What is kastell?
kastell is a MCP server by kastelldev that server security auditing and hardening (SSH, firewall, Docker, TLS) with CIS/PCI-DSS/HIPAA mapping, fleet management and forensic evidence collection. It is listed under Security and has 60 GitHub stars.
| Type | Mcp server |
|---|---|
| Author | kastelldev |
| Repository | kastelldev/kastell |
| Popularity | 60 GitHub stars |
| Category | Security |
| Security | Review before installing (72/100) |
| Rank | #798 of 4,418 MCP servers; #33 in Security |
| License | Apache-2.0 |
| Last commit | 2026-10-06 |
| Runs | Locally and in the cloud |
| Language | TypeScript |
| Platforms | macOS, Windows, Linux |
Is kastell safe to install?
kastell scores 72/100 on the MCPMods security check: Review before installing. Things to review: sends your data to a cloud service; can take actions such as send, write or deploy. It passed 3 of 6 checks.
MCP server results come from listing signals: who publishes it, where your data goes and what it can do. The code itself is not scanned yet.
| Check | Result |
|---|---|
| Community-built server | Note |
| Sends your data to a cloud service | Review |
| No credentials mentioned | Pass |
| Can take actions such as send, write or deploy | Review |
| No code execution | Pass |
| Source on GitHub | Pass |
How do I install kastell?
- Find the launch command. The README says how the server starts (npx, uvx, docker or a remote URL) and which API keys it needs.
https://github.com/kastelldev/kastell
- Add it to Claude Code. Replace the part after -- with the command from the README. Remote servers use --transport http with a URL.
claude mcp add kastell -- <command from README> claude mcp add --transport http kastell <server-url>
- Check it connected. This lists your MCP servers and their status.
claude mcp list
Or ask Claude to set it up
Paste this into Claude Code and it installs kastell for you:
Add the "kastell" MCP server from https://github.com/kastelldev/kastell to Claude Code. Read its README for the launch command and any API keys I need, run claude mcp add, then check that it connects.