kastell

Category: Testing & Security | Uploader: kastelldev | Downloads: 0 | Version: v1.0（Latest）

Server security auditing, hardening, and fleet management. 457 security checks across 30 categories (SSH, Firewall, Docker, TLS, HTTP Headers), CIS/PCI-DSS/HIPAA compliance mapping, 24-step production hardening, and 13 MCP tools. Supports Hetzner, DigitalOcean, Vultr, and Linode with Coolify, Dokploy, and bare VPS modes. Install: claude plugins add kastell

Changelog: Source: GitHub https://github.com/kastelldev/kastell

Directory Structure

Current level: tree/main/

📁 .github/
- 📁 workflows/
  - 📄 ci.yml 1.8 KB
  - 📄 mutation.yml 7.4 KB
  - 📄 publish.yml 849 B
  - 📄 release.yml 2.8 KB
  - 📄 staging.yml 1.8 KB
- 📄 dependabot.yml 166 B
📁 .supply-chain-risk-auditor/
- 📄 results.md 1.8 KB
📁 assets/
- 📄 demo.gif 1.0 MB
- 📄 logo.png 156.4 KB
📁 bin/
- 📄 kastell 48 B
- 📄 kastell-mcp 140 B
📁 docs/
- 📁 mcp-platforms/
  - 📄 claude-code.md 1.2 KB
  - 📄 claude-desktop.md 962 B
  - 📄 cursor.md 852 B
  - 📄 vscode.md 1.1 KB
- 📄 SUBMISSIONS.md 1.3 KB
📁 kastell-plugin/
- 📁 .claude-plugin/
  - 📄 plugin.json 574 B
- 📁 agents/
  - 📁 scripts/
    
    📄 bucket_mapper.sh 2.8 KB
    
    📄 trend_report.sh 2.6 KB
  - 📄 .gitkeep 0 B
  - 📄 kastell-auditor.md 3.6 KB
- 📁 hooks/
  - 📄 destroy-block.cjs 1.1 KB
  - 📄 hooks.json 1.1 KB
  - 📄 pre-commit-audit-guard.cjs 2.5 KB
  - 📄 session-audit.cjs 2.9 KB
  - 📄 session-log.cjs 2.0 KB
  - 📄 stop-quality-check.cjs 2.6 KB
- 📁 skills/
  - 📁 kastell-careful/
    
