Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
제작자가 쓴 설명(영어 원문)
Manage Nginx Proxy Manager hosts, certificates, streams and access lists with dry-run previews.
이 세 가지는 절대 하나의 점수로 합치지 않아요. 의견, 측정, 인기는 서로 다른 것이니까요.
이 서버는 아직 쉬운 말로 된 요약을 쓰지 못했어요. 아래는 레지스트리에서 읽어 온 사실이에요.
쓰고 있는 AI 앱을 고른 다음 설정을 복사하세요.
NPM_URL, NPM_EMAIL, NPM_PASSWORD, MCP_TRANSPORT비밀로 표시된 값은 내 계정의 열쇠예요. 절대 다른 사람과 공유하거나 채팅에 붙여 넣지 마세요.
필요한 것
어떤 앱을 쓰세요?
위에서 앱을 고르세요. 기억해 두었다가 다음부터는 버튼에 “…에 설치”라고 표시해요.
Claude Desktop → Settings → Developer → Edit Config를 열고 claude_desktop_config.json에 이 내용을 붙여 넣으세요
{
"mcpServers": {
"nginx-proxy-manager": {
"command": "uvx",
"args": [
"nginx-proxy-manager-mcp-server"
],
"env": {
"NPM_URL": "your-value",
"NPM_EMAIL": "your-value",
"NPM_PASSWORD": "your-value",
"MCP_TRANSPORT": "your-value"
}
}
}
}터미널에서 이 명령어를 실행하세요
claude mcp add nginx-proxy-manager --env NPM_URL=your-value --env NPM_EMAIL=your-value --env NPM_PASSWORD=your-value --env MCP_TRANSPORT=your-value -- uvx nginx-proxy-manager-mcp-server실행하기 전에 빈 값을 채워 주세요.
프로젝트의 .cursor/mcp.json 또는 ~/.cursor/mcp.json에 붙여 넣으세요
{
"mcpServers": {
"nginx-proxy-manager": {
"command": "uvx",
"args": [
"nginx-proxy-manager-mcp-server"
],
"env": {
"NPM_URL": "your-value",
"NPM_EMAIL": "your-value",
"NPM_PASSWORD": "your-value",
"MCP_TRANSPORT": "your-value"
}
}
}
}브라우저가 앱을 열지 물어본 다음, 앱이 설정을 보여 주고 확인을 요청해요. 키 값은 비워 두니 직접 입력하세요.
프로젝트의 .vscode/mcp.json에 붙여 넣으세요
{
"servers": {
"nginx-proxy-manager": {
"type": "stdio",
"command": "uvx",
"args": [
"nginx-proxy-manager-mcp-server"
],
"env": {
"NPM_URL": "your-value",
"NPM_EMAIL": "your-value",
"NPM_PASSWORD": "your-value",
"MCP_TRANSPORT": "your-value"
}
}
}
}브라우저가 앱을 열지 물어본 다음, 앱이 설정을 보여 주고 확인을 요청해요. 키 값은 비워 두니 직접 입력하세요.
이 서버는 내 컴퓨터에서 실행되는데, ChatGPT는 인터넷에 있는 서버에만 연결할 수 있어요. 다른 앱을 고르세요.
선택한 앱은 이 기기의 쿠키에만 저장돼요. 계정은 필요 없어요.
MCP_TRANSPORT env이 설정은 제작자의 레지스트리 정보로 만들었어요. README와 다르면 README를 따르세요.
내 컴퓨터에서 실행돼요. 설치하면 AI 앱에 도구 목록이 나타나요.
누구나 볼 수 있는 정보를 점검했고, 코드는 읽지 않았어요. 해당하지 않는 항목은 개수에서 뺐어요. · 2026년 11월 7일 점검
레지스트리 이름이 GitHub 계정 euisuh 기준으로 확인되었고, 이 계정이 저장소를 소유하고 있어요
아직 GitHub에서 이 저장소를 읽어 오지 않았어요
아직 GitHub에서 이 저장소를 읽어 오지 않았어요
내 컴퓨터에서 실행되는 서버라 인터넷 엔드포인트가 없어요
내 컴퓨터에서 실행되며, 대신 로컬 설정을 사용해요
내 컴퓨터에서 실행돼요. 도구 목록은 인터넷 엔드포인트가 있는 서버에서만 읽을 수 있어요
레지스트리에서 이 카테고리의 활성 서버 전체와 비교했어요. 스타는 게시자가 저장소를 소유한 경우에만 세요.
해당하는 기본 점검 1개 중 1개를 통과했어요. 코드는 읽지 않았어요. 키나 토큰을 넣기 전에 서버가 어떤 권한을 요구하는지 확인하고, 꼭 필요한 권한만 있는 키를 쓰세요.
