Termalin Web
Run commands and read/write files on your servers over Termalin's keyless tunnels (hosted MCP).
Connector by termal.inOfficial · Domain verified by the MCP Registry
Install
Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install connector/termal-in-termalin-web
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Remote endpoint
https://termal.in/api/v1/mcpRemote (HTTP)
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 12 read · 1 write · 8 delete
- Secrets
- 1 (API keys, tokens or passwords)
- Install scripts
- Nothing to install (hosted)
- Runs as
- Hosted (remote endpoint)
Tools by what they do 21
From the running server's own tool list (tools/list) on Oct 25, 2026.
Read 12 · Look things up without changing anything.
alerts_listbackup_listdata_schemadata_tablesgenerate_passwordhosts_listjob_listjob_statusserver_metricssftp_listsftp_readweb_link_list
Write 1 · Create, change, send or run things.
web_link_create
Delete 8 · Delete, drop, revoke or wipe things.
backup_createdata_queryjob_startjob_stopsftp_writessh_execssh_exec_manyweb_link_delete
Secrets and settings it asks for
Secrets: values you paste in that let it act as you.
Authorization
Network hosts it talks to 1
termal.in· found in remote endpoint, install command
Files it touches
- Any path the agent passes to its tools
Tools (21)
As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].
alerts_listList server alertsread-onlyWhat Termalin's monitoring says is wrong with the user's servers right now (disk filling up, memory or load pinned, a failed service, a restarting container, a certificate about to expire, a server offline), plus what cleared in the last seven days. Start here when asked how the servers are doing. Covers servers with metrics switched on.
backup_createBack up a server nowcan change or delete dataMake an encrypted backup of one of the user's servers now, through Termalin's backup job for that server, and wait for it (up to about a minute; a longer one keeps running and shows up in backup_list). Call it BEFORE a risky change — a migration, a config rewrite, a bulk delete — and say so in 'label'. The server needs a backup job set up in the Termalin cabinet (that is where the owner chooses the paths and the encryption key); without one this tool explains how to add it. Uses the owner's storage quota, and keeps the job's 'keep last' count: when that many archives exist, the oldest one is r…
backup_listList a server's backupsread-onlyThe backup jobs and recent archives of one of the user's servers: when each ran, whether it succeeded, how big it is and where it is stored. Use it to check that a backup exists before a risky change, or to see whether last night's backup worked.
data_queryQuery a databasecan change or delete dataRun a database query on one of your servers — passwordless. It executes the engine's own client on the host over Termalin's keyless tunnel, using the database's local trust (Postgres peer auth via `sudo -u postgres`, MySQL/MariaDB unix-socket via `sudo mysql`, redis-cli, mongosh, sqlite3) — so no database password is needed or stored anywhere. Read-only by default: only SELECT/SHOW-style statements run unless allowWrites is set (full-access keys only). SQL engines return CSV/TSV with a header. For MongoDB pass a shell expression, e.g. db.products.find({}).limit(20).toArray().
data_schemaDescribe a tableread-onlyDescribe one table of a database on one of your servers: its columns with type, whether they can be empty, default value and primary key. Call it before writing a query against a table you have not seen. Works for postgres, mysql, mariadb and sqlite.
data_tablesList tablesread-onlyList the tables / collections / keys of a database on one of your servers — passwordless, over the same local-client path as data_query.
generate_passwordGenerate a passwordread-onlyGenerate a strong random password — handy when creating a user or setting a password on a server. Returns the password only; nothing is stored.
hosts_listList serversread-onlyList the servers reachable through Termalin (your tunnel agents). Returns id, name, whether the server is online, the user commands run as, when it was last seen, its country, ip (the public address the server's Connector connects from; null until it has connected), and ownerNote — what the owner wrote about that server for you (what it is, what to leave alone); follow it. 'policy' says what you may do there: full, allowlist (only listed commands; allowedCommands holds the server's list, no file writes) or readonly (no commands, no file writes). Use the id (or the exact name) as 'host' in the …
job_listList background jobsread-onlyList the recent background jobs on a server (newest first): id, state, start time and the command.
