"host",
"path"
],
"properties": {
"host": {
"type": "string",
"description": "Server id from hosts_list"
},
"path": {
"type": "string",
"description": "Absolute or home-relative file path"
},
"username": {
"type": "string",
"description": "Login user (defaults to the tunnel's user, else root)"
}
},
"additionalProperties": false
}Create or overwrite a text file on one of your servers over SFTP. 'content' is written as UTF-8. Capped at 512 KB; for binary uploads use a terminal/scp instead.
| Argument | Type | Description |
|---|---|---|
| host* | string | Server id from hosts_list |
| path* | string | Destination file path (created or overwritten) |
| content* | string | UTF-8 text to write |
| username | string | Login user (defaults to the tunnel's user, else root) |
{
"type": "object",
"required": [
"host",
"path",
"content"
],
"properties": {
"host": {
"type": "string",
"description": "Server id from hosts_list"
},
"path": {
"type": "string",
"description": "Destination file path (created or overwritten)"
},
"content": {
"type": "string",
"description": "UTF-8 text to write"
},
"username": {
"type": "string",
"description": "Login user (defaults to the tunnel's user, else root)"
}
},
"additionalProperties": false
}Run a single shell command on one of your servers and return its combined output and exit code. Runs keyless over Termalin's tunnel — no SSH key, and the server needs no open inbound port. Each call is a fresh shell (cd does not persist — chain with &&). Keep a call under about 90 seconds: for anything longer (installs, builds, backups) use job_start and check on it with job_status.
| Argument | Type | Description |
|---|---|---|
| host* | string | Server id from hosts_list |
| command* | string | Shell command to execute |
| username | string | Login user (defaults to the tunnel's user, else root) |
| timeoutSeconds | number | Max seconds to wait (default 60). Calls longer than about 90 seconds are usually cut off by the network before they answer — run long jobs in the background instead. |
{
"type": "object",
"required": [
"host",
"command"
],
"properties": {
"host": {
"type": "string",
"description": "Server id from hosts_list"
},
"command": {
"type": "string",
"description": "Shell command to execute"
},
"username": {
"type": "string",
"description": "Login user (defaults to the tunnel's user, else root)"
},
"timeoutSeconds": {
"type": "number",
"description": "Max seconds to wait (default 60). Calls longer than about 90 seconds are usually cut off by the network before they answer — run long jobs in the background instead."
}
},
"additionalProperties": false
}Run the same shell command on several of your servers at once and return each server's output and exit code. Use it to compare or check a fleet (disk space, versions, a service's state) in one call instead of one call per server. Up to 10 servers; the same 90-second limit as ssh_exec applies.
| Argument | Type | Description |
|---|---|---|
| hosts* | array | Server ids (or exact names) from hosts_list |
| command* | string | Shell command to execute on each server |
| timeoutSeconds | number | Max seconds to wait per server (default 60, at most 80) |
{
"type": "object",
"required": [
"hosts",
"command"
],
"properties": {
"hosts": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 10,
"minItems": 1,
"description": "Server ids (or exact names) from hosts_list"
},
"command": {
"type": "string",
"description": "Shell command to execute on each server"
},
"timeoutSeconds": {
"type": "number",
"description": "Max seconds to wait per server (default 60, at most 80)"
}
},
"additionalProperties": false
}{
"type": "object",
"required": [
"host",
"query"
],
"properties": {
"host": {
"type": "string",
"description": "Server id from hosts_list"
},
"query": {
"type": "string",
"description": "The statement / command / expression to run"
},
"engine": {
"enum": [
"postgres",
"mysql",
"mariadb",
"redis",
"mongodb",
"sqlite"
],
"type": "string",
"description": "Database engine on that server (default postgres)"
},
"database": {
"type": "string",
"description": "Database name (for sqlite: the .db file path)"
},
"username": {
"type": "string",
"description": "SSH login user (defaults to the tunnel's user, else root)"
},
"allowWrites": {
"type": "boolean",
"description": "Allow a non-read statement (full-access keys only; default false)"
},
"timeoutSeconds": {
"type": "number",
"description": "Max seconds to wait (default 60). Calls longer than about 90 seconds are usually cut off by the network before they answer — run long jobs in the background instead."
}
},
"additionalProperties": false
}