1. Conduid
  2. Blockchain
  3. Qemu MCP
MCP server · Blockchain

Qemu MCP

MCP server that lets AI agents boot and drive QEMU VMs - keystrokes, screenshots, serial console. Built for OS developers: no SSH or guest agent needed, works on a bare kernel.

34Low

Scored a month ago · breakdown

About Qemu MCP

Qemu MCP is an MCP server in the Blockchain category: mCP server that lets AI agents boot and drive QEMU VMs - keystrokes, screenshots, serial console. Built for OS developers: no SSH or guest agent needed, works on a bare kernel.

Install

From source
git clone https://github.com/0xmortuex/qemu-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (17)

qemu_bootBoot a VM headless from `iso`, `kernel` (+`append`/`initrd`), and/or `disk`. Any arch QEMU supports (`x86_64`, `i386`, `aarch64`, `riscv64`…), an optional `machine` (QEMU `-M`, required on some archs), arbitrary extra QEMU args (networking, devices…), and overridable `qmp_connect_timeout_s`/`qmp_read_timeout_s` for slow hosts or long-running QMP commands

Parameters not published.

qemu_keyPress a key or chord: `enter`, `esc`, `f12`, `ctrl-alt-f2`…

Parameters not published.

qemu_listAll managed VMs with state, arch, machine, pid, uptime

Parameters not published.

qemu_mouseMove the absolute pointer (fractions of screen width/height) and optionally click `left`/`right`/`middle`

Parameters not published.

qemu_qmpRun any raw QMP command on the VM

Parameters not published.

qemu_screenshotPNG of the guest's display, straight from the framebuffer

Parameters not published.

qemu_serialTail the serial console (COM1) output — works after the VM has exited too, to see what it printed right before dying

Parameters not published.

qemu_serial_sendWrite text to the serial console (COM1)

Parameters not published.

qemu_snapshot_deleteDelete a previously saved snapshot tag, freeing its space in the qcow2 disk. Reports failure if QEMU's delvm rejects it (e.g. an unknown tag) instead of claiming success

Parameters not published.

qemu_snapshot_listList snapshot tags saved on the VM's qcow2 disk (raw `info snapshots` output), so you can see what's available before loading or deleting one

Parameters not published.

Show all 17 tools
qemu_snapshot_loadRestore a VM to a previously saved snapshot tag. Reports failure if QEMU's loadvm rejects it (e.g. an unknown tag) instead of claiming success

Parameters not published.

qemu_snapshot_saveSave a full RAM+device snapshot under a tag (needs a qcow2 disk). Reports failure if QEMU's savevm rejects it (e.g. a raw disk) instead of claiming success

Parameters not published.

qemu_stopGraceful ACPI powerdown, or `force=true` to kill

Parameters not published.

qemu_typeType text as keyboard input (`\n` = Enter, shifted symbols handled, tunable keystroke delay)

Parameters not published.

qemu_versionReport the installed `qemu-system-<arch> --version` output, without booting a VM

Parameters not published.

qemu_wait_screenBlock until the display stops changing (for VGA-only guests with no serial output), or timeout

Parameters not published.

qemu_wait_serialBlock until given text appears on serial, or timeout

Parameters not published.

Ask AI

✦

Ask AI about Qemu MCP

Powered by Claude · Grounded in docs

I know everything about Qemu MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Qemu MCP

How do I install Qemu MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Qemu MCP safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Qemu MCP still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.