LetKite

Name: LetKite
Author: letkite

作者：letkite版本 1.9.1i★ –i在云端运行

注册名称com.letkite/letkite

安装

概览

作者提供的说明（英文原文）

Run commands and manage files on your own machines. Needs a LetKite account; OAuth sign-in.

PopNx MCP 的三大支柱

这三项永远不会合并成一个分数：意见、测量和人气是不同的东西。

用户评价i暂无评价评价功能将在后续阶段与账户功能一起开放
我们的基础检查i3 项中通过 3 项依据公开信息检查；尚未扫描代码
使用情况i尚未统计★ –

它能帮你做什么

我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。

连接方式: 在云端运行
传输方式: Streamable HTTP
分类: 其他

安装

选择你使用的 AI 应用，然后复制设置。

安装之前

基础检查：3 项中通过 3 项
在作者的服务器上运行：你向它提出的内容会经过他们的服务器。
注册中心没有列出需要填写的密钥。

你需要

在云端运行无需安装任何东西，通过互联网连接

你用的是哪个应用？

ClaudeClaude CodeCursorVS CodeChatGPT

在上方选择你的应用。我们会记住它，下次按钮会显示“安装到 …”。

适用于网页版、桌面版和手机版 Claude：

打开 Settings → Connectors
点击 Add custom connector
粘贴下面的地址，然后点击 Add
如果要求登录，请登录作者的服务

https://mcp.letkite.com/mcp

在终端中运行这条命令

claude mcp add --transport http letkite https://mcp.letkite.com/mcp

在 Cursor 中打开

或者自己复制设置

粘贴到项目中的 .cursor/mcp.json，或 ~/.cursor/mcp.json

{
  "mcpServers": {
    "letkite": {
      "url": "https://mcp.letkite.com/mcp"
    }
  }
}

浏览器会先询问是否打开应用，然后应用会显示设置并请你确认。密钥的值会留空，由你自己填写。

在 VS Code 中打开

或者自己复制设置

粘贴到项目中的 .vscode/mcp.json

{
  "servers": {
    "letkite": {
      "type": "http",
      "url": "https://mcp.letkite.com/mcp"
    }
  }
}

浏览器会先询问是否打开应用，然后应用会显示设置并请你确认。密钥的值会留空，由你自己填写。

ChatGPT 只能连接互联网上的服务器：

打开网页版 ChatGPT → Settings → Connectors (Apps)
点击 Create 或 Add（部分套餐需要先在 Advanced 中开启 Developer mode）
粘贴下面的地址，起个名字，然后保存
如果要求登录，请登录作者的服务

https://mcp.letkite.com/mcp

菜单名称可能因套餐和版本不同而略有差异。

你的选择通过 Cookie 保存在这台设备上，无需账户。

这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同，请以 README 为准。

它能做什么

服务器要求先登录，才会列出它的工具。

基础检查i

我们检查的是任何人都能看到的信息；我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月6日

✓ 通过
作者与仓库一致
注册名称已通过域名 letkite.com 验证（注册中心会核实域名所有权）
… 尚未检查
仍在维护
我们还没有从 GitHub 读取这个仓库
… 尚未检查
有许可证
我们还没有从 GitHub 读取这个仓库
✓ 通过
端点有响应
在 919 毫秒内响应（HTTP 401）
✓ 通过
使用 OAuth 登录
声明支持 OAuth 登录，你的 AI 应用可以带你去登录
… 尚未检查
工具描述中没有隐藏指令
尚未检查；我们会在检查端点时读取工具列表

与“其他”中的其他服务器比较i

星标数多于此分类中其他 32398 个服务器的 0%
发布到注册中心的时间比此分类中其他 32398 个服务器的 96% 更新
基础检查结果等于或优于此分类中其他 32398 个服务器的 100%

与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时，星标数才计入。

常见问题

LetKite 安全吗？

它在 3 项适用的基础检查中通过了 3 项。我们没有阅读代码。在添加密钥或令牌之前，请先看看这个服务器要求哪些权限，并使用只具备所需权限的密钥。

它需要哪些密钥或代码？

注册中心没有列出必需的密钥，不过有些服务器会在首次使用时要求你登录。

它在我的电脑上运行还是在云端？

它在作者的云端运行。通过互联网连接，无需安装，但你发送的内容会经过作者的服务器。

它还在维护吗？

GitHub 仓库最后更新于–，最新版本（1.9.1）于昨天进入注册中心。

哪些应用可以使用它？

支持 MCP 的应用，例如 Claude Desktop、Claude Code、Cursor 和 VS Code。它通过 URL 连接，所以接受远程 MCP 服务器的应用也可以使用，例如开启开发者模式的 ChatGPT。

有什么可以替代它？

同一分类中有：Spec Driven Development, Remote Desktop Commander, AI Deprecations

替代选择

同一分类中其他作者的服务器，按星标数排序。

如何看卡片：★ GitHub 星标i三大支柱：评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i

Spec Driven Development

作者：formulahendry

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

在你的电脑上运行★ 440MIT14个月前更新

安装

Remote Desktop Commander

作者：desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

在云端运行★ 211昨天更新

安装

AI Deprecations

作者：aideprecations.com

AI model shutdown dates, replacements, change feed and webhook alerts for 8 providers.

