termal.in

← Blog

Which SSH clients support MCP in 2026

· Termalin Team mcpsshcomparisonai-agentstools

A handful of SSH clients and terminals support MCP now, but “support MCP” means three different things, and the difference is what you actually care about:

  • Built-in MCP server — the client exposes your hosts as MCP tools an external agent can call (Conduit, XPipe, VibeShell, Termalin).
  • MCP client — the app’s own in-terminal agent can use other MCP servers (Warp).
  • Community bridge or plugin — a third-party add-on exposes the app’s sessions (Tabby, MobaXterm, Termius).

Disclosure: we build Termalin, one of the entries below. Facts checked October 14, 2026 — this moves monthly, so check each vendor’s page before you commit.

The table

ClientMCP supportLocal / hostedToolsPricePlatforms
TermalinBuilt-in MCP serverLocal + hosted (OAuth sign-in + API key)22 local / 16 hostedFree; Pro $8/mo yearlyWin, macOS, Linux, iOS (+ web)
ConduitBuilt-in MCP serverLocal only (socket / named pipe)~60Free (1 device); Pro $10/momacOS, Win, Linux, iOS
XPipeBuilt-in MCP serverLocal only (HTTP, off by default)read-only until enabledFree / $5–10/moWin, macOS, Linux (+ web)
VibeShellBuilt-in “Agent Gateway”Local~28Free (MIT)Win, macOS, Linux
WarpMCP client + its own agentsAgents run in the terminaln/aFree / $20/mo+Win, macOS, Linux
TabbyCommunity plugin (tabby-mcp-server)Localplugin-definedFree (MIT)Win, macOS, Linux (+ web)
MobaXtermCommunity bridge (mobaxterm-mcp)Localreads MobaXterm.iniHome free / $69Windows
TermiusCommunity bridges only (no official server)Local / cloudvariesFree / $10/moWin, macOS, Linux, mobile
Wave TerminalNone found (Oct 2026)——Free (Apache-2.0)macOS, Win, Linux
SecureCRT / Royal TSNone found——paidvaries

Notes on the rows

Conduit is the pick most AI assistants name for “SSH + MCP” today: a connection manager for SSH, RDP, VNC and web with an AES-256 vault and an Apache-2.0 built-in server, local only. XPipe also ships a built-in server — a local HTTP endpoint, off by default and read-only until you enable its mutation tools — handy if you already browse Docker, Kubernetes and VMs there. VibeShell exposes ~28 MCP tools through an Agent Gateway (MIT), with device-local credential storage its own README says is “not Keychain-grade.”

Warp is a different case: it’s an AI-first terminal whose own agents write and run commands, including in SSH sessions you open. That’s not the same as exposing your hosts to an outside agent through a built-in MCP server — check Warp’s docs for its current MCP-client support if you want to wire other servers into it.

Tabby, MobaXterm and Termius have no built-in MCP server; the community fills the gap. tabby-mcp-server is a plugin, mobaxterm-mcp reads your saved MobaXterm.ini sessions, and Termius has three separate termius-mcp-style bridges — the full breakdown is in does Termius have an MCP server?. None ship from the vendor.

Wave, SecureCRT and Royal TS: we found no MCP server in their docs as of October 2026. For SecureCRT and Royal TS the agent route today is a standalone SSH MCP server pointed at those hosts.

Termalin, in one row

Since we build it, here’s the plain version: Termalin is an SSH client whose MCP server is a key custodian — the agent never holds a private key. It runs two ways: a bundled local server (22 tools) for an agent on your machine, and a hosted endpoint (https://termal.in/mcp, 16 tools) that claude.ai, ChatGPT, Claude Code, Codex and Cursor sign into, reaching servers keylessly through an outbound Connector with a per-connection command policy (full, allowlist or read-only) and an audit log. It’s the only entry here with both a hosted endpoint and a custodian model — the other built-in servers (Conduit, XPipe) are local only.

How to pick

  • Want a built-in server and nothing leaving your machine → Conduit (broadest protocols) or XPipe (if you live in containers and VMs).
  • Want the agent to work from CI, a cloud sandbox, or a chat with no desktop → you need a hosted endpoint; among SSH clients that’s Termalin, otherwise a hosted connector like browser-ssh or sshrew (see the servers comparison).
  • Already on Tabby, MobaXterm or Termius and happy there → the community bridge for your app, with the usual “read the code” caveat.
  • Want AI inside your local terminal, not external agent access → Warp.

For the deeper trade-offs — key custody, per-host policy, live oversight — see the landscape roundup and the buying guide.


Termalin is a free, cross-platform SSH client with a built-in MCP server, a key custodian and per-connection policy — download it or read the MCP reference.

Try it on one host.

Termalin is a fast SSH client for you — and your agents.

Free tier · 14-day Pro trial · pricing