AI Commander

Outbound-only remote shell and detached long-running jobs for AI agents; hosted Streamable HTTP plus stdio via npx -y @aicommander/mcp, with no exposed SSH, open ports, or VPN.

Documentation

AI Commander

AI Commander gives AI agents secure remote access to computers you control. It can inspect machine availability, run shell commands, manage detached background jobs, capture opted-in desktop screenshots, and transfer files without exposing SSH or opening inbound ports.

This public repository contains:

  • the open-source AI Commander plugin for Cursor;
  • signed application release artifacts and their checksums through GitHub Releases.

It does not contain the proprietary source code of the AI Commander desktop application, machine agent, or hosted relay service.

Cursor plugin

The plugin connects Cursor to the hosted Streamable HTTP MCP endpoint:

https://aicommander.dev/mcp

Cursor starts the OAuth flow when account access is needed. After signing in, the plugin can work with machines linked to that AI Commander account. Tool calls that execute commands, stop jobs, or write files can change or delete data on the selected machine; review the target and requested action before approving them in Cursor.

Installing the plugin is free. The hosted AI Commander service provides a Free plan and optional paid Pro features; current plan limits and purchase terms are described on the public privacy-and-terms page linked below.

Test locally

  1. Clone this repository into ~/.cursor/plugins/local/aicommander.
  2. In Cursor, run Developer: Reload Window.
  3. Open Settings → Plugins → Installed and confirm that AI Commander is present.
  4. Ask: “List my AI Commander machines and show which are online.”
  5. Complete OAuth when Cursor opens the AI Commander sign-in page.

The plugin consists of the manifest at .cursor-plugin/plugin.json, the MCP configuration at mcp.json, and the marketplace logo at assets/logo.png. Its version is independent of desktop, agent, and hosted-service release numbers.

Downloads

Verifying downloads

Every release ships a SHA256SUMS manifest covering all artifacts.

  • macOS: DMG, PKG, and ZIP artifacts are Apple Developer ID signed and notarized. Verify checksums with shasum -a 256 -c SHA256SUMS.
  • Windows: the NSIS installer is Authenticode-signed. Verify its checksum with certutil -hashfile AICommander-Setup.exe SHA256.
  • Linux agent: detached Ed25519 signatures and .sha256 files are published alongside the binary. The documented install flow verifies them before running anything with elevated privileges.

Documentation and support

License scope

The files in this repository — the Cursor plugin, MCP configuration, Glama/stdio evaluation files (Dockerfile, package.json, glama.json), and this documentation — are available under the MIT License. AI Commander trademarks, release binaries, desktop and agent applications, and the hosted service are not relicensed by that grant and remain subject to their applicable product terms.