mcp-nixos
MCP-NixOS - Model Context Protocol Server for NixOS resources
No outside reports on file
Only use this if you trust your NixOS system doesn't contain secrets in configs, you review all Claude-generated code before running it, and you understand Claude may have broad visibility into your system setup.
Based on public adoption and transparency signals as of Oct 24, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionNo shell command runner notedLOW
- Network reachConnects to outside service APINOTED
- CredentialsNo API token requiredLOW
- Package sourceGitHub (utensils/mcp-nixos)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
No npm or PyPI package is listed. Install from source: github.com/utensils/mcp-nixos ↗
Everything known
We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.
0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30
Popularity grade: C (from public signals such as stars and downloads, not a code review). Graded 2026-10-24.
Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.
About MCP Nixos
This is a Model Context Protocol (MCP) server that connects Claude to NixOS systems. It lets Claude read and work with NixOS configuration files, packages, and system information by exposing NixOS resources as tools the AI can call.
Who it’s for
Developers and system administrators using NixOS who want Claude to help manage, understand, or modify their NixOS configurations and environments.
Alternatives
- mcp-shell: Direct shell command access (higher risk, more flexible)
- mcp-filesystem: Generic file read/write for any OS (requires manual path selection)
- mcp-git: Git repository integration if your configs are version-controlled
- Manual API: Direct NixOS API queries without AI intermediary (lower risk, more manual work)
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README at https://github.com/utensils/mcp-nixos (opens external site) for installation and configuration steps specific to your setup.
Why this grade
Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 868
- Listing last refreshed
- 2026-10-30
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Risks to watch for
- Full system access: Claude gains read access to your NixOS configuration, which may contain secrets, private paths, or sensitive system settings
- Misinterpreted instructions: Malicious prompts or web content could trick Claude into suggesting dangerous configuration changes to your system
- Data exposure: System information, package lists, and configuration details that Claude sees could be logged or leaked if Claude's responses are shared
- Unvetted code execution: Claude might generate Nix code that looks correct but contains hidden logic—always review before running
- Supply chain: The project has moderate GitHub stars; verify updates come from the legitimate repository before upgrading
How to lower the risk
Least-privilege permissions
- Run the MCP server under a dedicated user account with minimal rights
- Restrict which NixOS paths or configuration sections Claude can read
Network isolation
- Keep this MCP server local to your machine when possible
- Do not expose it to untrusted networks
Monitoring
- Log which files and configurations Claude accesses
- Review Claude's suggestions before applying them to your system
Red flags to watch for
- Claude suggesting changes to security-critical files without clear explanation
- Requests from others to share your system state with Claude
- Unusual or sudden configuration changes proposed by Claude
Questions
How do I install MCP Nixos?
MCP Nixos does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/utensils/mcp-nixos.
Are there security reports about MCP Nixos?
No reports found for this package in our research (last checked 2026-10-30). MCP Nixos currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include full system access, misinterpreted instructions, data exposure.
Is MCP Nixos actively maintained?
MCP Nixos has 868 GitHub stars. Our directory data was last refreshed on 2026-10-30. Check recent commit activity, release tags, and open issues at github.com/utensils/mcp-nixos before pinning it in production.
What are alternatives to MCP Nixos?
Notable alternatives to MCP Nixos include mcp-shell (Direct shell command access (higher risk, more flexible)), mcp-filesystem (Generic file read/write for any OS (requires manual path selection)), mcp-git (Git repository integration if your configs are version-controlled), Manual API (Direct NixOS API queries without AI intermediary (lower risk, more manual work)). You can also compare MCP Nixos side by side with other MCP servers in the Related tools section on this page.
README badge and team notes
Maintain or use MCP Nixos? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/utensils-mcp-nixos)HTML embed:
<a href="https://agentarmorhq.com/skills/utensils-mcp-nixos"><img src="https://agentarmorhq.com/api/badge/utensils-mcp-nixos" alt="AgentArmorHQ Risk Grade for MCP Nixos" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "utensils-mcp-nixos"Share with your security lead
Need sign-off to use mcp-nixos? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: mcp-nixos
- **Listing URL:** https://agentarmorhq.com/skills/utensils-mcp-nixos
- **Type:** App connector
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 868 GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** No API token required
- **Package source:** GitHub (utensils/mcp-nixos)
#### Recommended Hardened Setup
- **Source Repo:** https://github.com/utensils/mcp-nixos
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 24, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Publisher
- utensils
- Source code
- github.com/utensils/mcp-nixos
- Est. context load
- ~700 tokens / turn (~4 tool schemas, 0.35% of 200k context)
- Popularity
- 868 GitHub stars
- Last updated
- 2026-10-30
- Last graded
- 2026-10-24
Community
Discussions for MCP Nixos
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude