Sovereign Machine Infrastructure • MCP Gateway

Your AI. Your machines. One conversation.

Talk to your AI in everyday language to query disks, manage services, and run diagnostics across Windows, macOS, and Linux. Connect outbound over TLS with no inbound ports or public IP required, and review operations through tamper-evident audit records.

Launch Web Console → Why It's Different ↓

Install now

Single Command

Run in your terminal. Outbound TLS connects your machine in seconds with zero configuration.

npx node-command

Windows 10/11 & Server macOS 12+ (Apple Silicon & Intel) Linux (Ubuntu, Debian, RHEL)

Node Command Live Execution Mesh

Live Simulation

Routing through Governed MCP Gateway...

1 Ask 2 Gateway checks policyGateway 3 Verified on each machineVerified

win-box-pro

Pending

Get-PSDrive C

C:\ 142 GB used / 358 GB free

mac-studio-m3

Pending

df -h /Data

Data: 312Gi used / 682Gi free

prod-linux-01

Pending

df -h /

/dev/nvme0n1: 44G used / 152G free

3/3 machines healthy • Response time: 184ms

Signed Ed25519 hash chain • Zero inbound ports

Why Node Command Is Different

Real operations across your entire fleet. Protected at every step.

One Chat, Your Entire Fleet

Control Windows, macOS, and Linux machines together in a single conversation. Inspect disks on Linux, run builds on your Mac, and manage Windows services without switching tools or jumping between terminals.

Team Sharing Without Shared Keys

Share machines with your team using granular Viewer, Operator, and Admin roles. Nobody touches your root passwords or private SSH keys, and you can revoke access instantly in one click.

Tamper-Evident Audit Trail

Every command, file access, and script execution creates an immutable SHA-256 chained receipt. You and your team get tamper-evident retained audit records with export of who did what, when, and on which machine.

Works Behind Any Router or NAT

Your machines dial outbound over encrypted TLS. They connect instantly from home Wi-Fi, office networks, or cloud VPCs with zero open inbound ports, no port forwarding, and no messy VPNs.

Enterprise Machine Mesh

One prompt orchestrates your entire computer fleet.

From personal workstations and creative studios to cloud servers and staging clusters. Manage everything together without sharing root passwords or SSH keys.

Cryptographic Proof

Every action is verified and accountable.

Whether an assistant organizes a directory or restarts a service, the agent records an Ed25519-signed receipt. Verify history with mathematical certainty.

h_prev sha256:7f9a2b8e...

h_curr sha256:c410d52a...

Hard Safety Limits

Your computer, your rules. AI cannot overstep.

Enforce machine-side policy ceilings: command allowlists, directory sandbox boundaries, and disabled root privilege escalation.

systemctl is-active Allowed

rm -rf /var/log/* Blocked by Policy

Converged Sovereign Architecture

How AI models and human teams converge through one governed gateway.

Sessions from ChatGPT, Claude, Grok, Muse, and Gemini, alongside team members with granular RBAC roles (Viewer, Operator, Admin), enter through the Node Command Gateway to reach enrolled fleet nodes without opening any inbound ports.

Cross-Platform Machine Mesh

Windows, macOS, and Linux working as one.

Stop switching between Remote Desktop, SSH terminals, and cloud dashboards. Ask one question in chat to query status, find files, or run diagnostics across your fleet.

user@fleet-control:~$ nc-fleet query --tag=production

→ Checking 12 nodes across AWS, GCP, and local hardware...

✓ 12/12 hosts synchronized • Outbound WebSocket tunnel verified • Latency: 22ms

Team Workspaces & RBAC

Share access safely with Viewer, Operator, and Admin roles.

Give teammates and AI agents exactly the permissions they need. No shared master passwords, no leaked private keys, and instant revocation anytime.

alice@team-workspace:~$ nc-rbac list-grants

• Alice (Admin) • Bob (Operator) • Carol (Viewer)

✓ Active policy ceiling: 0 elevated bypasses • Single audit trail

Standardized Integration

Connect the assistant you already trust.

Set up your connector once per account, not per machine. One universal endpoint connects your whole fleet to any AI client.

ChatGPT

OpenAI

Standard MCP

Connect via custom MCP server in ChatGPT web or mobile. Query infrastructure directly inside your conversational window.

Claude

Anthropic

Standard MCP

Add to Claude Desktop or Claude Web connectors. Leverage Claude's deep reasoning for multi-step sysadmin diagnosis.

Grok

xAI

Standard MCP

Connect your fleet to Grok. Inspect real-time server health and run governed diagnostics with conversational speed.

Muse

Gemini

Google

Standard MCP

Link your machines to Google Gemini. Synthesize large log volumes across hundreds of nodes in a single prompt.

Any MCP Client

Open Protocol

Standard MCP

Cursor, VS Code, Windsurf, Cline, Zed, or custom agent scripts. Standard Streamable HTTP JSON-RPC 2.0 endpoints.

Built on the open MCP standard • No proprietary lock-in Tuned per assistant: a compatibility layer adapts tool results natively

Endpoint: https://mcp.nodecommand.app

1Open ChatGPT → navigate to Plugins → click Add (+).
2Select Add custom MCP server and paste the connector URL above.
3Click Connect and complete the one-click sign in when prompted. Automatic discovery registers your tools instantly.