    📄 SKILL.md 2.8 KB
  - 📁 kastell-ops/
    
    📁 references/
    
    📄 commands.md 4.3 KB
    
    📄 mcp-tools.md 3.3 KB
    
    📄 patterns.md 5.7 KB
    
    📄 pitfalls.md 4.8 KB
    
    📁 scripts/
    
    📄 check_coverage.sh 3.4 KB
    
    📄 fleet_report.sh 2.2 KB
    
    📄 parse_audit.sh 2.6 KB
    
    📄 SKILL.md 6.0 KB
  - 📁 kastell-research/
    
    📄 SKILL.md 3.9 KB
  - 📁 kastell-scaffold/
    
    📁 references/
    
    📄 template-audit-check.md 4.7 KB
    
    📄 template-command.md 2.3 KB
    
    📄 template-mcp-tool.md 2.2 KB
    
    📄 template-provider.md 2.0 KB
    
    📁 scripts/
    
    📄 scaffold.sh 6.1 KB
    
    📁 templates/
    
    📄 check-test.ts.tpl 977 B
    
    📄 check.ts.tpl 1.3 KB
    
    📄 command-core.ts.tpl 498 B
    
    📄 command-test.ts.tpl 519 B
    
    📄 command.ts.tpl 805 B
    
    📄 mcp-tool-test.ts.tpl 779 B
    
    📄 mcp-tool.ts.tpl 787 B
    
    📄 provider-test.ts.tpl 930 B
    
    📄 provider.ts.tpl 930 B
    
    📄 SKILL.md 5.3 KB
  - 📄 .gitkeep 0 B
- 📄 .mcp.json 136 B
- 📄 README.md 5.3 KB
📁 src/
- 📁 adapters/
  - 📄 coolify.ts 7.3 KB
  - 📄 dokploy.ts 7.1 KB
  - 📄 factory.ts 1.8 KB
  - 📄 interface.ts 6.6 KB
  - 📄 shared.ts 12.1 KB
- 📁 cli/
  - 📄 header.ts 2.3 KB
- 📁 commands/
  - 📄 add.ts 4.0 KB
  - 📄 audit.ts 14.3 KB
  - 📄 auth.ts 3.1 KB
  - 📄 backup.ts 8.9 KB
  - 📄 bot.ts 387 B
  - 📄 changelog.ts 362 B
  - 📄 completions.ts 934 B
  - 📄 config.ts 2.9 KB
  - 📄 destroy.ts 4.0 KB
  - 📄 doctor.ts 8.0 KB
  - 📄 domain.ts 7.4 KB
  - 📄 evidence.ts 2.7 KB
  - 📄 firewall.ts 6.9 KB
  - 📄 fix.ts 19.8 KB
  - 📄 fleet.ts 489 B
  - 📄 guard.ts 3.8 KB
  - 📄 health.ts 3.0 KB
  - 📄 init.ts 7.5 KB
  - 📄 interactive.ts 36.8 KB
  - 📄 list.ts 1.1 KB
  - 📄 lock.ts 4.2 KB
  - 📄 logs.ts 3.0 KB
  - 📄 maintain.ts 7.6 KB
  - 📄 monitor.ts 2.0 KB
  - 📄 notify.ts 1.3 KB
  - 📄 remove.ts 2.3 KB
  - 📄 restart.ts 3.1 KB
  - 📄 restore.ts 7.8 KB
  - 📄 schedule.ts 4.2 KB
  - 📄 secure.ts 4.7 KB
  - 📄 snapshot.ts 9.9 KB
  - 📄 ssh.ts 1.3 KB
  - 📄 status.ts 5.8 KB
  - 📄 transfer.ts 3.8 KB
  - 📄 update.ts 6.2 KB
- 📁 core/
  - 📁 audit/
    
