Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
제작자가 쓴 설명(영어 원문)
Stateful Windows OpenSSH server operations for Codex with local credential handling.
이 세 가지는 절대 하나의 점수로 합치지 않아요. 의견, 측정, 인기는 서로 다른 것이니까요.
이 서버는 아직 쉬운 말로 된 요약을 쓰지 못했어요. 아래는 레지스트리에서 읽어 온 사실이에요.
쓰고 있는 AI 앱을 고른 다음 설정을 복사하세요.
필요한 것
어떤 앱을 쓰세요?
위에서 앱을 고르세요. 기억해 두었다가 다음부터는 버튼에 “…에 설치”라고 표시해요.
Claude Desktop → Settings → Developer → Edit Config를 열고 claude_desktop_config.json에 이 내용을 붙여 넣으세요
{
"mcpServers": {
"codex-serverops": {
"command": "uvx",
"args": [
"codex-serverops-mcp"
]
}
}
}터미널에서 이 명령어를 실행하세요
claude mcp add codex-serverops -- uvx codex-serverops-mcp프로젝트의 .cursor/mcp.json 또는 ~/.cursor/mcp.json에 붙여 넣으세요
{
"mcpServers": {
"codex-serverops": {
"command": "uvx",
"args": [
"codex-serverops-mcp"
]
}
}
}브라우저가 앱을 열지 물어본 다음, 앱이 설정을 보여 주고 확인을 요청해요. 키 값은 비워 두니 직접 입력하세요.
프로젝트의 .vscode/mcp.json에 붙여 넣으세요
{
"servers": {
"codex-serverops": {
"type": "stdio",
"command": "uvx",
"args": [
"codex-serverops-mcp"
]
}
}
}브라우저가 앱을 열지 물어본 다음, 앱이 설정을 보여 주고 확인을 요청해요. 키 값은 비워 두니 직접 입력하세요.
이 서버는 내 컴퓨터에서 실행되는데, ChatGPT는 인터넷에 있는 서버에만 연결할 수 있어요. 다른 앱을 고르세요.
선택한 앱은 이 기기의 쿠키에만 저장돼요. 계정은 필요 없어요.
이 설정은 제작자의 레지스트리 정보로 만들었어요. README와 다르면 README를 따르세요.
내 컴퓨터에서 실행돼요. 설치하면 AI 앱에 도구 목록이 나타나요.
누구나 볼 수 있는 정보를 점검했고, 코드는 읽지 않았어요. 해당하지 않는 항목은 개수에서 뺐어요. · 2026년 11월 6일 점검
레지스트리 이름이 GitHub 계정 cyyprezz 기준으로 확인되었고, 이 계정이 저장소를 소유하고 있어요
아직 GitHub에서 이 저장소를 읽어 오지 않았어요
아직 GitHub에서 이 저장소를 읽어 오지 않았어요
내 컴퓨터에서 실행되는 서버라 인터넷 엔드포인트가 없어요
내 컴퓨터에서 실행되며, 대신 로컬 설정을 사용해요
내 컴퓨터에서 실행돼요. 도구 목록은 인터넷 엔드포인트가 있는 서버에서만 읽을 수 있어요
레지스트리에서 이 카테고리의 활성 서버 전체와 비교했어요. 스타는 게시자가 저장소를 소유한 경우에만 세요.
해당하는 기본 점검 1개 중 1개를 통과했어요. 코드는 읽지 않았어요. 키나 토큰을 넣기 전에 서버가 어떤 권한을 요구하는지 확인하고, 꼭 필요한 권한만 있는 키를 쓰세요.
레지스트리에 필수 키가 나와 있지 않아요. 다만 처음 쓸 때 로그인을 요구하는 서버도 있어요.
내 컴퓨터에서 실행돼요. AI 앱이 필요할 때 실행하고, 데이터는 제작자의 서버를 거치지 않아요(서버 자체가 온라인 서비스를 호출하는 경우는 제외).
GitHub 저장소는 마지막으로 – 변경됐고, 최신 버전(0.1.0)은 4개월 전 레지스트리에 올라왔어요.
