21 tools that work with Linux: 16 MCP servers, 5 Agent Skills and 0 Claude Code plugins. 0 of the remote servers answered our live check, 0 worked without an API key, and 2 come from an official or verified publisher. Ranked by GitHub stars plus official, live and free-to-try signals.
Most common uses: Cloud providers & infrastructure as code (5), Pentest & threat intel (4), OS, shell, terminal & desktop automation (3), Monitoring, logs & incidents (3).
| Tool | Stars | Last update | License | |
|---|---|---|---|---|
| acquiring-disk-image-with-dd-and-dcfldd Create forensically sound bit-for-bit disk images with dd or dcfldd on a Linux forensic workstation, preserving evidence integrity through hash verifi SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| analyzing-linux-audit-logs-for-intrusion Uses the Linux Audit framework (auditd) with ausearch and aureport utilities to detect intrusion attempts, unauthorized access, privilege escalation, SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| analyzing-linux-system-artifacts Examine Linux system artifacts (auth logs, cron/systemd persistence, shell history, SSH keys, and system configuration) to uncover evidence of comprom SkillInstall · skills CLI | 36,105 | Apache-2.0 | ||
| Machines Start, pause, resume, and run commands and file operations in Linux sandboxes. MCP serverGitHub-verified authorRemoteSign-in needed | 5,294 | MIT | ||
| linux-privilege-escalation This skill should be used when the user asks to "escalate privileges on Linux", "find privesc vectors on Linux systems", "exploit sudo misconfiguratio SkillInstall · skills CLI | 4,708 | MIT | ||
| io.github.rhel-lightspeed/linux-mcp-server MCP server for read-only Linux system administration, diagnostics, and troubleshooting MCP serverGitHub-verified authorLocal · PyPI | 320 | Apache-2.0 | ||
| SysKnife Administers Linux via typed, approval-gated actions with an Ed25519-signed audit trail. MCP serverGitHub-verified authorLocal · Cargo | 242 | MIT | ||
| server-patrol Linux 与网络设备只读健康巡检；直接运行 scripts/patrol.sh，配置由平台侧信道注入，Agent 不读取环境变量 SkillInstall · skills CLI | 173 | MIT | ||
| com.ascent-partners/opencode-workbench Provision an OpenCode workbench and MCP stack on any Linux box, local or over SSH. MCP serverVerified domain · ascent-partners.comLocal · npm | 1 | MIT | ||
| com.639cloud/shell Linux machines for AI agents: create, run commands, snapshot, fork, sandbox. Alpha. MCP serverVerified domain · 639cloud.comRemoteDown | — | — | ||
| YAP — Yet Another Packager Build native Linux packages (.deb/.rpm/.apk/.pkg.tar.zst) from a single PKGBUILD via MCP. MCP serverGitHub-verified authorLocal · Docker | 21 | GPL-3.0 | ||
| Linux MCP daemon (mcpd) AI agent access to Linux servers without SSH: scoped tools, per-call isolation, root only if granted MCP serverGitHub-verified authorRemoteDown | 7 | Apache-2.0 | ||
| Linux MCP Linux MCP server for real-time system monitoring - CPU, memory, disk, network, processes, Docker. MCP serverGitHub-verified authorLocal · MCPB | 3 | MIT | ||
| agend-sh Persistent Linux environments for AI agents, with interactive terminals and HTTPS previews. MCP serverGitHub-verified authorLocal · Docker | 0 | MIT | ||
| Burrowbox Persistent Linux computers for AI agents: desktop, signed-in browser, vault, apps and shell. MCP serverGitHub-verified authorRemoteSign-in needed | 0 | MIT | ||
| io.github.coe0718/deskbrid Linux automation. 125 MCP tools: windows, input, screenshots, clipboard, print, AT-SPI. 9 DEs. MCP serverGitHub-verified authorLocal · Docker | — | — | ||
| Linux Filesystem Enhanced Linux filesystem access with symlinks, permissions, and chmod support MCP serverGitHub-verified authorLocal · MCPB | — | — | ||
| PkgSeek Linux Intelligence Linux package, file, command, vulnerability, lifecycle, migration, and repository intelligence. MCP serverGitHub-verified authorRemoteDown | — | — | ||
| Remote Terminal MCP Complete SSH terminal for Linux with AI/user control and dual-stream visibility MCP serverGitHub-verified authorLocal · PyPI | — | — | ||
| selvo Linux CVE prioritisation: 16 MCP tools for scan, fleet, runtime, and PR-able fix discovery. MCP serverGitHub-verified authorLocal · PyPI | — | — | ||
| sysmcp Live Linux host signal (CPU, memory, processes, network, optional eBPF) for MCP clients. MCP serverGitHub-verified authorLocal · MCPB | 0 | MIT |