    📁 checks/
    
    📁 shared/
    
    📄 skipChecks.ts 564 B
    
    📄 accounts.ts 22.7 KB
    
    📄 auth.ts 20.7 KB
    
    📄 backup.ts 9.6 KB
    
    📄 banners.ts 7.2 KB
    
    📄 boot.ts 10.4 KB
    
    📄 cloudmeta.ts 9.2 KB
    
    📄 crypto.ts 21.3 KB
    
    📄 ddos.ts 9.1 KB
    
    📄 dns.ts 9.8 KB
    
    📄 docker.ts 35.5 KB
    
    📄 fileintegrity.ts 9.7 KB
    
    📄 filesystem.ts 14.7 KB
    
    📄 firewall.ts 13.9 KB
    
    📄 httpHeaders.ts 7.4 KB
    
    📄 incidentready.ts 13.9 KB
    
    📄 index.ts 6.8 KB
    
    📄 kernel.ts 29.6 KB
    
    📄 logging.ts 18.9 KB
    
    📄 mac.ts 11.6 KB
    
    📄 malware.ts 12.5 KB
    
    📄 memory.ts 14.3 KB
    
    📄 network.ts 19.8 KB
    
    📄 nginx.ts 18.5 KB
    
    📄 resourcelimits.ts 10.6 KB
    
    📄 scheduling.ts 11.6 KB
    
    📄 secrets.ts 19.2 KB
    
    📄 services.ts 21.0 KB
    
    📄 ssh.ts 12.4 KB
    
    📄 supplychain.ts 15.8 KB
    
    📄 time.ts 8.9 KB
    
    📄 tls.ts 11.8 KB
    
    📄 updates.ts 10.7 KB
    
    📁 compliance/
    
    📄 mapper.ts 48.8 KB
    
    📄 scoring.ts 6.8 KB
    
    📄 types.ts 1.2 KB
    
    📁 formatters/
    
    📄 badge.ts 2.1 KB
    
    📄 compliance.ts 2.8 KB
    
    📄 index.ts 1.5 KB
    
    📄 json.ts 274 B
    
    📄 report.ts 6.0 KB
    
    📄 shared.ts 1023 B
    
    📄 summary.ts 2.0 KB
    
    📄 terminal.ts 6.5 KB
    
    📄 trend.ts 2.2 KB
    
    📁 handlers/
    
    📄 aptUpgrade.ts 1.1 KB
    
    📄 chmodChown.ts 4.0 KB
    
    📄 fileAppend.ts 2.8 KB
    
    📄 fileWrite.ts 2.4 KB
    
    📄 index.ts 6.2 KB
    
    📄 packageInstall.ts 2.4 KB
    
    📄 sedReplace.ts 2.9 KB
    
    📄 sysctl.ts 2.6 KB
    
    📄 systemctl.ts 1.3 KB
    
    📄 commands.ts 43.2 KB
    
    📄 diff.ts 6.6 KB
    
    📄 filter.ts 2.3 KB
    
    📄 fix-history.ts 12.6 KB
    
    📄 fix.ts 14.3 KB
    
    📄 history.ts 7.6 KB
    
    📄 index.ts 5.3 KB
    
    📄 listChecks.ts 3.8 KB
    
    📄 profiles.ts 3.4 KB
    
    📄 quickwin.ts 3.2 KB
    
    📄 scoring.ts 2.9 KB
    
    📄 snapshot.ts 6.8 KB
    
    📄 types.ts 5.2 KB
    
    📄 vps.ts 2.0 KB
    
    📄 watch.ts 4.4 KB
  - 📁 bot/
    
    📄 bot.ts 1.8 KB
    
    📄 formatter.ts 4.0 KB
    
    📄 handlers.ts 7.2 KB
    
    📄 middleware.ts 1.1 KB
    
    📄 offset.ts 1.4 KB
  - 📄 auth.ts 3.4 KB
  - 📄 backup-commands.ts 2.8 KB
  - 📄 backup.ts 9.8 KB
  - 📄 backupSchedule.ts 7.2 KB
  - 📄 changelog.ts 2.8 KB
  - 📄 completions.ts 28.0 KB
  - 📄 deploy.ts 17.7 KB
  - 📄 doctor-fix.ts 3.2 KB
  - 📄 doctor-local.ts 4.8 KB
  - 📄 doctor.ts 13.5 KB
  - 📄 domain.ts 8.7 KB
  - 📄 evidence.ts 7.5 KB
  - 📄 evidenceCommands.ts 4.9 KB
  - 📄 firewall.ts 9.2 KB
  - 📄 fleet.ts 4.8 KB
  - 📄 guard.ts 14.6 KB
  - 📄 health.ts 1.8 KB
  - 📄 lock.ts 25.6 KB
  - 📄 logs.ts 5.3 KB
  - 📄 maintain.ts 8.6 KB
  - 📄 manage.ts 10.5 KB
  - 📄 notify.ts 10.2 KB
  - 📄 notifyStore.ts 10.4 KB
  - 📄 provision.ts 8.1 KB
  - 📄 scheduleManager.ts 6.4 KB
  - 📄 secure.ts 12.2 KB
  - 📄 snapshot.ts 3.3 KB
  - 📄 status.ts 3.3 KB
  - 📄 tokenBuffer.ts 864 B
  - 📄 tokens.ts 1.5 KB
  - 📄 update.ts 1.7 KB
- 📁 mcp/
  - 📁 tools/
    
