MCP Sftp Orchestrator

Name: MCP Sftp Orchestrator
Author: fkom13

by fkom13version 8.0.4i★ –iRuns on your computer

Registry nameio.github.fkom13/mcp-sftp-orchestrator

Install

Overview

Description from the maker (original English)

Serveur MCP pour l'orchestration de tâches distantes (SSH/SFTP) avec une file d'attente persistante.

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

User voiceiNo reviews yetReviews open together with accounts in a later step
Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
UsageiVery new↓ 65/wk · ★ –

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Runs on your computer
Transport: stdio
Category: Developer tools

Install

Pick the AI app you use, then copy the settings.

Before you install

Basic checks: 1 of 1 passed
Runs on your computer with your user’s permissions (files, network, apps).
The registry lists no key to fill in.

You need

npmNode.js installed (for the npx command)

Which app do you use?

ClaudeClaude CodeCursorVS CodeChatGPT

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "sftp-orchestrator": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-orchestrator-server"
      ]
    }
  }
}

Run this in your terminal

claude mcp add sftp-orchestrator -- npx -y mcp-orchestrator-server

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "sftp-orchestrator": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-orchestrator-server"
      ]
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "sftp-orchestrator": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "mcp-orchestrator-server"
      ]
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 9, 2026

✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account fkom13, which owns the repo
… Not checked yet
Still maintained
We have not read this repo from GitHub yet
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
– Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
– Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
… Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Developer toolsi

More stars than 0% of the other 5571 servers in this category
Published to the registry more recently than 1% of the other 5571 servers in this category
Basic checks equal to or better than 100% of the other 5571 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is MCP Sftp Orchestrator safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

The registry does not list a required key, though some servers ask you to sign in on first use.

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed –, and the latest version (8.0.4) reached the registry 12 months ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.

What can I use instead?

In the same category: GitHub, Desktop Commander, Cloudflare MCP

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

GitHub

GitHub’s official server lets AI read and manage code, issues and pull requests in your account. Use GitHub’s hosted version or run it locally with Docker.

by githubWidely used★ 34.2KUpdated 6 days ago

Computer or cloud

Install

Desktop Commander

MCP server for terminal commands, file operations, and process management

by wonderwhy-erWidely used↓ 709.6K/wk★ 10.2KUpdated 18 days ago

Runs on your computer

Install

Cloudflare MCP

Cloudflare MCP servers

by cloudflareWidely used★ 4.4KUpdated 14 months ago

Runs in the cloud✓ mcp.cloudflare.com

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

🚀 MCP Orchestrator — Serveur d'orchestration SSH/SFTP

v11.8.0 Security Refresh — Les 82 tools publient désormais les annotations MCP standard. infra_overview reste léger sans argument, mais infra_overview { alias: "..." } effectue une découverte live et corrèle Nginx/domaines, ports, Docker/Compose et services. Voir CHANGELOG.md.

Version : 11.8.0 Tools : 82 License : MIT Node : >= 18.0.0 Changelog : CHANGELOG.md

Serveur MCP (Model Context Protocol, transport stdio) qui donne à un agent IA la capacité d’orchestrer un parc de serveurs : SSH, SFTP, édition de fichiers locale/remote (hash-safe), diffs cross-server, shell PTY, snapshots d’infra, notes de protocole, projets, sessions de travail, inventaire, trust SSH (pubkey), groupes d’alias et audit parc.

✨ Points forts (v11.6)

Domaine	Capacité
Exécution	`task_exec` multi-serveur / `group:oci` / dry-run destructif / force
Fichiers	`file_read` / `file_edit` (chirurgical) / `file_write` + hash + dryRun + backup
Parc	notes, `infra_audit`, `fleet_status`, `server_inventory`
Projets	registre local↔remote + `project_diff`
Travail	`work_start` → edits → `work_end` (note d’intervention auto)
Trust	`ssh_authorize_key` (pubkey only, dry_run par défaut)
Sécu	secrets masqués, RO global + RO par alias, blocklist, pool SSH robuste

📦 Installation

git clone https://github.com/fkom13/mcp-sftp-orchestrator.git

cd sftp-mcp # ou tools/sftp-mcp npm install cp .env.example .env

Éditer MCP_DATA_DIR et chemins de clés

Prérequis : Node.js >= 18

⚙️ Configuration (`.env`)

Toutes les variables sont optionnelles.

