Airsc is free for everyone. If it helps you, support it with $2–$20.

Support
MCP serverSafeDeploy & DevOpsAdvanced

agentdock

uvwt · uvwt/agentdock

A secure MCP runtime that enables AI agents to operate local machines, remote servers, and containers with multi-device orchestration.

Secure MCP runtime for AI agents to operate local machines, servers, and containers with multi-device orchestration.

1.2k stars145License: Apache-2.0Updated 12 days ago0 opens

Preview

▍

What you can do with it

  • Allow an AI agent to securely execute commands on a remote server.
  • Orchestrate a multi-machine deployment workflow directly from a chat interface.
  • Grant agents controlled access to local file systems for configuration changes.

Safety check

Safe

No risky patterns found in the files we scanned.

Automated scan of the repo files. Always review code you run.

From the README

English | 简体中文

AgentDock MCP

Give AI agents secure, controlled access to every machine you operate.

Open ChatGPT in your browser and manage multiple computers and servers from one conversation. Write code, change configuration, run commands, and deploy in the real environment where the work belongs—without consuming a dedicated Codex coding quota.

Documentation · Download · Code signing policy · Community

What is AgentDock?

AgentDock is an independent tool runtime for AI agents.

It provides unified, secure, and controlled file, command, Git, Skill, MCP, browser automation, and task execution across local computers, remote servers, and containers. Connect multiple AgentDock instances to coordinate work across devices and finish multi-machine workflows in a single conversation.

AgentDock does not provide a chat interface or perform model inference. It focuses on one responsibility:

Let AI agents operate real environments within explicit permission boundaries and return structured, traceable, and verifiable results.

              ChatGPT / Claude / Codex
                        │
                        │ MCP (multiple instances supported)
          ┌─────────────┼─────────────┐
          ▼             ▼             ▼
   ┌───────────┐ ┌───────────┐ ┌───────────┐
   │ AgentDock │ │ AgentDock │ │ AgentDock │
   │ Local Mac │ │ LAN Host  │ │ Cloud VPS │
   └─────┬─────┘ └─────┬─────┘ └─────┬─────┘
         │             │             │
         ▼             ▼             ▼
   Files · Shell · Git  Tunnels       Proxy · Deploy

What can AgentDock do?

  • Manage multiple computers and servers directly from ChatGPT without repeatedly switching SSH sessions
  • Write code, modify projects, run tests, and operate Git in the real local or remote environment without depending on a dedicated coding-agent quota
  • Manage VPS hosts, Docker services, reverse proxies, and deployment configuration
  • Inspect logs, processes, ports, and actual runtime state
  • Operate authenticated web pages and macOS desktop applications
  • Connect multiple AgentDock instances and coordinate cross-device work in one conversation
  • Extend capabilities through Skills and dynamic MCP servers
  • Persist long-running task state and continue after an interruption
  • Use the same tool model across macOS, Linux, Windows, and containers
  • And more

Quick start

Regular users can install AgentDock from the official package for their operating system. You do not need the source code or Go.

See Install AgentDock for the complete instructions.

PlatformDocumentation
DockerDocker installation
LinuxAutomated Linux installation
Linux / VPSManual systemd deployment
macOSmacOS installation
WindowsGraphical Windows installer

Choose a connection option

  • Local only: the client and AgentDock run on the same computer.
  • Temporary public address: ChatGPT, a phone, or another remote device needs access and no domain is ready. The address may change after the Tunnel restarts.
  • Fixed domain: a stable address for long-term use. Requires a Cloudflare-managed domain and Tunnel Token.

After installation, get the MCP URL and Bearer Token or OAuth sign-in details from the control panel or terminal, then add them to the MCP, Tools, or Connectors settings in your client. Public access must keep authentication enabled. Do not include credentials in screenshots, issues, or public conversations.

Connect an AI client

AgentDock exposes tools over MCP Streamable HTTP. The exact client syntax varies, but a typical configuration looks like this:

{
  "mcpServers": {
    "agentdock": {
      "url": "http://127.0.0.1:8765/mcp",
      "headers": {
        "Authorization": "Bearer "
      }
    }
  }
}

Core capabilities

Files and commands

  • Read and search UTF-8 text, traverse directories, and apply structured edits
  • Atomic file writes, path boundaries, and private-directory protection
  • Command execution with timeout and output limits
  • Separate stdout, stderr, and exit status
  • Long-running command sessions, PTY, observation, input, and termination
  • Output truncation and sensitive-value redaction
  • macOS, Linux, Windows, and WSL support

Skills and dynamic MCP

Official and community Skill sources live in uvwt/agentdock-skills. This repository only keeps core Skills that must ship with the AgentDock runtime, including bootstrap/security Skills and the built-in agentdock-user-guide official user guide.

  • Install, update, and remove current managed Skill content with digest-based no-op and atomic replacement
  • Keep managed, shared, and workspace Skill sources distinct through host-issued skill_ref provenance
  • Isolate managed Skill environment variables and persistent data from package content
  • Register, enable, disable, refresh, and remove dynamic MCP servers
  • Streamable HTTP and stdio transports
  • Search tools, inspect schemas, and pe
View source on GitHub