    📄 serverAudit.ts 5.8 KB
    
    📄 serverBackup.handlers.ts 10.9 KB
    
    📄 serverBackup.ts 3.1 KB
    
    📄 serverDoctor.ts 4.7 KB
    
    📄 serverEvidence.ts 2.7 KB
    
    📄 serverFix.ts 19.7 KB
    
    📄 serverFleet.ts 1.0 KB
    
    📄 serverGuard.ts 3.1 KB
    
    📄 serverInfo.ts 14.5 KB
    
    📄 serverLock.ts 3.9 KB
    
    📄 serverLogs.ts 6.4 KB
    
    📄 serverMaintain.ts 8.8 KB
    
    📄 serverManage.ts 9.2 KB
    
    📄 serverProvision.ts 5.4 KB
    
    📄 serverSecure.handlers.ts 11.8 KB
    
    📄 serverSecure.ts 4.8 KB
  - 📄 index.ts 1.8 KB
  - 📄 server.ts 14.0 KB
  - 📄 utils.ts 4.6 KB
- 📁 providers/
  - 📄 base.ts 7.4 KB
  - 📄 digitalocean.ts 10.8 KB
  - 📄 hetzner.ts 11.7 KB
  - 📄 linode.ts 12.1 KB
  - 📄 vultr.ts 10.8 KB
- 📁 types/
  - 📄 index.ts 4.1 KB
- 📁 utils/
  - 📄 backupPath.ts 731 B
  - 📄 cloudInit.ts 1.8 KB
  - 📄 config.ts 3.7 KB
  - 📄 configMerge.ts 1.9 KB
  - 📄 defaults.ts 1.6 KB
  - 📄 encryption.ts 4.4 KB
  - 📄 errorMapper.ts 6.6 KB
  - 📄 fileLock.ts 1.6 KB
  - 📄 fixReport.ts 5.3 KB
  - 📄 healthCheck.ts 1.3 KB
  - 📄 keyring.ts 1.6 KB
  - 📄 logger.ts 1.2 KB
  - 📄 migration.ts 1.5 KB
  - 📄 modeGuard.ts 930 B
  - 📄 openBrowser.ts 1.7 KB
  - 📄 paths.ts 273 B
  - 📄 prompts.ts 5.2 KB
  - 📄 providerFactory.ts 1.2 KB
  - 📄 retry.ts 1.6 KB
  - 📄 safeMode.ts 1.4 KB
  - 📄 scp.ts 3.6 KB
  - 📄 serverSelect.ts 2.6 KB
  - 📄 SOCKET_JUSTIFICATION.md 3.7 KB
  - 📄 ssh.ts 15.8 KB
  - 📄 sshCommand.ts 2.7 KB
  - 📄 sshKey.ts 1.5 KB
  - 📄 templates.ts 1.8 KB
  - 📄 updateCheck.ts 3.4 KB
  - 📄 yamlConfig.ts 7.4 KB
- 📄 constants.ts 5.6 KB
- 📄 index.ts 18.0 KB
📁 tests/
- 📁 __mocks__/
  - 📁 @napi-rs/
    
    📄 keyring.ts 1.4 KB
  - 📄 axios.ts 593 B
  - 📄 chalk.ts 460 B
  - 📄 inquirer.ts 212 B
  - 📄 ora.ts 427 B
  - 📄 p-limit.cjs 279 B
- 📁 e2e/
  - 📄 chain.test.ts 12.1 KB
  - 📄 destroy.test.ts 5.7 KB
  - 📄 init-config.test.ts 13.5 KB
  - 📄 init-noninteractive.test.ts 17.0 KB
  - 📄 init.test.ts 22.1 KB
  - 📄 security-config.test.ts 13.8 KB
  - 📄 security-domain.test.ts 14.3 KB
  - 📄 security-init.test.ts 10.6 KB
  - 📄 security-ssh.test.ts 11.2 KB
  - 📄 security-transfer.test.ts 10.6 KB
  - 📄 status.test.ts 5.1 KB
- 📁 helpers/
  - 📄 encryption-factories.ts 1.5 KB
  - 📄 mcp-factories.ts 1.5 KB
  - 📄 mockAdapter.ts 1.5 KB
  - 📄 provider-factories.ts 2.1 KB
  - 📄 server-factories.ts 1004 B
  - 📄 ssh-factories.ts 2.1 KB
  - 📄 stripAnsi.ts 143 B
- 📁 integration/
  - 📄 digitalocean.test.ts 27.8 KB
  - 📄 hetzner.test.ts 31.3 KB
  - 📄 linode.test.ts 35.3 KB
  - 📄 mcp-core.test.ts 16.8 KB
  - 📄 vultr.test.ts 31.6 KB
- 📁 unit/
  - 📁 __snapshots__/
    