Variable	Défaut	Description
`MCP_DATA_DIR`	`~/.config/mcp-orchestrator`	Dossier data (JSON, snapshots, projets…)
`MCP_SYNC_TIMEOUT_S`	`120`	Délai (s) avant passage d’une tâche en arrière-plan
`MCP_DEFAULT_CMD_TIMEOUT_S`	`600`	Timeout SSH commande (s). `0` = infini
`MCP_INTERACTIVE_CMD_TIMEOUT_S`	`300`	Timeout interactif (s). `0` = infini
`MCP_MAX_WAIT_TIMEOUT_S`	`600`	Timeout max `task_wait` (s)
`MAX_CONNECTIONS_PER_SERVER`	`5`	Pool SSH max / serveur
`MIN_CONNECTIONS_PER_SERVER`	`1`	Pool SSH min / serveur
`IDLE_TIMEOUT`	`300000`	Fermeture connexion inactive (ms)
`KEEP_ALIVE_INTERVAL`	`30000`	Keepalive SSH (ms)
`MAX_QUEUE_SIZE`	`1000`	Taille max queue jobs
`SAVE_INTERVAL`	`5000`	Autosave queue (ms)
`MCP_ALLOWED_ROOTS`	_(vide)_	Racines autorisées pour paths locaux (CSV)
`MCP_READONLY`	`false`	`1` = refuse écritures / exec mutantes (global)
`MCP_COMPACT`	`false`	`1` = réponses tronquées (tokens agent)
`MCP_DEBUG`	`false`	Logs détaillés stderr

Fichiers sous `MCP_DATA_DIR`

Fichier	Contenu
`servers.json`	Alias SSH (`host`, `user`, `keyPath`/`password`, `port?`, `readonly?`)
`apis.json`	Catalogue APIs (secrets masqués en lecture tools)
`queue.json` / `queue.backup.json`	Jobs
`history.json`	Historique tâches
`server_notes.json`	Protocoles / notes par serveur
`server_groups.json`	Groupes d’alias
`projects.json`	Registre projets
`work_sessions.json`	Sessions de travail
`policies.json`	Blocklist commandes
`tunnels.json` / `tunnel_allowlist.json`	Tunnels SSH
`infra_snapshots/`	Snapshots content-addressable

🔌 Connexion client MCP

Grok / config.toml

[mcp_servers.orchestrator]

command = "node" args = ["/chemin/absolu/sftp-mcp/server.js"]

optionnel:

env = { MCP_DATA_DIR = "/chemin/absolu/sftp-mcp/data" }

OpenCode / Claude Desktop (JSON)

"mcpServers": { "orchestrator": { "command": "node", "args": ["/chemin/absolu/sftp-mcp/server.js"], "env": { "MCP_DATA_DIR": "/chemin/absolu/sftp-mcp/data" } } } }

Après modification du code : recharger le serveur MCP (/mcps → r ou restart session). Vérifier system_diagnostics → version: "11.8.0".

🧰 Référence des outils (82)

Diagnostic & audit

Outil	Description
`help`	Guide outils + .env + astuces
`guide`	Manuel IA (workflows, cheatsheet, pitfalls, audit, security)
`system_diagnostics`	Queue, pool, serveurs/APIs masqués, version, readOnly
`infra_audit`	Synthèse parc + projets + notes + crashed
`infra_overview`	Serveurs + notes (vue légère)
`fleet_status`	Ping SSH parallèle (latence, load, disk)
`server_inventory`	Inventaire léger (pm2/docker/disk/home, cache 10 min)

Serveurs & groupes

Outil	Description
`server_add`	CRUD alias (`keyPath` ou `password`, `port`, `readonly`)
`server_list`	Liste (passwords masqués)
`server_remove`	Supprime un alias
`server_group_list/set/remove`	Groupes (`oci`, `contabo`…). Usage : `group:oci` ou nom de groupe

Projets (v11.6)