job_startStart a background jobcan change or delete dataStart a long-running shell command on a server in the background and return a job id right away. Use it for anything that can take more than about a minute — package installs, builds, backups, migrations, large downloads. The job keeps running after this call returns and survives the connection closing; its output goes to a log you read with job_status. The command runs from the login user's home directory.
job_statusCheck a background jobread-onlyCheck a background job started with job_start: whether it is still running or finished (with its exit code), when it started, and the last lines of its output.
job_stopStop a background jobcan change or delete dataStop a background job started with job_start (asks it to terminate, then forces it after two seconds). Does nothing if the job already finished.
server_metricsRead server metricsread-onlyNumbers Termalin's monitoring collects from the user's servers every minute, without running anything now: CPU, memory, disk, load, network, the busiest processes, failed services, containers, certificates. Without `host`: one line per server with its latest numbers. With `host`: that server's latest sample in full and the average and peak over the last `hours` (default 6). Use it for 'how is the server doing' and 'what happened at night' before reaching for ssh_exec. Covers servers with metrics switched on.
sftp_listList a directoryread-onlyList a directory on one of your servers over SFTP. Returns each entry's name, whether it's a directory, size and modified time. Runs keyless over Termalin's tunnel, like ssh_exec.
sftp_readRead a fileread-onlyRead a text file from one of your servers over SFTP and return its contents. Files over 512 KB or non-text (binary) files are refused — use ssh_exec (e.g. sed/tail) for those.
Show 6 more tools
sftp_writeWrite a filecan change or delete dataCreate or overwrite a text file on one of your servers over SFTP. 'content' is written as UTF-8. Capped at 512 KB; for binary uploads use a terminal/scp instead.
ssh_execRun a command over SSHcan change or delete dataRun a single shell command on one of your servers and return its combined output and exit code. Runs keyless over Termalin's tunnel — no SSH key, and the server needs no open inbound port. Each call is a fresh shell (cd does not persist — chain with &&). Keep a call under about 90 seconds: for anything longer (installs, builds, backups) use job_start and check on it with job_status.
ssh_exec_manyRun a command on several serverscan change or delete dataRun the same shell command on several of your servers at once and return each server's output and exit code. Use it to compare or check a fleet (disk space, versions, a service's state) in one call instead of one call per server. Up to 10 servers; the same 90-second limit as ssh_exec applies.
web_link_createAdd an internal sitePut an internal web service of one of the user's servers into the owner's Termalin cabinet as an 'internal site': a dashboard, admin panel or app that listens only inside that server's network (e.g. localhost:3000 on the server, or 10.0.0.5:8080 next to it). Termalin gives it its own address that only the owner can open, signed in to Termalin, through the server's Connector — nothing is exposed to the internet and no port is opened. Only private addresses are accepted. Returns the link's id and address; the owner opens it from the Termalin cabinet or app (Internal sites). This tool does not op…
web_link_deleteRemove an internal sitecan change or delete dataRemove an internal site from the owner's Termalin cabinet by its id (from web_link_list). Its address stops working at once, for the owner and for anyone the owner shared it with. The service on the server is not touched.
web_link_listList internal sitesread-onlyThe internal sites in the owner's Termalin cabinet on the servers you can reach: id, name, server, target, address, who added it (the owner or an AI app), when, and how many people the owner shared it with. Sharing is managed by the owner in the cabinet.
Signals
- Last release
- Aug 5, 2026 (2 months ago)
Details
- Registry name
in.termal/termalin-web- Version
- 1.0.0
- Auth
- Bearer token
- License
- License unknown
- Website
- termal.in/mcp/
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- Official MCP Registry
Cite this page
Termalin Web MCP server. Agent Mart. https://agentmart.dev/connectors/termal-in-termalin-web (last updated 2026-10-24)