    📄 audit-report-structure.test.ts.snap 2.1 KB
    
    📄 cli-help-snapshots.test.ts.snap 8.7 KB
    
    📄 formatter-snapshots.test.ts.snap 2.9 KB
  - 📁 commands/
    
    📄 schedule.test.ts 9.9 KB
  - 📁 core/
    
    📄 scheduleManager.test.ts 19.6 KB
  - 📄 adapter-contract.test.ts 12.8 KB
  - 📄 adapter-factory.test.ts 6.2 KB
  - 📄 adapter-interface.test.ts 3.1 KB
  - 📄 add-bare.test.ts 3.4 KB
  - 📄 add.test.ts 10.8 KB
  - 📄 audit-check-count.test.ts 1.6 KB
  - 📄 audit-check-enforcement.test.ts 1.8 KB
  - 📄 audit-check-id-uniqueness.test.ts 1.1 KB
  - 📄 audit-check-severity-budget.test.ts 1.6 KB
  - 📄 audit-checks-accounts.test.ts 49.4 KB
  - 📄 audit-checks-auth.test.ts 54.4 KB
  - 📄 audit-checks-backup.test.ts 9.1 KB
  - 📄 audit-checks-banners.test.ts 12.8 KB
  - 📄 audit-checks-boot.test.ts 21.0 KB
  - 📄 audit-checks-cloudmeta.test.ts 5.2 KB
  - 📄 audit-checks-crypto.test.ts 44.5 KB
  - 📄 audit-checks-ddos.test.ts 15.9 KB
  - 📄 audit-checks-dns.test.ts 13.5 KB
  - 📄 audit-checks-docker.test.ts 139.7 KB
  - 📄 audit-checks-fileintegrity.test.ts 8.6 KB
  - 📄 audit-checks-filesystem.test.ts 30.6 KB
  - 📄 audit-checks-firewall.test.ts 23.7 KB
  - 📄 audit-checks-httpHeaders.test.ts 14.1 KB
  - 📄 audit-checks-incidentready.test.ts 33.5 KB
  - 📄 audit-checks-kernel.test.ts 46.6 KB
  - 📄 audit-checks-logging.test.ts 41.3 KB
  - 📄 audit-checks-mac.test.ts 18.2 KB
  - 📄 audit-checks-malware.test.ts 32.6 KB
  - 📄 audit-checks-memory.test.ts 17.2 KB
  - 📄 audit-checks-network.test.ts 77.2 KB
  - 📄 audit-checks-nginx.test.ts 26.7 KB
  - 📄 audit-checks-registry.test.ts 8.5 KB
  - 📄 audit-checks-resourcelimits.test.ts 13.6 KB
  - 📄 audit-checks-scheduling.test.ts 33.8 KB
  - 📄 audit-checks-secrets.test.ts 21.0 KB
  - 📄 audit-checks-services.test.ts 56.7 KB
  - 📄 audit-checks-ssh.test.ts 27.7 KB
  - 📄 audit-checks-supplychain.test.ts 31.5 KB
  - 📄 audit-checks-time.test.ts 10.4 KB
  - 📄 audit-checks-tls.test.ts 19.2 KB
  - 📄 audit-checks-updates.test.ts 24.7 KB
  - 📄 audit-command-diff.test.ts 15.6 KB
  - 📄 audit-command-snapshot.test.ts 6.0 KB
  - 📄 audit-command.test.ts 34.1 KB
  - 📄 audit-commands.test.ts 129.2 KB
  - 📄 audit-compliance-detail.test.ts 11.5 KB
  - 📄 audit-compliance-mapper.test.ts 17.4 KB
  - 📄 audit-compliance-scoring.test.ts 13.9 KB
  - 📄 audit-diff.test.ts 14.0 KB
  - 📄 audit-filter.test.ts 6.5 KB
  - 📄 audit-fix-score-delta.test.ts 5.3 KB
  - 📄 audit-fix.test.ts 70.8 KB
  - 📄 audit-formatter-badge.test.ts 1.9 KB
  - 📄 audit-formatter-index.test.ts 3.0 KB
  - 📄 audit-formatter-json.test.ts 1.7 KB
  - 📄 audit-formatter-report.test.ts 4.2 KB
  - 📄 audit-formatter-summary.test.ts 5.1 KB
  - 📄 audit-formatter-terminal.test.ts 16.2 KB
  - 📄 audit-history.test.ts 8.6 KB