Good to know: Confirm the risk checkbox when ChatGPT shows it, then approve the discovered tools. (Full write access is strongest on Business/Enterprise/Edu plans).

For Cursor, VS Code, Cline, Windsurf, or custom MCP clients, add the server configuration to your MCP config file. Note client transport-key nuances: VS Code uses "type": "http", Cline uses "type": "streamableHttp", and Cursor uses "url".

mcp-config.json

{
  "mcpServers": {
    "node-command": {
      "url": "https://mcp.nodecommand.app",
      "type": "http"
    }
  }
}

Cryptographic Verification

See what your AI executes in real-time.

Explore concrete examples of natural-language operations and verify how our policy engine intercepts prohibited actions before they touch your machines.

AI Assistant Prompt prod-us-east-1 (Ubuntu 24.04 LTS)

Restart nginx on the VPS and verify port 443 is listening

Gateway Policy Evaluation Allowed & Verified

Allowed (Service management & network inspection allowlist)

Execution Result Sovereign Agent Daemon

systemctl restart nginx.service && ss -tlpn | grep 443

[systemd] Job for nginx.service finished with status [OK]. Active: active (running) since Sun 2026-10-18 14:22:05 UTC; 1s ago Main PID: 14208 (nginx) LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=14208,fd=6))

Hash-Chained Audit Chain Example format — verify in Web Console →

Audit Chain: sha256:7f9a2b8e...c410d52a

Real-Time Operational Audit Trail

Example format — verify in Web Console →

Ed25519 Cryptographically Chained

Timestamp	Machine	Caller	Operation	Status	Policy Decision
14:32:01 UTC	prod-linux-01	Claude (Operator)	systemctl status nginx	Success	Allowed (Read-Only Allowlist)
14:31:45 UTC	win-box-pro	ChatGPT (Operator)	Get-Service -Name W32Time	Success	Allowed (System Inspection)
14:30:12 UTC	prod-linux-01	Grok (Viewer)	rm -rf /var/log/app/*	Refused	Blocked by Policy (Recursive Delete Outside Sandbox)
14:28:50 UTC	mac-studio-m3	Gemini (Operator)	df -h /System/Volumes/Data	Success	Allowed (Filesystem Metric)
14:25:04 UTC	win-box-pro	ChatGPT (Viewer)	reg delete HKLM\Software\Policies	Refused	Blocked by Policy (Registry Mutation Prohibited)

Zero Friction Onboarding

Enrolled and operational in about 5 minutes.

Simple single-command installation. No kernel extensions, no inbound port forwarding, and no complex firewall reconfiguration.

Install Agent

Run npx node-command on any Windows, macOS, or Linux machine.

Pair Machine

Enter the 8-character pairing code in your Web Console in under 5 minutes.

Connect Your AI

Paste the universal MCP connector URL into ChatGPT, Claude, Grok, or Gemini.

Operate Safely

Manage services and query storage in chat, backed by cryptographic receipts.

01 • Terminal

npx node-command

No inbound ports required • Also available as npx nc-agent

02 • Pairing Code

N C 8 K - 9 4 2 1

One-Time TTL

Cryptographic workspace binding

03 • Universal MCP

https://mcp.nodecommand.app

Auto-discovered standard JSON-RPC 2.0

Need help or found an issue?

We use GitHub issues for transparent community support. Copy this template to file a bug report in seconds.

Open GitHub Issue →

### What were you trying to do?
[Describe your goal]

### What happened instead?
[Paste error message or attach screenshot]

### What did you expect to happen?
[Expected behavior]

### Environment
- OS: [Windows / macOS / Linux]
- Assistant: [ChatGPT / Claude / Grok / Muse / Gemini / other]

### Steps to reproduce (optional)
1. ...

Bring your machines into the conversation.

Join developers, IT teams, and power users managing their servers, labs, and workstations through AI. Start in minutes with a single command.

Launch Web Console → View Plans & Pricing →

Terminal: npx node-command

Contract 12.0.0 Comprehensive 52 Canonical MCP Tools Suite Standardized 12.0.0 contract providing All 52 Canonical MCP Tools

Your AI. Your machines. One conversation.

Install now

Real operations across your entire fleet. Protected at every step.

One Chat, Your Entire Fleet

Team Sharing Without Shared Keys

Tamper-Evident Audit Trail

Works Behind Any Router or NAT

One prompt orchestrates your entire computer fleet.

Every action is verified and accountable.

Your computer, your rules. AI cannot overstep.

How AI models and human teams converge through one governed gateway.

Windows, macOS, and Linux working as one.

Share access safely with Viewer, Operator, and Admin roles.

Connect the assistant you already trust.

ChatGPT

Claude

Grok

Muse

Gemini

Any MCP Client

See what your AI executes in real-time.

Real-Time Operational Audit Trail

Enrolled and operational in about 5 minutes.

Install Agent

Pair Machine

Connect Your AI

Operate Safely

Developer Support & Community

Need help or found an issue?

Bring your machines into the conversation.