Infra MCP
About
Read-only MCP server for on-prem Linux VMs and PostgreSQL over SSH — service health, logs, DB state, and schema exploration without terminal access.
Details
- Author
- esp4ce
- Downloads
- 281
- Categories
- Developer Tools, Infrastructure, Database
Jump to
- Read‑only SSH access to Linux VMs and PostgreSQL databases
- Allowlist‑gated commands, services, and log file paths
- All remote operations written to an append‑only JSONL audit log
- Server‑side output bounds (200 log lines, 100 DB rows, 200 tables max)
- Schema caching with configurable TTL and manual refresh
- Read‑only DB transactions using a dedicated PostgreSQL role
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Infra MCPCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Install with uv tool install infra-mcp or pip install infra-mcp. Generate a starter config from ~/.ssh/config with infra-mcp generate-config, set up read-only PostgreSQL roles with infra-mcp setup, verify reachability with infra-mcp test, and discover services/logs/databases with infra-mcp discover --in-place. Then run with infra-mcp run and register it as a stdio MCP server in your client (e.g., Claude Code, Cursor).
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"infra mcp": {
"infra-mcp": {
"command": "infra-mcp",
"args": [
"run"
]
}
}
}
}
McpServers
{
"infra-mcp": {
"command": "infra-mcp",
"args": [
"run"
]
}
}
infra-mcp
agent ──stdio──▶ infra-mcp ──SSH──▶ VMs (journald · log files)
└──▶ DBs (read-only PostgreSQL)
`
</div>
---
An agent can check service health, retrieve bounded logs, inspect DB state, and explore table schemas — without terminal access. Every remote operation is allowlist-gated and written to an append-only audit log.
Install
``bash
uv tool install infra-mcpSign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.