입력해야 할 값: NPM_URL, NPM_EMAIL, NPM_PASSWORD
내 컴퓨터에서 실행돼요. AI 앱이 필요할 때 실행하고, 데이터는 제작자의 서버를 거치지 않아요(서버 자체가 온라인 서비스를 호출하는 경우는 제외).
GitHub 저장소는 마지막으로 – 변경됐고, 최신 버전(0.5.2)은 22일 전 레지스트리에 올라왔어요.
Claude Desktop, Claude Code, Cursor, VS Code처럼 MCP를 지원하는 앱에서 쓸 수 있어요. 내 컴퓨터에 Python (uv)도 있어야 해요.
같은 카테고리에는: Spec Driven Development, Remote Desktop Commander, MCP Server Autocad Lisp Helper
같은 카테고리에서 다른 제작자가 만든 서버예요. 스타 순으로 정렬했어요.
카드 보는 법:★ GitHub 스타i세 기둥: 리뷰 · 점검 · 사용 정도i업데이트 = 최신 버전을 레지스트리에 공개한 날i
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
High-precision static analysis and debug server for AutoCAD AutoLISP (.lsp) files.
제작자의 저장소에서 쓰인 그대로 가져왔어요. PopNx MCP가 검토하거나 보증한 내용이 아니에요. HTML, 이미지, 스크립트는 제거했어요. 링크를 누르면 이 사이트를 벗어나요.
An MCP server for Nginx Proxy Manager. It lets Claude and other MCP clients manage proxy hosts, redirection hosts, TCP/UDP streams, Let's Encrypt certificates, and access lists through typed tools instead of clicking through the NPM admin UI.
"Point blog.example.com at the container on port 3000 with HTTPS"
│ ▼ Claude / MCP client ──► Nginx Proxy Manager MCP ──HTTP + JWT──► NPM API
The demo calls create_proxy_host_with_letsencrypt(dry_run=True) against a mocked NPM API and prints both request previews. No real NPM instance or credentials are used. To record it again, install the development dependencies and VHS, then run vhs docs/demo.tape from the repository root; docs/demo.py uses the same respx mocking approach as the tests.
Reverse-proxy changes are repetitive homelab work: create a host, point it at a container, attach a certificate, maybe restrict it to an access list. That is exactly the kind of operational task an AI assistant can handle well when it has narrow, typed tools and a local admin boundary.
This server runs either:
dry_run on all mutating tools to preview NPM requests before applying them.create_proxy_host_with_letsencrypt requests a certificate, then creates an HTTPS-forced proxy host.GET /api/.NPM_READ_ONLY=true registers only the 12 list_/get_/find_ tools.401.| Tool | Category | Read-only | Description |
|---|---|---|---|
list_proxy_hosts | Proxy hosts | yes | List proxy hosts configured in NPM, including their current status. |
get_proxy_host | Proxy hosts | yes | Fetch one proxy host by ID, including its configured fields and current status. |
create_proxy_host | Proxy hosts | Create a proxy host that routes the supplied domains to an HTTP or HTTPS upstream. | |
create_proxy_host_with_letsencrypt | Proxy hosts | Request a Let's Encrypt certificate, then create a proxy host using that certificate with HTTPS forced. | |
update_proxy_host | Proxy hosts | Update writable settings on an existing proxy host by ID. | |
delete_proxy_host | Proxy hosts | Permanently delete a proxy host by ID, removing its configured domain routing from NPM. | |
enable_proxy_host | Proxy hosts | Enable a disabled proxy host by ID so NPM serves its configured domain routing again. | |
disable_proxy_host | Proxy hosts | Disable a proxy host by ID while retaining its configuration. | |
list_certificates | Certificates | yes | List SSL certificates known to NPM, including expiry information when provided by NPM. |
get_certificate | Certificates | yes | Fetch one certificate by ID, including provider, domain names, expiry and meta. |
create_letsencrypt_cert | Certificates | Request a new Let's Encrypt certificate for the supplied domains, over HTTP-01 by default or DNS-01 with dns_challenge=True (required for wildcards). | |
delete_certificate | Certificates | Permanently delete a certificate by ID, for example one left behind when create_proxy_host_with_letsencrypt fails at the proxy step. | |
renew_certificate | Certificates | Request renewal of an existing certificate by ID. | |
list_access_lists | Access lists | yes | List access lists configured in NPM. |
get_access_list | Access lists | yes | Fetch one access list by ID, including its client rules and basic-auth user metadata. |
create_access_list | Access lists | Create an access list containing optional IP allow/deny rules and basic-auth users. | |
update_access_list | Access lists | Update writable fields on an existing access list by ID, including client rules and basic-auth users. | |
delete_access_list | Access lists | Permanently delete an access list by ID from NPM. | |
list_redirection_hosts | Redirection hosts | yes | List configured redirection hosts and their current status. |
get_redirection_host | Redirection hosts | yes | Fetch one redirection host by ID with its configured destination and status. |
create_redirection_host | Redirection hosts | Create a host that redirects requests for domains to a destination using the selected HTTP status. | |
update_redirection_host | Redirection hosts | Update writable settings on an existing redirection host by ID. | |
