Atlas / MCP servers / gentlemanhu / Tabby

TabbyCAUTION

Name: Tabby
Author: gentlemanhu

mcp/gentlemanhu/tabby

MCP server by gentlemanhu · ai · mcp · mcp server · Audited 2026-10-08

⚑ Report / re-scan Source ↗

MCP server for Tabby terminal, 36 MCP tools including SFTP support, full control your Tabby!

Verdict

CAUTION

Grade

Trust score

89 /100

Exposed tools

32 21r · 10w · 1d

Transport

sse · streamable-http

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://opensource.org/licenses/MIT) [](https://www.typescriptlang.org/) [](https://tabby.sh/) [](https://modelcontextprotocol.io/) [](https://github.com/GentlemanHu/Tabby-MCP/releases) [](https://www.npmjs.com/package/tabby-mcp-server) [](https://www.npmjs.com/package/tabby-mcp-server) [](#-about-this-project) [](#%EF%B8%8F-platform-support)

A Comprehensive MCP Server Plugin for Tabby Terminal

Connect AI assistants to your terminal with full control — 36 MCP tools including SFTP support

English | 中文

🚀 Tabby-MCP is a powerful plugin for Tabby Terminal, bridging the gap between AI agents and your terminal environment. It provides a standardized MCP interface for AI to execute commands, manage tabs, and handle file operations securely. Give your AI hands to work with.

✨ Features

🖥️ Terminal Control

Execute commands with output capture Stable session IDs (v1.1+) Send interactive input (vim, less,

Read from source at commit 29271f17b784OBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add tabby-mcp-server -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "tabby-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Exposed tools (32)

21 read · 10 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`abort_command`	read	Abort a running command by sending Ctrl+C. Session targeting: sessionId (recommended) > tabIndex > title > profileName
`close_all_tabs`	read	Close all open tabs
`close_tab`	read	Close a specific tab. If no locator provided, closes the active tab. Tab targeting: tabId (stable, recommended) > tabIndex (legacy) > title (partial match)
`duplicate_tab`	read	Duplicate the active tab or a specific tab
`focus_pane`	read	Focus a specific pane in a split terminal tab. Use sessionId to identify the exact pane to focus. After focusing, commands sent to that split tab will go to the focused pane.
`get_command_status`	read	Get the status of active/running commands across all terminals
`get_session_environment`	read	Get the environment context of a terminal session (e.g., bash, python, node, database REPL). Use this before sending complex commands to ensure the session is in the expected state. Session targeting: sessionId (recommended) > tabIndex > title > profileName
`get_terminal_buffer`	read	Get the content of a terminal buffer. Use this to check command output after using send_input or async exec_command. Session targeting: sessionId (recommended) > tabIndex > title > profileName
`list_profiles`	read	List all available terminal profiles (local shell, SSH connections, etc.). Returns profileId which can be used directly with open_profile(). Workflow: list_profiles() -> find desired profile -> open_profile(profileId=
`list_tabs`	read	List all open tabs in Tabby with stable IDs and metadata. Use tabId (stable) for reliable tab targeting; tabIndex may change if tabs are reordered.
`move_tab_left`	write	Move the active tab to the left
`move_tab_right`	write	Move the active tab to the right
`next_tab`	read	Switch to the next tab
`open_profile`	read	Open a NEW terminal tab using a profile. Creates new connection. Usage: list_profiles() -> open_profile(profileId=
`previous_tab`	read	Switch to the previous tab
`reopen_last_tab`	read	Reopen the last closed tab
`select_tab`	read	Select/focus a specific tab. Tab targeting: tabId (stable, recommended) > tabIndex (legacy) > title (partial match)
`send_input`	write	Send raw input to a terminal. Use this for interactive commands like vim, less, top, etc. Session targeting: sessionId (recommended) > tabIndex > title > profileName Special keys: \\x03 (Ctrl+C), \\x04 (Ctrl+D), \\x1b (Escape), \\r (Enter)
`sftp_cancel_transfer`	write	Cancel an active file transfer.
`sftp_delete`	destructive	Delete file or empty directory via SFTP.
`sftp_download`	read	Download a remote file to local path via SFTP. ⚠️ IMPORTANT: Use these exact parameter names: • remotePath (required): Path to the file on the remote server • localPath (required): Absolute path for local destination • sync (optional): Wait for completion (default: true) Example: {
`sftp_get_transfer_status`	write	Get status and progress of a file transfer task.
`sftp_list_files`	read	List files in remote directory via SFTP. Returns: Array of {name, path, isDirectory, size, modifiedTime}
`sftp_list_transfers`	read	List all active and recent file transfers.
`sftp_mkdir`	write	Create directory on remote server via SFTP.
`sftp_read_file`	read	Read remote file content via SFTP. For text files only. Max size: Configurable in Settings (default: 1MB)
`sftp_rename`	write	Rename or move file/directory via SFTP.
`sftp_stat`	read	Get file/directory info (exists, size, permissions, etc).
`sftp_upload`	write	Upload a local file to a remote server via SFTP. ⚠️ IMPORTANT: Use these exact parameter names: • localPath (required): Absolute path to the local file to upload • remotePath (required): Destination path on the remote server • sync (optional): Wait for completion (default: true) Example: {
`sftp_write_file`	write	Write string content to remote file via SFTP. For text content only. Use sftp_upload for binary files.
`split_tab`	read	Split the current terminal pane in a direction. Creates a new pane with a copy of the current terminal. Direction:
`submit_keyboard_interactive_response`	write	Submit response(s) to an active SSH keyboard-interactive authentication prompt. Use this for MFA/TOTP prompts shown by Tabby

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: declared (6 observation(s))
Shell: declared (2 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (11)

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

sftp_delete

Why it matters. 1 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862

sse,streamable-http

Why it matters. a network transport with no auth environment variable found

Fix. require a token