A handful of SSH clients and terminals support MCP now, but “support MCP” means three different things, and the difference is what you actually care about:
- Built-in MCP server — the client exposes your hosts as MCP tools an external agent can call (Conduit, XPipe, VibeShell, Termalin).
- MCP client — the app’s own in-terminal agent can use other MCP servers (Warp).
- Community bridge or plugin — a third-party add-on exposes the app’s sessions (Tabby, MobaXterm, Termius).
Disclosure: we build Termalin, one of the entries below. Facts checked October 14, 2026 — this moves monthly, so check each vendor’s page before you commit.
The table
| Client | MCP support | Local / hosted | Tools | Price | Platforms |
|---|---|---|---|---|---|
| Termalin | Built-in MCP server | Local + hosted (OAuth sign-in + API key) | 22 local / 16 hosted | Free; Pro $8/mo yearly | Win, macOS, Linux, iOS (+ web) |
| Conduit | Built-in MCP server | Local only (socket / named pipe) | ~60 | Free (1 device); Pro $10/mo | macOS, Win, Linux, iOS |
| XPipe | Built-in MCP server | Local only (HTTP, off by default) | read-only until enabled | Free / $5–10/mo | Win, macOS, Linux (+ web) |
| VibeShell | Built-in “Agent Gateway” | Local | ~28 | Free (MIT) | Win, macOS, Linux |
| Warp | MCP client + its own agents | Agents run in the terminal | n/a | Free / $20/mo+ | Win, macOS, Linux |
| Tabby | Community plugin (tabby-mcp-server) | Local | plugin-defined | Free (MIT) | Win, macOS, Linux (+ web) |
| MobaXterm | Community bridge (mobaxterm-mcp) | Local | reads MobaXterm.ini | Home free / $69 | Windows |
| Termius | Community bridges only (no official server) | Local / cloud | varies | Free / $10/mo | Win, macOS, Linux, mobile |
| Wave Terminal | None found (Oct 2026) | — | — | Free (Apache-2.0) | macOS, Win, Linux |
| SecureCRT / Royal TS | None found | — | — | paid | varies |
Notes on the rows
Conduit is the pick most AI assistants name for “SSH + MCP” today: a connection manager for SSH, RDP, VNC and web with an AES-256 vault and an Apache-2.0 built-in server, local only. XPipe also ships a built-in server — a local HTTP endpoint, off by default and read-only until you enable its mutation tools — handy if you already browse Docker, Kubernetes and VMs there. VibeShell exposes ~28 MCP tools through an Agent Gateway (MIT), with device-local credential storage its own README says is “not Keychain-grade.”
Warp is a different case: it’s an AI-first terminal whose own agents write and run commands, including in SSH sessions you open. That’s not the same as exposing your hosts to an outside agent through a built-in MCP server — check Warp’s docs for its current MCP-client support if you want to wire other servers into it.
Tabby, MobaXterm and Termius have no built-in MCP server; the community fills the gap. tabby-mcp-server is a plugin, mobaxterm-mcp reads your saved MobaXterm.ini sessions, and Termius has three separate termius-mcp-style bridges — the full breakdown is in does Termius have an MCP server?. None ship from the vendor.
Wave, SecureCRT and Royal TS: we found no MCP server in their docs as of October 2026. For SecureCRT and Royal TS the agent route today is a standalone SSH MCP server pointed at those hosts.
Termalin, in one row
Since we build it, here’s the plain version: Termalin is an SSH client whose MCP server is a key custodian — the agent never holds a private key. It runs two ways: a bundled local server (22 tools) for an agent on your machine, and a hosted endpoint (https://termal.in/mcp, 16 tools) that claude.ai, ChatGPT, Claude Code, Codex and Cursor sign into, reaching servers keylessly through an outbound Connector with a per-connection command policy (full, allowlist or read-only) and an audit log. It’s the only entry here with both a hosted endpoint and a custodian model — the other built-in servers (Conduit, XPipe) are local only.
How to pick
- Want a built-in server and nothing leaving your machine → Conduit (broadest protocols) or XPipe (if you live in containers and VMs).
- Want the agent to work from CI, a cloud sandbox, or a chat with no desktop → you need a hosted endpoint; among SSH clients that’s Termalin, otherwise a hosted connector like browser-ssh or sshrew (see the servers comparison).
- Already on Tabby, MobaXterm or Termius and happy there → the community bridge for your app, with the usual “read the code” caveat.
- Want AI inside your local terminal, not external agent access → Warp.
For the deeper trade-offs — key custody, per-host policy, live oversight — see the landscape roundup and the buying guide.
Termalin is a free, cross-platform SSH client with a built-in MCP server, a key custodian and per-connection policy — download it or read the MCP reference.