  - 📄 audit-index.test.ts 9.9 KB
  - 📄 audit-list-checks.test.ts 3.5 KB
  - 📄 audit-quickwin.test.ts 8.5 KB
  - 📄 audit-report-structure.test.ts 712 B
  - 📄 audit-scoring.test.ts 5.7 KB
  - 📄 audit-skip-categories.test.ts 8.0 KB
  - 📄 audit-snapshot.test.ts 14.2 KB
  - 📄 audit-trend.test.ts 13.2 KB
  - 📄 audit-types.test.ts 5.5 KB
  - 📄 audit-vps-detection.test.ts 4.4 KB
  - 📄 audit-watch.test.ts 14.6 KB
  - 📄 auth-command.test.ts 5.3 KB
  - 📄 backup-bare.test.ts 6.2 KB
  - 📄 backup-commands.test.ts 3.5 KB
  - 📄 backup-schedule.test.ts 16.7 KB
  - 📄 backup.test.ts 24.4 KB
  - 📄 backupScheduleCmd.test.ts 9.2 KB
  - 📄 base.test.ts 9.2 KB
  - 📄 bot-formatter.test.ts 6.6 KB
  - 📄 bot-handlers.test.ts 7.5 KB
  - 📄 bot-middleware.test.ts 1.8 KB
  - 📄 bot-offset.test.ts 2.6 KB
  - 📄 changelog.test.ts 3.5 KB
  - 📄 cli-help-snapshots.test.ts 2.0 KB
  - 📄 cloudInit.test.ts 2.1 KB
  - 📄 completions.test.ts 10.0 KB
  - 📄 config-command.test.ts 5.9 KB
  - 📄 config-edge.test.ts 4.6 KB
  - 📄 config.test.ts 11.1 KB
  - 📄 configMerge.test.ts 6.9 KB
  - 📄 coolify-adapter.test.ts 10.6 KB
  - 📄 core-auth-fallback.test.ts 7.6 KB
  - 📄 core-auth.test.ts 2.8 KB
  - 📄 core-backup-cmd.test.ts 6.1 KB
  - 📄 core-backup.test.ts 23.2 KB
  - 📄 core-contract.test.ts 7.3 KB
  - 📄 core-deploy.test.ts 38.3 KB
  - 📄 core-status-restart.test.ts 5.4 KB
  - 📄 core-status.test.ts 9.6 KB
  - 📄 core-tokens.test.ts 6.4 KB
  - 📄 core-update.test.ts 6.8 KB
  - 📄 defaults.test.ts 4.3 KB
  - 📄 dep-isolation.test.ts 4.5 KB
  - 📄 deploy.test.ts 19.9 KB
  - 📄 destroy.test.ts 15.0 KB
  - 📄 doctor-fix-debian.test.ts 4.9 KB
  - 📄 doctor-fix.test.ts 9.5 KB
  - 📄 doctor-server.test.ts 27.8 KB
  - 📄 doctor.test.ts 28.4 KB
  - 📄 dokploy-adapter.test.ts 16.6 KB
  - 📄 domain.test.ts 23.6 KB
  - 📄 encryption.test.ts 11.0 KB
  - 📄 errorMapper.test.ts 13.8 KB
  - 📄 evidence-command.test.ts 12.2 KB
  - 📄 evidence-core.test.ts 19.9 KB
  - 📄 fileLock.test.ts 6.9 KB
  - 📄 firewall.test.ts 28.6 KB
  - 📄 fix-handlers.test.ts 43.9 KB
  - 📄 fix-history.test.ts 12.8 KB
  - 📄 fix-prioritization.test.ts 9.7 KB
  - 📄 fix-profiles.test.ts 11.2 KB
  - 📄 fix-report.test.ts 5.4 KB
  - 📄 fix-rollback.test.ts 22.7 KB
  - 📄 fix-safe-command.test.ts 53.1 KB
  - 📄 fix-safe-tier.test.ts 9.0 KB
  - 📄 fleet.test.ts 9.3 KB
  - 📄 formatter-snapshots.test.ts 2.5 KB
  - 📄 guard-command.test.ts 12.4 KB
  - 📄 guard.test.ts 58.9 KB
  - 📄 health-command.test.ts 7.9 KB
  - 📄 health-core.test.ts 4.4 KB
  - 📄 health.test.ts 7.0 KB
  - 📄 healthCheck-edge.test.ts 2.9 KB
  - 📄 healthCheck.test.ts 1.8 KB
  - 📄 init-bare.test.ts 11.1 KB
  - 📄 init-fullsetup.test.ts 6.0 KB
  - 📄 interactive.test.ts 37.3 KB
  - 📄 list.test.ts 4.4 KB
  - 📄 lock-command.test.ts 9.4 KB
  - 📄 lock.test.ts 95.7 KB
