LetKite LetKite docs
LetKite is an MCP server that lets the AI you already use work on your own machines: run commands, read and write files, follow logs and run jobs, within limits you set and with every call recorded.
The server
| Server URL | https://mcp.letkite.com/mcp |
|---|---|
| Transport | Streamable HTTP (MCP) |
| Sign-in | OAuth 2.1 with PKCE. Clients register themselves (dynamic client registration or a client ID metadata document). See Sign-in and access. |
| Tools | 47 tools, each annotated as read-only, destructive, or opening and closing a session. See Tools. |
| Account | A LetKite account with at least one connected machine, managed in the console at https://dashboard.letkite.com. |
How it works
- Connect your machines. In the LetKite console you add a machine: a small agent runs on Windows, macOS, Linux or an OpenWrt router, or the gateway reaches a Linux server over SSH. Each machine can narrow what it allows in its own
ceiling.toml, whatever the account says. - Add LetKite to your AI client. In Claude, ChatGPT, Claude Code, Cursor, VS Code, Codex or Kimi Code, add the server URL. The client opens a LetKite sign-in page, and you choose what it may do. See Connect a client.
- Ask the AI. The AI client calls LetKite's tools, for example
list_hoststo see your machines andexecto run a command. LetKite checks every call against the connection's policy, asks a person to approve it when a rule says so, and writes the call to the audit log.
What LetKite promises
- Your machines only. Tools act on the machines in your LetKite account and nothing else (
openWorldHint: falseon every tool). - Least privilege, checked on every call. Your role in the account, the connection's policy and scopes, its command rules, and the machine's own ceiling all apply, and the strictest one wins. See Permissions and approvals.
- A person decides the risky steps. Commands that match an approval rule wait until someone approves them with a passkey or an authenticator code, from a link sent by email or to their phone.
- Every call is recorded, conversations are not. The audit log keeps who called which tool on which machine and the result. LetKite never receives your conversation with the AI. See Audit and data.
- Secrets stay out of the AI's view. On the Business plan, values of secret environment variables are replaced by
***in what tools return to the AI.
Where to next
- Connect a client: step by step for each AI client.
- Tools: the full reference, generated from the gateway's code.
- Support: contact and policies.