Outil	Description
`project_list` / `project_get` / `project_set` / `project_remove`	Registre
`project_resolve`	→ `{ local, remote, ignore, runtime }`
`project_diff`	Diff local↔remote du projet

Exemple project_set :

"name": "p-image", "local": { "path": "/home/.../dev-serveur/p-image" }, "servers": { "prod": { "alias": "fkomprodmini2_prod", "path": "/home/ubuntu/p-image", "runtime": { "pm2": "p-image", "port": 5002 }, "url": "https://pruna.esprit-artificiel.com" } }, "ignore": ["node_modules", ".git", "data"] }

Sessions de travail (v11.6)

Outil	Description
`work_start`	Ouvre un journal (`alias`, `project`, `tag`, snapshot optionnel)
`work_log`	Event (`file_edit`, `task_exec`, …)
`work_list`	Sessions actives (+ historique)
`work_end`	Clôture + `server_note` `last_intervention`

Trust SSH (v11.6)

Outil	Description
`ssh_authorize_key`	Ajoute une pubkey dans `authorized_keys` distant. `dry_run` défaut. Sources : `string` \	`local_path` \	`alias`

"target_alias": "fkomprodmini1_prod", "source": { "type": "alias", "alias": "vps_contabo" }, "comment": "fleet-from-contabo", "dry_run": true }

Policies

Outil	Description
`policy_blocklist_list/add/remove`	Blocklist commandes (aussi appliquée à shell + sequences)

Catalogue API

Outil	Description
`api_add` / `api_list` / `api_remove` / `api_check`	Monitoring (clés masquées en list)

Exécution de tâches

Outil	Description
`task_exec`	SSH ; alias \	tableau \	`all` \	`group:x` ; dry_run/force destructif
`task_exec_interactive`	Prompts yes/no, menus
`task_exec_sequence`	Séquence sur un serveur (policy par étape)
`task_transfer`	SFTP upload/download/`server_to_server`
`task_transfer_multi`	Multi + globs

Files / Diff / Shell / Snapshots

Famille	Outils
Files	`file_read`, `file_write`, `file_edit`
Diff	`diff_files`, `diff_folders`, `compare_all_sources`
Shell	`shell_create`, `shell_exec` (+ `skip_policy`), `shell_list`, `shell_close`
Snapshots	`snapshot_create/list/diff/restore/delete`

Édition safe : file_read → hash → file_edit + expectedHash (+ dryRun / backup).

Notes serveur

Outil	Description
`server_note_set/get/list/remove`	Protocole (description, services, warnings, intervention)

Monitoring & logs

Outil	Description
`get_system_resources`	CPU / RAM / disque
`get_services_status`	systemd / Docker / PM2
`get_fail2ban_status`	Fail2Ban
`check_api_health`	HTTP via SSH+curl
`get_pm2_logs` / `get_docker_logs` / `tail_file`	Logs

Queue

Outil	Description
`task_queue` / `task_status` / `task_history` / `task_wait` / `task_logs`	Suivi
`task_retry` / `task_retry_all`	Relance
`task_purge`	Purge (dry_run défaut)
`queue_stats` / `pool_stats`	Stats

Tmux & tunnels

Outil	Description
`tmux_create/exec/read/list/kill`	Sessions tmux distantes
`tunnel_create/list/close`	Tunnels SSH local/remote/socks
`tunnel_allowlist_add/remove`	Ports autorisés pour tunnels

📖 Workflows agent recommandés

Début de session

infra_audit  (ou infra_overview)

fleet_status project_list / project_resolve

Chantier sur un projet

work_start { project: "p-image", alias: "fkomprodmini2_prod", tag: "fix-x", message: "…" }

file_read → file_edit (expectedHash, dryRun puis apply) work_log { type: "file_edit", path: "…" } work_end { summary: "…" } → note serveur mise à jour project_diff { name: "p-image" }

Commandes longues

task_exec { timeout: 0, … }  → si > syncTimeout → task_wait { id }

Cibles multi-serveurs

task_exec { alias: "group:oci", cmd: "hostname" }

task_exec { alias: "all", cmd: "uptime" }

🏗️ Architecture

Client MCP (stdio)