在云端运行今天更新

安装

作者的 README

打开 README

按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。

letkite-router

OpenWrt packages and the LuCI app for the LetKite agent.

中文说明

LetKite lets AI assistants on your account reach your machines, and, through a router, the devices behind it (a NAS, a printer, a camera's admin page, a PC to wake), within limits you set on each machine. On a router, the agent can also wake computers on the LAN and manage the router itself.

This repository contains:

`letkite-agent`: an OpenWrt package that installs the LetKite agent.
`luci-app-letkite`: Services → LetKite in LuCI. It shows the agent's status, pairs the router with your account (a code and a QR code), pauses and resumes the agent, sets its permissions, and shows its log.

What this is not. The agent itself is not here. It is a closed-source program, built and signed by LetKite, and published on get.letkite.com. This repository is the MIT-licensed packaging and LuCI app around it. The package does not contain the program: it downloads one exact release, checks its SHA-256, and installs it (How the program is verified).

For router and device makers

We work with router, NAS and device makers to preinstall or integrate the LetKite agent:

firmware images with the agent built in;
OEM feeds;
LuCI branding;
joint testing on your hardware;
new architectures, such as mipsel.

Write to contact@letkite.com with the subject starting with `[Router partnership]`. Please include:

your company;
the devices and SoCs;
the OpenWrt version or vendor SDK;
expected volumes;
your timeline.

Please do not post this in a public issue.

Supported


OpenWrt	25.12 (apk) and 24.10 (opkg). Vendor firmware based on other OpenWrt versions is not supported yet.
Architectures	x86_64; aarch64 (MediaTek MT798x, Rockchip, Raspberry Pi, armsr…); ARMv7 with a VFPv3 FPU (IPQ40xx, mvebu, armsr…)
Not supported	MIPS (mipsel, e.g. MT7621; mips), ARMv7 without VFPv3 (some BCM53xx), ARMv5/v6
Hardware	256 MB of RAM or more. Free flash for two copies of the program (about 16 MB), because an update writes the new copy before removing the old one.

On an unsupported router, the install stops with a message that names the reason, and nothing is installed.

Install from the LetKite feed

OpenWrt 25.12 (apk):

wget -O /etc/apk/keys/letkite-apk.pem https://get.letkite.com/openwrt/keys/letkite-apk.pem

echo 'https://get.letkite.com/openwrt/25.12/packages.adb' >> /etc/apk/repositories.d/customfeeds.list apk update apk add luci-app-letkite

OpenWrt 24.10 (opkg):

wget -O /tmp/letkite-usign.pub https://get.letkite.com/openwrt/keys/letkite-usign.pub

opkg-key add /tmp/letkite-usign.pub echo 'src/gz letkite https://get.letkite.com/openwrt/24.10' >> /etc/opkg/customfeeds.conf opkg update opkg install luci-app-letkite

luci-app-letkite pulls in letkite-agent. Install only letkite-agent if you don't use LuCI. Translations: luci-i18n-letkite-zh-cn, -ja, -ko, -fr, -de.

The packages are architecture-independent (all), so there is one feed per OpenWrt version.

Install over SSH

Without the feed, the install script does the same job: it downloads the agent, checks it against the release's SHA256SUMS, and installs it in /opt/letkite-agent. Log in as root and run:

wget -qO- https://get.letkite.com/install.sh | sh

To pair the router as part of the install, use the command shown in the dashboard under Add device → Router (OpenWrt). It is the same line followed by -s -- enroll ….

Pairing in LuCI

Open Services → LetKite → Overview and click Pair. You can give the router a name.
LuCI shows a code, a link and a QR code. Open the link (or scan the code with your phone), sign in to LetKite, and approve the code.
Once you approve it, the router appears in your dashboard and the agent's service starts.

Pause disconnects the agent for 30 minutes, an hour, a day, a custom time, or until you resume it. Permissions shows the router's local ceiling (see Permissions). Log shows the agent's lines from logread.

Permissions

The router's local ceiling, /etc/letkite/ceiling.toml, is the most AI assistants may ever do on this router, whatever your LetKite account allows: the dashboard can narrow it but never exceed it. Only root can change it. Services → LetKite → Permissions shows it.

