emisar
A platform that lets MCP-capable AI agents run declared infrastructure actions on a host through policy checks and an outbound-only runner, with approvals and an audit trail.
emisar gives MCP-capable agents a catalog of declared infrastructure actions instead of shell access. A policy engine decides what runs automatically, what needs human approval, and what is denied, and a small outbound-only runner re-checks each action on the host before executing it.
Setup starts with one host: an emisar account, a Linux host with systemd and sudo, and an installer that verifies the release signature or checksum before creating the service and installing host-matched starter packs. Once a runner is online, users dispatch actions such as a simple uptime check and see them recorded in an audit trail. AI clients connect over MCP, using OAuth for remote clients or a local stdio bridge with browser-based approval.
Public pack catalogs suggest actions matching a host, and operators can add custom actions without running a separate MCP server per client.