| name | kastell |
| description | Server security auditing, hardening, and fleet management. 457 security checks across 30 categories (SSH, Firewall, Docker, TLS, HTTP Headers), CIS/PCI-DSS/HIPAA compliance mapping, 24-step production hardening, and 13 MCP tools. Supports Hetzner, DigitalOcean, Vultr, and Linode with Coolify, Dokploy, and bare VPS modes. Install: claude plugins add kastell |
Kastell — Server Security Toolkit
CLI toolkit and Claude Code plugin for provisioning, securing, and managing self-hosted servers.
Install
claude plugins add kastell
Features
- Security Audit: 457 checks across 30 categories with CIS/PCI-DSS/HIPAA compliance mapping
- Production Hardening: 24-step server lock (SSH, fail2ban, UFW, sysctl, auditd, AIDE, Docker)
- Fleet Management: Monitor multiple servers from a single dashboard
- 4 Cloud Providers: Hetzner, DigitalOcean, Vultr, Linode
- 3 Platform Modes: Coolify, Dokploy, bare VPS
- Forensic Evidence: Collection with SHA256 checksums
- Health Analysis: Proactive disk trending, swap detection, stale package alerts
MCP Tools (13)
| Tool | Purpose |
|---|
server_audit | 457-check security scan |
server_lock | 24-step production hardening |
server_secure | SSH, firewall, domain/SSL management |
server_doctor | Proactive health analysis |
server_fleet | Fleet-wide security dashboard |
server_info | Server status and health checks |
server_logs | Log retrieval and system metrics |
server_guard | Autonomous security monitoring |
server_evidence | Forensic evidence collection |
server_backup | Backup/restore and cloud snapshots |
server_provision | New server provisioning |
server_manage | Server registration and lifecycle |
server_maintain | Updates, restarts, maintenance |
Links