delete_redirection_host | Redirection hosts | Permanently delete a redirection host by ID, removing its redirect configuration from NPM. | |
enable_redirection_host | Redirection hosts | Enable a disabled redirection host by ID so NPM serves its redirect again. | |
disable_redirection_host | Redirection hosts | Disable a redirection host by ID while keeping its configuration in NPM. | |
list_streams | Streams | yes | List configured TCP/UDP streams and their current status. |
get_stream | Streams | yes | Fetch one TCP/UDP stream by ID, including its forwarding ports and protocol settings. |
create_stream | Streams | Create a TCP/UDP port forward from an incoming port to a destination host and port. | |
update_stream | Streams | Update writable port, destination, or protocol fields on an existing stream by ID. | |
delete_stream | Streams | Permanently delete a TCP/UDP stream by ID; NPM stops forwarding that port immediately and this cannot be undone. | |
enable_stream | Streams | Enable a disabled TCP/UDP stream by ID so NPM forwards its incoming port again. | |
disable_stream | Streams | Disable a TCP/UDP stream by ID while retaining its forwarding configuration. | |
find_host_by_domain | Diagnostics | yes | Find proxy hosts, redirection hosts, and certificates serving a domain using exact or wildcard matching. |
list_expiring_certificates | Diagnostics | yes | List certificates expiring within the requested UTC time window, including certificates already expired, sorted by expiry. |
The table is generated by docs/tools_table.py from the registered tools; tests/test_readme.py fails if it drifts. Read-only tools are the ones NPM_READ_ONLY keeps.
List tools support optional server-side filtering after fetching from NPM: domain matches a case-insensitive substring in any domain name for proxy hosts, redirection hosts, and certificates; enabled filters proxy hosts, redirection hosts, and streams by status. All four accept compact=True to return only summary fields. Filters combine, and calls without arguments return the full, unchanged NPM list. For example, list_proxy_hosts(domain="example", enabled=True, compact=True) lists enabled hosts matching "example" with compact output.
All mutating tools expose dry_run=True. Previews contain method and path, plus json when the request has a body; the HTTPS workflow returns two previews in steps. The flag suppresses mutating requests, though some previews read current state. Update tools send only the fields in NPM's PUT schema (fixes #19); this is covered by mocked tests and not yet checked against a live NPM instance.
Competitor facts below come only from their linked READMEs fetched with gh api repos/ /nginx-proxy-manager-mcp/readme on 2026-10-13. “not documented” means the README does not establish the capability, not that it is absent. Auth guard means inbound MCP client authentication, distinct from NPM API login.
| Repository | Tool count documented | Dry-run support | Transport | Auth guard |
|---|---|---|---|---|
| euisuh (this server) | 34 | dry_run on all mutating tools | stdio, SSE | Optional SSE bearer token (MCP_BEARER_TOKEN); /healthz exempt |
| b3nw | 14 named tools (13 catalog rows plus list_instances) | not documented | stdio, HTTP | HTTP bearer token (NPM_MCP_AUTH_TOKEN) |
| omichelbraga | 66 | DELETE without confirm: true previews affected resources; general dry_run not documented | stdio, Streamable HTTP | Optional bearer token (NPM_MCP_BEARER_TOKEN); unset means no inbound auth |
| drmogie | 4 named tools (npm_status, npm_hosts, npm_audit_log, npm_call) | Changes show what will be sent and require confirm; dry_run not documented | not documented | not documented |
This server's implementations expose dry_run on every mutating tool, provide the one-shot create_proxy_host_with_letsencrypt workflow, and publish the Docker sidecar at 127.0.0.1:8000:8000. These are verified in tools/, server.py, and docker-compose.yml. They do not establish that other servers lack equivalent capabilities.
The bundled docker-compose.yml starts both Nginx Proxy Manager and this MCP sidecar from source. If you already run NPM, copy only the nginx-proxy-manager-mcp service into your existing compose file.
git clone https://github.com/euisuh/nginx-proxy-manager-mcp.git
cd nginx-proxy-manager-mcp cp .env.example .env
docker compose up -d
NPM_URL defaults to http://app:81, the NPM admin API on the internal Docker network. Leave it as-is when both services share a compose stack; point it at your NPM host otherwise.
To use the published GHCR image instead of building locally:
services:
nginx-proxy-manager-mcp: image: ghcr.io/euisuh/nginx-proxy-manager-mcp:latest restart: unless-stopped environment: NPM_URL: http://app:81 NPM_EMAIL: ${NPM_EMAIL} N
앞부분만 보여 드려요. 나머지는 저장소에서 읽어 보세요