  - 📄 logger.test.ts 2.3 KB
  - 📄 logs.test.ts 10.9 KB
  - 📄 maintain.test.ts 29.6 KB
  - 📄 manage-bare.test.ts 6.7 KB
  - 📄 manage-safemode.test.ts 3.6 KB
  - 📄 mcp-concurrent.test.ts 8.0 KB
  - 📄 mcp-contract.test.ts 10.1 KB
  - 📄 mcp-server-audit.test.ts 9.4 KB
  - 📄 mcp-server-backup-handlers.test.ts 20.5 KB
  - 📄 mcp-server-backup.test.ts 50.1 KB
  - 📄 mcp-server-doctor.test.ts 12.0 KB
  - 📄 mcp-server-evidence.test.ts 9.2 KB
  - 📄 mcp-server-fix.test.ts 40.4 KB
  - 📄 mcp-server-fleet.test.ts 5.8 KB
  - 📄 mcp-server-guard.test.ts 10.2 KB
  - 📄 mcp-server-info.test.ts 22.9 KB
  - 📄 mcp-server-lock.test.ts 13.0 KB
  - 📄 mcp-server-logs.test.ts 22.6 KB
  - 📄 mcp-server-maintain.test.ts 26.7 KB
  - 📄 mcp-server-manage.test.ts 31.2 KB
  - 📄 mcp-server-provision.test.ts 27.6 KB
  - 📄 mcp-server-secure-handlers.test.ts 19.3 KB
  - 📄 mcp-server-secure.test.ts 42.4 KB
  - 📄 mcp-utils.test.ts 6.5 KB
  - 📄 migration.test.ts 3.6 KB
  - 📄 modeGuard.test.ts 3.4 KB
  - 📄 monitor.test.ts 9.3 KB
  - 📄 notify-command.test.ts 8.6 KB
  - 📄 notify-keychain.test.ts 9.2 KB
  - 📄 notify.test.ts 16.4 KB
  - 📄 notifyStore.test.ts 26.7 KB
  - 📄 openBrowser.test.ts 6.6 KB
  - 📄 paths.test.ts 274 B
  - 📄 prompts.test.ts 16.1 KB
  - 📄 provider-contract.test.ts 9.5 KB
  - 📄 providerFactory.test.ts 2.3 KB
  - 📄 providers-find-by-ip.test.ts 7.2 KB
  - 📄 provision-bare.test.ts 12.6 KB
  - 📄 remove.test.ts 4.5 KB
  - 📄 restart.test.ts 9.6 KB
  - 📄 restore-bare.test.ts 9.4 KB
  - 📄 restore-force.test.ts 5.7 KB
  - 📄 restore-safemode.test.ts 4.6 KB
  - 📄 restore.test.ts 24.8 KB
  - 📄 retry-integration.test.ts 4.8 KB
  - 📄 retry.test.ts 7.1 KB
  - 📄 secure.test.ts 31.4 KB
  - 📄 server-audit-mcp-framework.test.ts 7.2 KB
  - 📄 serverSelect.test.ts 9.5 KB
  - 📄 severity-chalk.test.ts 568 B
  - 📄 snapshot.test.ts 16.7 KB
  - 📄 ssh-command.test.ts 4.4 KB
  - 📄 ssh-utils.test.ts 29.4 KB
  - 📄 sshCommand.test.ts 10.8 KB
  - 📄 sshKey.test.ts 5.0 KB
  - 📄 status.test.ts 17.8 KB
  - 📄 templates.test.ts 6.3 KB
  - 📄 tokenBuffer.test.ts 2.1 KB
  - 📄 transfer.test.ts 9.6 KB
  - 📄 update.test.ts 20.3 KB
  - 📄 updateCheck.test.ts 7.8 KB
  - 📄 validators.test.ts 2.1 KB
  - 📄 yamlConfig.test.ts 21.5 KB
📄 .gitignore 2.5 KB
📄 .npmignore 320 B
📄 .prettierrc 83 B
📄 CHANGELOG.md 68.8 KB
📄 codecov.yml 349 B
📄 CONTRIBUTING.md 9.0 KB
📄 eslint.config.js 446 B
📄 glama.json 96 B
📄 jest.config.cjs 1.3 KB
📄 jest.stryker.cjs 937 B
📄 LICENSE 11.0 KB
📄 llms.txt 2.4 KB
📄 NOTICE 119 B
📄 package-lock.json 358.9 KB
📄 package.json 2.7 KB
📄 README.md 19.2 KB
📄 README.tr.md 20.4 KB
📄 security-audit-report.md 11.5 KB
📄 SECURITY.md 12.1 KB
📄 server.json 1.5 KB
📄 SKILL.md 2.0 KB
📄 stryker.config.mjs 977 B
📄 tsconfig.json 450 B
📄 tsconfig.test.json 219 B

