Sentinelx MCP server
{
"mcpServers": {
"sentinelx": {
"type": "http",
"url": "https://mcp.sentinelx.app/mcp/mcp"
}
}
}{
"mcpServers": {
"sentinelx": {
"type": "http",
"url": "https://mcp.sentinelx.app/mcp/mcp"
}
}
}{
"mcpServers": {
"sentinelx": {
"type": "http",
"url": "https://mcp.sentinelx.app/mcp/mcp"
}
}
}{
"servers": {
"sentinelx": {
"type": "http",
"url": "https://mcp.sentinelx.app/mcp/mcp"
}
}
}{
"mcpServers": {
"sentinelx": {
"type": "http",
"url": "https://mcp.sentinelx.app/mcp/mcp"
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsonversion 0.6.0
What it does
SentinelX is an MCP server that allows Claude or ChatGPT to operate Linux, macOS, and Windows hosts through an allowlisted, auditable interface. Commands, filesystem access, and service management are restricted by a per-path allowlist configured on the host, with all actions recorded.
- Run allowlisted shell commands and scripts on remote servers from Claude.ai or ChatGPT without granting unrestricted access.
- Edit files on remote hosts using structured operations (replace, regex, append) with path-based access controls.
- Manage system services (start, stop, restart) and perform file operations (upload, copy, delete, chmod, chown) through the LLM with audit trails.
Tools this server exposes
| Tool | Does |
|---|---|
| sentinel_exec | Run an allowlisted shell command on the host. |
| sentinel_script_run | Run a one-off bash or python3 script on the host. |
| sentinel_edit | Perform structured file edits (replace, regex, replace-block, write, append, prepend). |
| sentinel_move | Move or rename a file or directory on the host. |
| sentinel_copy | Copy a file or directory on the host. |
| sentinel_delete | Delete a file or directory on the host. |
| sentinel_chmod | Change file permissions on the host. |
| sentinel_chown | Change file owner and group on the host. |
| sentinel_service | Manage system services using systemctl (start, stop, restart, reload, status). |
| sentinel_restart | Shortcut to restart a system service. |
| sentinel_upload_file | Single-shot file upload to the host. |
| sentinel_read | Read a file's contents with optional line-range slicing. |
| sentinel_list | Structured directory listing showing name, type, size, and modification time. |
| sentinel_search | Recursive content search with regex and glob filters. |
| sentinel_capabilities | Query the host's capabilities and allowlist configuration. |
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.