Claude Desktop, Claude Code, Cursor, VS Code처럼 MCP를 지원하는 앱에서 쓸 수 있어요. 내 컴퓨터에 Python (uv)도 있어야 해요.
같은 카테고리에는: Spec Driven Development, Remote Desktop Commander, Fomu MCP
같은 카테고리에서 다른 제작자가 만든 서버예요. 스타 순으로 정렬했어요.
카드 보는 법:★ GitHub 스타i세 기둥: 리뷰 · 점검 · 사용 정도i업데이트 = 최신 버전을 레지스트리에 공개한 날i
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Kenya government form guides: checklists, draft letters, eCitizen, Huduma, timelines. Sample data.
제작자의 저장소에서 쓰인 그대로 가져왔어요. PopNx MCP가 검토하거나 보증한 내용이 아니에요. HTML, 이미지, 스크립트는 제거했어요. 링크를 누르면 이 사이트를 벗어나요.
Operate the Linux servers you choose from Codex or Claude Code—through normal conversation, without installing a ServerOps agent on them.
ServerOps keeps useful Bash state between operations, returns structured evidence, and opens visible local windows when OpenSSH or sudo needs input. It is for freelancers, agencies, support teams, project owners, and operators who need reliable server work without living in an SSH terminal.
Thin Codex and Claude Code plugins connect to one shared ServerOps core. A guided local assistant creates explicit server profiles without putting credentials into chat.
Ask for an outcome in normal language. ServerOps keeps the working directory and shell environment in a held Bash session, supports interactive terminal work, and returns bounded, structured results instead of an uncontrolled wall of terminal text.
Sessions belong to a local broker-owned worker rather than the disposable MCP process. If the result of a remote mutation is uncertain, ServerOps reports outcome_unknown and never retries it automatically. Linux permissions, explicit profiles, visible authentication, controlled elevation, hash preconditions, and a redacted local audit form the trust layer.
These are realistic prompts for the eight tools available today:
List my ServerOps profiles. Do not connect to a server or change anything.
Use the customer-web profile. Start read-only, identify the host and current user, then explain
why the service is unhealthy. Narrow the diagnosis with evidence instead of dumping every log.
Open the project profile, enter /srv/my-app, inspect the current Git and Compose state, and keep
the session open so we can continue from the same directory.
Read /srv/my-app/.env.example with the structured file tool. Propose a minimal change and show me
the observed SHA-256, but do not apply anything until I approve it.
See the step-by-step reproducible demo for expected evidence and safe boundaries.
The current runtime is Windows-first and uses Windows OpenSSH to reach Linux. The detailed tool reference defines the exact operations and schemas.
Install the repository marketplace and plugin. The pinned 0.1.1 MCP creates its own local state on first start; no prior setup command is required:
codex plugin marketplace add cyyprezz/codex-serverops-mcp
codex plugin add codex-serverops-mcp@serverops-codex
Start a new Codex task. Do not add a separate user-wide [mcp_servers.serverops] block when using the plugin. If a previous installer created that alternative block, preview its removal with serverops-install codex-config --remove, then repeat with --apply only after review. This keeps profiles and audit data. Begin without contacting a server:
List my ServerOps profiles. Do not create, edit, remove, test, or connect to a profile. If no
suitable profile exists, wait for me to provide non-secret suggestions before opening the visible profile assistant. Credentials and host-key decisions belong only in the local ServerOps window.
The Claude Code wrapper uses the same pinned 0.1.1 runtime and client-neutral skills:
claude plugin marketplace add cyyprezz/codex-serverops-mcp
claude plugin install serverops@serverops-claude
If the GitHub shorthand requires an SSH key that is not configured, add the marketplace through HTTPS instead:
claude plugin marketplace add https://github.com/cyyprezz/codex-serverops-mcp.git
Start a new Claude Code session (or reload plugins) and use the same safe first prompt.
Version 0.1.1 starts without a separate setup command. MCP, broker, setup, check, Doctor, and update share one idempotent bootstrap that prepares only ServerOps-owned local state: the app, configuration, runtime, audit, migration, and status paths for the current user.