SKILL.md

---
name: kastell
description: "Server security auditing, hardening, and fleet management. 457 security checks across 30 categories (SSH, Firewall, Docker, TLS, HTTP Headers), CIS/PCI-DSS/HIPAA compliance mapping, 24-step production hardening, and 13 MCP tools. Supports Hetzner, DigitalOcean, Vultr, and Linode with Coolify, Dokploy, and bare VPS modes. Install: claude plugins add kastell"
---

# Kastell — Server Security Toolkit

CLI toolkit and Claude Code plugin for provisioning, securing, and managing self-hosted servers.

## Install

```bash
claude plugins add kastell
```

## Features

- **Security Audit**: 457 checks across 30 categories with CIS/PCI-DSS/HIPAA compliance mapping
- **Production Hardening**: 24-step server lock (SSH, fail2ban, UFW, sysctl, auditd, AIDE, Docker)
- **Fleet Management**: Monitor multiple servers from a single dashboard
- **4 Cloud Providers**: Hetzner, DigitalOcean, Vultr, Linode
- **3 Platform Modes**: Coolify, Dokploy, bare VPS
- **Forensic Evidence**: Collection with SHA256 checksums
- **Health Analysis**: Proactive disk trending, swap detection, stale package alerts

## MCP Tools (13)

| Tool | Purpose |
|------|---------|
| `server_audit` | 457-check security scan |
| `server_lock` | 24-step production hardening |
| `server_secure` | SSH, firewall, domain/SSL management |
| `server_doctor` | Proactive health analysis |
| `server_fleet` | Fleet-wide security dashboard |
| `server_info` | Server status and health checks |
| `server_logs` | Log retrieval and system metrics |
| `server_guard` | Autonomous security monitoring |
| `server_evidence` | Forensic evidence collection |
| `server_backup` | Backup/restore and cloud snapshots |
| `server_provision` | New server provisioning |
| `server_manage` | Server registration and lifecycle |
| `server_maintain` | Updates, restarts, maintenance |

## Links

- Website: [kastell.dev](https://kastell.dev)
- npm: [kastell](https://www.npmjs.com/package/kastell)
- GitHub: [kastelldev/kastell](https://github.com/kastelldev/kastell)

Comments 0

Latest | Hot

Please login before commenting.

Loading comments...

kastell

Directory Structure

SKILL.md

Report

Notice