gjenkins20/webmin-mcp-server

An MCP (Model Context Protocol) server that provides Claude with tools to manage Linux systems via Webmin's administration interface.
Features
- **Multi-Server Support** -- Manage multiple Webmin servers with user-friendly aliases
- **System Monitoring** -- System info, memory, disk, network, and process status
- **Service Management** -- Start, stop, restart, enable, and disable services
- **User & Group Administration** -- Create, modify, and delete system users and groups
- **Scheduled Tasks** -- View, create, edit, and delete cron jobs
- **Package Management** -- Package info and available updates
- **File Operations** -- Read, write, copy, rename, and delete remote files
- **Storage** -- SMART disk health monitoring and LVM volume management
- **Security** -- Fail2ban jail status and banned IP management
- **Database** -- MySQL databases, users, and server status
- **Webmin ACL** -- Manage Webmin user accounts and module permissions
- **Disk Quotas** -- Monitor and set disk quota limits for users and groups
- **Audit & Backup** -- Webmin action logs, SSH config, and configuration backups
- **Safety Framework** -- Tiered safety system with safe mode to prevent dangerous operations
Quick Start
1. **Install** (choose one):
**From source:**
**With Docker:**
2. **Configure** -- Create a webmin-servers.json (see Configuration):
3. **Add to Claude Desktop** (claude_desktop_config.json):
**From source:**
**With Docker:**
Requirements
- Python 3.11+
- A running Webmin instance (typically on port 10000)
- Webmin credentials with appropriate permissions
Webmin Server Setup
The MCP server uses Webmin's XML-RPC API. Ensure your Webmin server is configured:
1. **Provision the service account**:
- **Webmin 2.650+ (recommended)**: Create a dedicated **RPC/API-only** account in Webmin -> Webmin Users. This account type exists specifically for automation like this MCP server -- it blocks browser/module access entirely and is unaffected by the two-factor caveat below.
- **Older Webmin versions**: In Webmin -> Webmin Users -> (your user) -> enable "Can accept RPC calls".
- **Two-factor authentication caveat**: Webmin 2.640+ rejects RPC Basic-Auth requests for accounts that have 2FA enabled -- the RPC call fails with a generic 401/403. If you enable 2FA on your Webmin users, use a dedicated RPC/API-only account for this MCP server rather than a 2FA-enrolled one.
2. **Install XML::Parser**: The Perl XML::Parser module must be installed:
3. **Module Access**: Grant the user access to required modules (System Status, Bootup and Shutdown, Users and Groups, Scheduled Cron Jobs, Network Configuration)
4. **RPC timeout (optional)**: For tools that read/write large files, Webmin 2.620+ has a config option to raise the default RPC timeout (Webmin Configuration -> Advanced Options). Increase it if you see timeouts on large file operations.
Configuration
Multi-Server Configuration (Recommended)
Create a webmin-servers.json file to manage multiple Webmin servers. See webmin-servers.example.json for a complete example.
**Configuration sources (priority order):**
1. WEBMIN_CONFIG_FILE env var -- path to JSON config file
2. WEBMIN_SERVERS_JSON env var -- inline JSON string
3. ./webmin-servers.json -- local file in current directory
4. ~/.config/webmin-mcp/servers.json -- user config directory
5. Legacy WEBMIN_* env vars -- single server (creates "default" alias)