Home › Development › kvm-pilot

kvm-pilot

Smart hands for your AI agents - write-capable KVM+BMC+SSH MCP server: gated, verified, audited.

Python

★ 16 stars Last pushed 2026-10-29 License: Apache-2.0

View repository →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (pypi 1.0.1)

uvx kvm-pilot

Or add to your MCP client config:

{
  "mcpServers": {
    "kvm-pilot": {
      "command": "uvx",
      "args": [
        "kvm-pilot"
      ],
      "env": {
        "KVM_PILOT_PROFILE": "<YOUR_VALUE>",
        "KVM_PILOT_MCP_READ_ONLY": "<YOUR_VALUE>",
        "KVM_PILOT_MCP_DRY_RUN": "<YOUR_VALUE>",
        "KVM_PILOT_MCP_ALLOW_POWER": "<YOUR_VALUE>",
        "KVM_PILOT_HOST": "<YOUR_VALUE>",
        "KVM_PILOT_USER": "<YOUR_VALUE>",
        "KVM_PILOT_PASSWD": "<YOUR_VALUE>",
        "ANTHROPIC_API_KEY": "<YOUR_VALUE>"
      }
    }
  }
}

KVM_PILOT_PROFILE — Profile name from ~/.config/kvm-pilot/config.toml naming the KVM/BMC to target
KVM_PILOT_MCP_READ_ONLY — Least-privilege posture: only read-only tools are registered; effect gates force-closed. Recommended for first contact (set to 1)
KVM_PILOT_MCP_DRY_RUN — Rehearsal posture: destructive calls are logged, never sent (set to 1)
KVM_PILOT_MCP_ALLOW_POWER — Operator opt-in enabling power control of the managed host (per-effect gate; see also _ALLOW_HID, _ALLOW_MEDIA, _ALLOW_SSH, _ALLOW_APPLIANCE, _ALLOW_EXTERNAL_WRITE)
KVM_PILOT_HOST — Device address (KVM/BMC) when not using a config-file profile
KVM_PILOT_USER — Device username when not using a config-file profile
KVM_PILOT_PASSWD secret — Device password when not using a config-file profile (KVM_PILOT_HOST / KVM_PILOT_USER accompany it)
ANTHROPIC_API_KEY secret — Optional: enables server-side vision for classify_screen / wait_for_state; without it, classification falls back to the calling agent