Kastell MCP Server

by kastelldevio.github.kastelldev/kastellv1.14.0

Server security auditing and hardening (SSH, firewall, Docker, TLS) with CIS/PCI-DSS/HIPAA mapping, fleet management and forensic evidence collection.

60Node.jsstdioofficial registry

context tax

queued

security

queued

cold start

queued

freshness

Maintained3mo ago

Install Kastell MCP server

claude mcp add kastell -e HETZNER_TOKEN='<hetzner-token>' -e DIGITALOCEAN_TOKEN='<digitalocean-token>' -e VULTR_TOKEN='<vultr-token>' -e LINODE_TOKEN='<linode-token>' -- npx -y kastell

{
  "mcpServers": {
    "kastell": {
      "command": "npx",
      "args": [
        "-y",
        "kastell"
      ],
      "env": {
        "HETZNER_TOKEN": "<hetzner-token>",
        "DIGITALOCEAN_TOKEN": "<digitalocean-token>",
        "VULTR_TOKEN": "<vultr-token>",
        "LINODE_TOKEN": "<linode-token>"
      }
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "kastell": {
      "command": "npx",
      "args": [
        "-y",
        "kastell"
      ],
      "env": {
        "HETZNER_TOKEN": "<hetzner-token>",
        "DIGITALOCEAN_TOKEN": "<digitalocean-token>",
        "VULTR_TOKEN": "<vultr-token>",
        "LINODE_TOKEN": "<linode-token>"
      }
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "kastell": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "kastell"
      ],
      "env": {
        "HETZNER_TOKEN": "<hetzner-token>",
        "DIGITALOCEAN_TOKEN": "<digitalocean-token>",
        "VULTR_TOKEN": "<vultr-token>",
        "LINODE_TOKEN": "<linode-token>"
      }
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "kastell": {
      "command": "npx",
      "args": [
        "-y",
        "kastell"
      ],
      "env": {
        "HETZNER_TOKEN": "<hetzner-token>",
        "DIGITALOCEAN_TOKEN": "<digitalocean-token>",
        "VULTR_TOKEN": "<vultr-token>",
        "LINODE_TOKEN": "<linode-token>"
      }
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Configuration

Variable	Required	Secret	Description
HETZNER_TOKEN	—	yes	Hetzner Cloud API token (optional — only for Hetzner servers)
DIGITALOCEAN_TOKEN	—	yes	DigitalOcean API token (optional — only for DigitalOcean servers)
VULTR_TOKEN	—	yes	Vultr API token (optional — only for Vultr servers)
LINODE_TOKEN	—	yes	Linode API token (optional — only for Linode servers)

Freshness

Maintained — last maintenance signal 3mo ago. The newest of the signals below sets the band.

Last commit (default branch)
2026-07-11 · 3mo ago · GitHub
Latest release
2026-06-30 · 3mo ago · GitHub · v2.3.1
Package published
no data · npm/PyPI
Registry entry updated
2026-03-24 · 7mo ago · official registry · v1.14.0

FAQ

›How do I install the Kastell MCP server in Claude Code?

Run: claude mcp add kastell -e HETZNER_TOKEN='<hetzner-token>' -e DIGITALOCEAN_TOKEN='<digitalocean-token>' -e VULTR_TOKEN='<vultr-token>' -e LINODE_TOKEN='<linode-token>' -- npx -y kastell. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does Kastell require an API key?

Yes. It expects HETZNER_TOKEN, DIGITALOCEAN_TOKEN, VULTR_TOKEN, LINODE_TOKEN, of which 4 are secrets.

›Can I use Kastell as a remote (hosted) MCP server?

No hosted endpoint is published; it runs locally over stdio.

›Is Kastell in the official MCP registry?

Yes, as io.github.kastelldev/kastell.