# Terminal Guardian MCP server

Agent View of the PolicyLayer registry record for Terminal Guardian: identity, probed posture, risk grade, and all 25 tools classified. HTML page: https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp

## Facts

- Server id: `7majesty-m/terminal-guardian-mcp`
- Homepage: https://github.com/7Majesty-M/terminal-guardian-mcp
- Registry record: grade F, identity unverified
- Lifecycle: active
- Rate-limited: no
- Tools: 25
- Tool categories present: Execute, Read, Write
- Tags: 7majesty m terminal guardian mcp, automation
- Record last modified: 2026-08-12T11:14:21.302Z

## Tools (25)

| Tool | Category | Risk | Record |
| --- | --- | --- | --- |
| `kill_process` | Destructive | Critical | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/kill-process.md |
| `docker_exec` | Execute | High | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/docker-exec.md |
| `ping` | Execute | High | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/ping.md |
| `run_command` | Execute | High | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/run-command.md |
| `ssh_exec` | Execute | High | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/ssh-exec.md |
| `ssh_test` | Execute | High | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/ssh-test.md |
| `hello` | Other | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/hello.md |
| `analyze_command` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/analyze-command.md |
| `dns_lookup` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/dns-lookup.md |
| `docker_logs` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/docker-logs.md |
| `docker_ps` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/docker-ps.md |
| `docker_stats` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/docker-stats.md |
| `get_env` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/get-env.md |
| `git_diff` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/git-diff.md |
| `git_log` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/git-log.md |
| `git_status` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/git-status.md |
| `git_suggest_commit` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/git-suggest-commit.md |
| `http_request` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/http-request.md |
| `list_files` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/list-files.md |
| `list_processes` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/list-processes.md |
| `list_templates` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/list-templates.md |
| `read_file` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/read-file.md |
| `search_files` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/search-files.md |
| `ssh_list_profiles` | Read | Low | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/ssh-list-profiles.md |
| `apply_template` | Write | Medium | https://policylayer.com/tools/7majesty-m-terminal-guardian-mcp/apply-template.md |

## Tool descriptions

- `kill_process` — Terminate a process by PID. Uses SIGTERM by default (graceful). SIGKILL requires confirmed=true. System processes are protected.
- `docker_exec` — Execute a command inside a running Docker container. Requires confirmed: true. Output capped at 512KB.
- `ping` — Ping a host to check reachability and measure round-trip latency. Private/loopback addresses are blocked by default.
- `run_command` — Execute a shell command in a secure sandboxed environment with risk analysis, timeout enforcement, and output capture. Commands are analyzed for safety before execution.
- `ssh_exec` — Execute a shell command on a remote server via SSH. Uses the same risk analysis engine as local execution. Requires a named SSH profile in config.
- `ssh_test` — Test SSH connectivity to a configured profile. Returns latency and server version.
- `hello` — Say hello
- `analyze_command` — Analyze a shell command for safety risks without executing it. Returns risk level (SAFE/WARNING/DANGEROUS/BLOCKED), reasons, and recommendations.
- `dns_lookup` — Resolve a hostname to IP addresses using DNS.
- `docker_logs` — Retrieve logs from a Docker container.
- `docker_ps` — List Docker containers with their status, image, and port information.
- `docker_stats` — Get real-time resource usage statistics for a Docker container.
- `get_env` — Read environment variables with automatic secret masking. Secrets (tokens, passwords, keys) are shown as masked values like
- `git_diff` — Show Git diff for working tree or staged changes.
- `git_log` — Show Git commit history with author, date, and message.
- `git_status` — Get the current Git repository status including staged, unstaged, and untracked files.
- `git_suggest_commit` — Generate AI-powered commit message suggestions from git diff using Claude. Returns conventional commit format suggestions with type, scope, and subject. Requires ANTHROPIC_API_KEY environment variable.
- `http_request` — Make an HTTP/HTTPS request and return status, headers, and body. Only http:// and https:// allowed. Response body capped at 512KB.
- `list_files` — List files and directories within the workspace. Access is restricted to allowed paths.
- `list_processes` — List running system processes with CPU, memory usage, and command info. Supports filtering by name and sorting.
- `list_templates` — List available workspace templates for scaffolding new projects. Includes Node.js, TypeScript, Python, FastAPI, React, Next.js, Express, and MCP server templates.
- `read_file` — Read the contents of a file within the workspace. Access is restricted to allowed paths and file size limits.
- `search_files` — Search for text across files in the workspace. Returns matching lines with context.
- `ssh_list_profiles` — List all configured SSH profiles with their host, port, username, and auth method.
- `apply_template` — Scaffold a new project from a template. Creates files and directories in the target path within the workspace. Safe — cannot write outside workspace root.

## Related servers

- UnClick (1662 tools) — https://policylayer.com/tools/io-github-malamutemayhem-unclick-mcp-server.md
- Delx Mcp A2a (1082 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-a2a.md
- Delx Protocol — Agent Recovery & Continuity (1076 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-protocol.md
- Nodebench (824 tools) — https://policylayer.com/tools/io-github-homenshum-nodebench.md
- MCP Framework Personal (811 tools) — https://policylayer.com/tools/inggerman-mcps.md
- Delx MCP Server (740 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-server.md
- Binance MCP Server (734 tools) — https://policylayer.com/tools/nirholas-binance-mcp.md
- Crawlora (728 tools) — https://policylayer.com/tools/crawlora-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=7majesty-m-terminal-guardian-mcp · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/7majesty-m-terminal-guardian-mcp