mirror of
https://github.com/b3nw/nginx-proxy-manager-mcp.git
synced 2026-05-19 23:35:47 -05:00
32f57b1a9e4603df7ce529212c4f3d22aa7ec9ee
Fork PRs don't have write access to GHCR. Use conditional push that only pushes on non-PR events (push to main, tags).
NPM MCP Server
MCP server for Nginx Proxy Manager - manage your reverse proxy through AI assistants.
Quick Start (Docker)
The easiest way to run the NPM MCP server - no cloning required!
# Download the compose file
curl -O https://raw.githubusercontent.com/b3nw/nginx-proxy-manager-mcp/main/compose.yaml
# Edit the environment variables, then start
docker compose up -d
Or run directly:
docker run -d \
--name npm-mcp \
-p 8000:8000 \
-e NPM_API_URL=http://your-npm:81/api \
-e NPM_IDENTITY=admin@example.com \
-e NPM_SECRET=yourpassword \
-e NPM_MCP_TRANSPORT=http \
ghcr.io/b3nw/nginx-proxy-manager-mcp:latest
Installation (Local)
# Using uv (recommended)
uv pip install -e .
# Or with pip
pip install -e .
Configuration
Copy env.example to .env and configure:
NPM_API_URL=http://your-npm-instance:81/api
NPM_IDENTITY=admin@example.com
NPM_SECRET=yourpassword
# Optional: Server settings
NPM_MCP_PORT=8000
NPM_MCP_TRANSPORT=stdio # or "http"
# Optional: Default values for create_proxy_host (JSON)
NPM_PROXY_DEFAULTS='{"certificate_id": 24, "ssl_forced": true}'
Environment Variables
| Variable | Required | Default | Description |
|---|---|---|---|
NPM_API_URL |
Yes | http://localhost:81/api |
NPM API endpoint |
NPM_IDENTITY |
Yes | - | NPM user email |
NPM_SECRET |
Yes | - | NPM user password |
NPM_MCP_HOST |
No | 0.0.0.0 |
MCP server bind address |
NPM_MCP_PORT |
No | 8000 |
MCP server port |
NPM_MCP_TRANSPORT |
No | stdio |
Transport mode (stdio or http) |
NPM_PROXY_DEFAULTS |
No | {} |
JSON defaults for create_proxy_host |
NPM_PROXY_DEFAULTS Keys
Configure default values for proxy host creation:
NPM_PROXY_DEFAULTS='{"certificate_id": 24, "ssl_forced": true, "block_exploits": true}'
| Key | Type | Default | Description |
|---|---|---|---|
forward_scheme |
string | "http" |
Backend protocol (http or https) |
certificate_id |
int | 0 |
SSL certificate ID (use list_certificates to find) |
ssl_forced |
bool | true |
Force HTTPS redirect |
block_exploits |
bool | true |
Enable common exploit blocking |
allow_websocket_upgrade |
bool | true |
Allow WebSocket connections |
access_list_id |
int | 0 |
Access list ID (use list_access_lists to find) |
advanced_config |
string | "" |
Custom nginx configuration block |
Usage
Stdio Mode (for Claude Desktop, etc.)
npm-mcp
# or
python -m npm_mcp.main --transport stdio
HTTP Mode (for remote agents)
npm-mcp --transport http
# Starts server on http://0.0.0.0:8000
Claude Desktop Configuration
Add to your claude_desktop_config.json:
{
"mcpServers": {
"npm": {
"command": "npm-mcp",
"env": {
"NPM_API_URL": "http://localhost:81/api",
"NPM_IDENTITY": "admin@example.com",
"NPM_SECRET": "yourpassword"
}
}
}
}
Available Tools
| Tool | Description |
|---|---|
list_proxy_hosts |
List all proxy hosts |
get_proxy_host_details |
Get full config for a specific host |
get_system_health |
Check NPM version and status |
search_audit_logs |
Query audit log entries |
list_certificates |
List SSL certificates |
list_access_lists |
List access lists for authentication/IP restrictions |
create_proxy_host |
Create a new proxy host |
Development
# Install with dev dependencies
uv pip install -e ".[dev]"
# Run tests
pytest
# Lint
ruff check src/
License
MIT
Description
Languages
Python
98%
Dockerfile
2%