Kastell

Name: Kastell
Author: kastelldev

by kastelldevcommunityv1.14.0

Kastell is a CLI tool that audits, fixes, hardens, and monitors server security, allowing users to manage their infrastructure with a single command-line interface. It includes a built-in MCP server for AI agents to directly manage servers.

From the registry: Server security audit (413 checks), hardening, and fleet management across 4 cloud providers.

GitHub Repository

Install & configure

Prerequisites

required
Node.js 20+
Requires Node.js 20 or later

Install in your client

Paste into the AI you're chatting with — it will figure out the rest

Please install the `kastell` MCP server into my current AI client (that's you).

Required prerequisites (do these first if not already done):
- **Node.js 20+** — Requires Node.js 20 or later

Canonical MCP server config (stdio transport):
- command: `npx`
- args: ["-y","-p","kastell","kastell-mcp"]
- optional environment variables:
  - `HETZNER_TOKEN`: Hetzner Cloud API token (example: `<your-api-key>`)
  - `DIGITALOCEAN_TOKEN`: DigitalOcean API token (example: `<your-api-key>`)
  - `VULTR_TOKEN`: Vultr API token (example: `<your-api-key>`)
  - `LINODE_TOKEN`: Linode API token (example: `<your-api-key>`)

Note: At least one provider token is required in practice for cloud operations. SAFE_MODE=true by default blocks destructive ops.

Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.

Note: At least one provider token is required in practice for cloud operations. SAFE_MODE=true by default blocks destructive ops.