Switches. Seven of its keys are true or false, and LuCI turns them on and off:

Switch	On means
`handover`	someone at the device may hand it over to AI assistants and leave (meant for desktops)
`direct`	direct peer-to-peer transfers with the account's other devices
`updates`	the agent installs newer releases signed by LetKite
`env`	the environment variables set in the dashboard are written on the router, for the commands run there
`accelerate`	traffic to LetKite's own servers goes through its access points
`telemetry`	the agent sends its crash reports (version, system, where it failed; never commands, paths or output)
`mesh`	the router joins the account's mesh network, so its other devices can reach it as the account's rules allow

Turning on handover, direct, env or mesh asks for confirmation first, because each widens what AI assistants on the account can do or reach on this router. The other three are about how the agent itself runs.

LuCI saves a switch with letkite-agent ceiling set , which changes only that line of the file. The agent reads its ceiling only when it starts, so LuCI then restarts it (/etc/init.d/letkite-agent restart); the router is offline for LetKite for a few seconds.

Other limits. The rest of the ceiling is not true or false, so LuCI shows it read-only:

Key	What
`shell`	`off` or `full`: whether AI assistants may run commands, shell sessions and terminals here. (`sandboxed` needs Landlock, which OpenWrt's kernel does not have.)
`files`	the most of the file system they may be granted; `[]` is nothing, `["*"]` no limit
`deny`	paths always hidden
`gui`, `gui_apps`	screen access; `off` and `[]` on a router
`tunnel_targets`	where tunnels may connect, such as `"192.168.1.0/24"` or `"192.168.1.10:80"`
`keep_awake`, `local_control`	power, and who at the device may pause the connection

To change them, edit the file over SSH, check it, and restart the agent:

vi /etc/letkite/ceiling.toml

letkite-agent ceiling --path /etc/letkite/ceiling.toml # prints what the agent reads, or the error /etc/init.d/letkite-agent restart

Every key must be present and unknown keys are refused. The agent does not start with a ceiling it cannot read; LuCI then shows why.

Uninstall

apk del -r letkite-agent                                          # 25.12

opkg remove --force-removal-of-dependent-packages letkite-agent # 24.10

This removes letkite-agent together with what depends on it (luci-app-letkite and its translations).

Removing letkite-agent runs the agent's own letkite-agent uninstall, which stops and removes its procd service and sysupgrade keep list, and then deletes /opt/letkite-agent. `/etc/letkite` stays. It holds the node key, the enrollment and the ceiling, so installing again brings back the same node. To forget the node completely, also delete that directory and remove the router in the dashboard:

rm -rf /etc/letkite

How the program is verified

The chain of trust is feed signature → package → pinned SHA-256:

Your package manager installs letkite-agent only from a feed index signed with LetKite's feed key: usign on 24.10, an apk v3 key on 25.12. The index lists each package's hash.
The package's pre-install script carries a table generated from the agent release: the version and the SHA-256 of the program for each architecture (packages/letkite-agent/files/release).
The script downloads https://get.letkite.com/agent/v /letkite-agent-router-linux- (the router build: the agent without the desktop parts, kept within a router's flash budget; letkite-agent-linux- , the full build, for releases from before the router build), checks it with sha256sum, and installs it only on an exact match. On a mismatch, an unsupported CPU, too little flash or a failed download, the script fails, the install command fails, and no program and no service are left on the router. opkg (24.10) then stops, so the package is not installed at all. apk-tools (25.12) goes on after a failed pre-install script: it keeps a record of the package, which holds only the release table and is flagged with a script error. apk del -r letkite-agent removes it.

On install and on upgrade, a program already in /opt/letkite-agent is kept when it is newer than the table (the agent updated itself since). One of the same version is kept only if its SHA-256 matches the pin; otherwise the script replaces it with the pinned program, checked as above. That is how a router that runs the full build (installed, or updated to, before the router build) moves to the router build of the same version. An older program is replaced too.

The table is regenerated only from a release whose release.json carries a valid Ed25519 signature from one of LetKite's agent release keys (keys/agent-release-keys.txt, the same keys the agent itself trusts). SHA256SUMS must also agree with release.json. scripts/release-table.py does this; the scheduled bump workflow runs it and opens a pull request, and CI checks the pinned table against the signed release on every change.

Afterwards, the agent installs its own procd service (letkite-agent install). It then updates itself: it installs only releases signed with the same release keys, verifies their size and SHA-256, and rolls back an update that does not come up.

Why `apk audit` stays clean. The package does not own /opt/letkite-agent/letkite-agent; the program file is not in the package. The agent replaces that file when it updates itself, and a file the package owned would then show up as modified. The package owns only the release table, /usr/share/letkite-agent/release. The init script and the sysupgrade keep list belong to the agent, which writes them on install and removes them on uninstall, so the package and the agent never disagree about the service.

Security

Please report vulnerabilities privately to contact@letkite.com with the subject starting with `[Security]`. Do not open a public issue. See SECURITY.md.

Contributing

See CONTRIBUTING.md. Every commit needs a Signed-off-by line (DCO).

License

MIT, see LICENSE. This covers this repository only. The LetKite agent is distributed by LetKite under its own terms. The vendored QR code library is MIT licensed, see THIRD_PARTY_NOTICES.md.