The bootstrap does not edit Codex or Claude configuration, install a Scheduled Task, create a profile, contact a server, request administrator rights, or overwrite an unmanaged file. The visible profile assistant remains the first possible server contact.
The explicit serverops-install setup command remains compatible and idempotent for maintenance and for previewing the optional broker task; it is no longer a plugin prerequisite.
The version-pinned installer can check the shared runtime or a client path:
uvx --from "codex-serverops-mcp==0.1.1" serverops-install check --client core
uvx --from "codex-serverops-mcp==0.1.1" serverops-install doctor --client claude
doctor --client codex also checks the alternative installer-managed user configuration. A plugin-only Codex installation can therefore warn that this optional block is absent; that warning does not prove the plugin is broken.
Install the managed current-user broker task only when live sessions must be reliably rediscovered after an MCP client process restarts. Preview first, then apply explicitly:
uvx --from "codex-serverops-mcp==0.1.1" serverops-install setup --broker-task
uvx --from "codex-serverops-mcp==0.1.1" serverops-install setup --broker-task --apply
The task requests no administrator elevation and stores no password. It does not make sessions survive a Windows reboot or broker crash; the current broker does not adopt orphaned workers.
Select the named customer profile, start read-only, confirm target and identity, inspect only the relevant service evidence, and report facts, hypotheses, gaps, and any changes separately.
Enter a project directory once, retain its shell environment across calls, run bounded commands, and use structured file reads or preconditioned text edits for configured paths.
Use the terminal only when a command genuinely needs interaction, incremental output, interrupt, resize, or retained terminal state. Completed commands can run for up to the configured maximum of 3600 seconds and return exit code, duration, CWD, and truncation state.
List, inspect, search, read, hash, write, patch, rename, create, or remove UTF-8 text paths inside a profile's configured roots. These roots constrain the structured file tools; they do not sandbox shell commands or replace backups.
Passwords, key passphrases, host-key decisions, and interactive sudo input stay in separate visible local windows. ServerOps can use existing OpenSSH behavior or guide a controlled key transition. Sudo remains governed by the server's PAM and sudoers policy.
| Need | ssh host "command" | ServerOps |
|---|---|---|
| One isolated command | Smallest direct option | Works, but often unnecessary |
| Keep CWD and shell environment | Reconstruct it each time | Held in one live Bash session |
| Interactive terminal control | Requires a terminal workflow | Cursor reads, input, interrupt, resize, status |
| Structured text files | Parse and quote shell output | Bounded results and optional hash preconditions |
| Authentication prompts | Terminal-owned | Separate visible local windows |
| Uncertain remote mutation | Operator must reason from transport loss | Explicit unknown-outcome result; no automatic retry |
| Continue after MCP restart | New SSH command | Rediscoverable with the optional broker task while processes remain alive |
ServerOps does not replace SSH. It uses OpenSSH and adds a stateful, structured boundary for AI-led operations where repeated one-off commands become fragile or difficult to review.
flowchart LR
C["Codex plugin"] --> M["Shared ServerOps MCP core"] A["Claude Code plugin"] --> M M --> B["Local per-user broker"] B --> W["One worker per live session"] W --> S["Windows OpenSSH"] S --> L["Configured Linux server Bash + common utilities"] W -. "visible local prompts" .-> U["Operator"] M --> F["Local profiles + redacted audit"]
The MCP process exposes eight tools. The broker owns session routing, each worker owns exactly one SSH/Bash process, and no ServerOps component is installed remotely. See Architecture and Broker lifecycle.
uv/uvx, and Windows OpenSSH Client for the current release.allowed_roots constrain only structured file tools. Shell commands retain the SSH user's real permissions.ServerOpsSetup.exe yet; the public release requires Python 3.12 and uvx.| Capability | Status | Boundary |
|---|---|---|
| Profiles, completed commands, interactive terminal | Available | Eight-tool MCP core |
| Stateful broker-owned sessions | Available | While broker, worker, and Bash remain alive |
| MCP-restart rediscovery | Available | Requires optional managed broker task for reliability |
| Structu
앞부분만 보여 드려요. 나머지는 저장소에서 읽어 보세요