│ server.js ─── 82 tools │ ├── queue.js File d’attente persistante + purge/retry ├── ssh.js / sshPool Exécution + pool (retry safe, port configurable) ├── sftp.js Transferts (server_to_server via sourceAdapter/pool) ├── sourceAdapter.js Local fs | remote SFTP pool ├── fileOps.js Read/write/edit + hash + dryRun + backup ├── diffEngine.js / compareEngine.js / diffFormatter.js ├── shellSessions.js PTY persistants + policy ├── snapshotManager.js ├── projects.js / workSession.js / inventory.js / groups.js / fleet.js ├── sshTrust.js authorized_keys (pubkey only) ├── servers.js / apis.js / notes.js / policies.js / tunnels.js ├── history.js / guide.js / config.js / utils.js

Cycle de vie d’un job

pending → running → completed | failed | partial

↓ (redémarrage MCP pendant running) crashed → task_retry → pending

🔒 Sécurité

Mécanisme	Détail
Secrets	Masqués en `api_list` / diagnostics (`***` + 4 derniers car.)
Shell escape	`escapeShellArg` sur curl, logs, chemins
Blocklist	`policies.json` ; shell + sequence inclus ; `skip_policy` pour forcer
RO global	`MCP_READONLY=1`
RO alias	`"readonly": true` dans `servers.json`
Destructif	`task_exec` dry-run si pattern dangereux sans `force:true`
Trust	Pubkey only ; dry_run par défaut
Clés	Préférer `keyPath` SSH ; Vaultwarden pour secrets API

🧪 Tests

npm test:unit    # p0 + p1 + p16 (43 tests)

npm test # unit + smoke MCP + features node diagnose.js # diagnostic local optionnel

Fichier	Couverture
`test_p0_unit.js`	utils, policies, redact, timeouts, version
`test_p1_unit.js`	groups, purge, destructive, RO env
`test_p16_unit.js`	projects, work session, compact, sshTrust
`test_mcp.js`	smoke SDK
`test_features.js`	queue / pool / globs / prompts

🛣️ Versions récentes

Version	Contenu	Snapshot gencodedoc
11.6.1	Hardening multi-agent: RO transversal, server-to-server dossiers/force, allowed roots anti-symlink, quoting shell/tmux, queue + JSON stores atomiques	—
11.6.0	Projets, work sessions, inventory, ssh_authorize_key, RO alias, compact	#23 (final docs)
11.4.0	fleet, infra_audit, groups, retry_all, purge, pool rewrite	#21
11.3.0	Secrets mask, policy shell/seq, port SSH, wait partial	#20

| 10.4–10.0 | file ops, diff, shell, snapshots, notes,

Only the beginning is shown; read the rest in the repo

MCP Sftp Orchestrator

Overview

PopNx MCP’s three pillars

What you can do with it

Install

Before you install

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Compared with others in Developer toolsi

Common questions

Alternatives

GitHub

Desktop Commander

Cloudflare MCP

README from the maker

🚀 MCP Orchestrator — Serveur d'orchestration SSH/SFTP

✨ Points forts (v11.6)

📦 Installation

Éditer MCP_DATA_DIR et chemins de clés

⚙️ Configuration (.env)

Fichiers sous MCP_DATA_DIR

🔌 Connexion client MCP

Grok / config.toml

optionnel:

env = { MCP_DATA_DIR = "/chemin/absolu/sftp-mcp/data" }

OpenCode / Claude Desktop (JSON)

🧰 Référence des outils (82)

Diagnostic & audit

Serveurs & groupes

Projets (v11.6)

Sessions de travail (v11.6)

Trust SSH (v11.6)

Policies

Catalogue API

Exécution de tâches

Files / Diff / Shell / Snapshots

Notes serveur

Monitoring & logs

Queue

Tmux & tunnels

📖 Workflows agent recommandés

Début de session

Chantier sur un projet

Commandes longues

Cibles multi-serveurs

🏗️ Architecture

Cycle de vie d’un job

🔒 Sécurité

🧪 Tests

🛣️ Versions récentes

⚙️ Configuration (`.env`)

Fichiers sous `MCP_DATA_DIR`