Enables AI agents within virtual machines to securely execute pre-approved host commands, especially for tasks like flashing embedded devices when USB passthrough is problematic.
Sponsored
Gatecmd is an MCP server built in Rust that allows AI agents operating inside virtual machines to securely execute pre-approved commands directly on the host machine. This is particularly useful for scenarios where direct USB passthrough from a VM to the host fails, such as when flashing embedded devices using tools like `rkdeveloptool`. It ensures secure operations through bearer token authentication, YAML-based command allowlisting, robust argument validation, and direct binary invocation (preventing shell injection), offering a controlled and safe way for virtualized agents to interact with host resources.
주요 기능
01Bearer token authentication and direct command invocation for security
02YAML-based allowlisting for commands, binary paths, and argument patterns
03Constrained file operations within a defined root directory
040 GitHub stars
05Secure execution of host commands from VMs via MCP
06Built with Rust using Axum and Tokio for high performance and reliability
사용 사례
01Flashing embedded devices (e.g., Rockchip) from within a virtual machine when USB passthrough is unreliable.
02Providing a secure bridge for VM-based development environments to interact with host-specific hardware tools.
03Enabling AI agents to execute pre-approved, privileged commands on the host system without direct shell access.