claudecode-rexd-target

claudecode-rexd-target

Claude Code plugin for using configured REXD targets over SSH stdio.

The plugin provides:

• A bundled MCP server named rexd-target
• Remote filesystem, search, shell, and PTY tools backed by rexd --stdio
• A namespaced Claude Code command for target switching
• A PreToolUse hook that blocks local filesystem/search/shell built-ins while a target is active

Requirements

• Claude Code with plugin support
• Node.js available in PATH for the installed MCP server and hook scripts
• Bun for local development, tests, and building from source
• SSH access to the remote target
• rexd installed on the remote host
• Remote rexd configured with security.allowed_roots

Recommended backend: rexd v0.1.5+ with fs.edit, fs.patch, PTY support, and correct / allowed-root behavior.

Install

Install the plugin normally through Claude Code's plugin marketplace system:

claude plugin marketplace add samiralibabic/claudecode-rexd-target
claude plugin install claudecode-rexd-target@rexd-ecosystem --scope user

After that, start Claude Code normally from any project:

claude

Inside Claude Code, verify the plugin MCP server is connected:

/mcp

The plugin MCP server is configured by the .mcp.json committed in this repository. That file is part of the plugin package and should stay in git. When installed through Claude Code, it starts the bundled server with:

node ${CLAUDE_PLUGIN_ROOT}/dist/server.js

Development Install

For local development without installing the marketplace:

bun install
claude --plugin-dir /path/to/claudecode-rexd-target --debug

Run this command from the project you want Claude to work in, not from inside this plugin repo. If you run Claude from inside this plugin repo, Claude may read this repo's .mcp.json as project MCP config and warn that plugin-only variables are missing.

Optional Global /target Alias

Claude Code namespaces plugin commands, so the bundled target command is /claudecode-rexd-target:target.

For better day-to-day UX, install /target as a personal skill available in every project. In a Claude Code session with this plugin enabled, run this before activating a target:

! rexd-target-install-alias --user

This writes:

~/.claude/skills/target/SKILL.md

If the helper is not on PATH, run it from a local checkout instead:

bun run install:target-alias --user

You can still install a project-local alias instead:

rexd-target-install-alias /path/to/your/project

Project-local aliases write:

<project>/.claude/commands/target.md

Restart Claude Code if /target is not visible immediately.

Updates

Update the marketplace and installed plugin with:

claude plugin marketplace update rexd-ecosystem
claude plugin update claudecode-rexd-target@rexd-ecosystem

Target Registry

Targets are read from the shared REXD registry:

~/.config/rexd/targets.json

This is intentionally the same registry used by other REXD integrations such as opencode-rexd-target, so one target config can be reused across tools.

Example:

{
  "version": 1,
  "targets": {
    "prod": {
      "transport": "ssh",
      "host": "example.com",
      "user": "deploy",
      "port": 22,
      "identityFile": "~/.ssh/id_ed25519",
      "sshOptions": ["-o", "StrictHostKeyChecking=yes"],
      "command": "/usr/local/bin/rexd --stdio",
      "workspaceRoots": ["/srv/app"],
      "defaultCwd": "/srv/app",
      "loginShell": false,
      "capabilities": {
        "shell": true,
        "fs": true,
        "pty": true
      },
      "rootPolicy": {
        "mode": "strict",
        "extraRoots": []
      }
    }
  }
}

capabilities.shell controls whether the plugin exposes remote shell execution. Remote shell commands run with the privileges of the remote rexd process user and are not constrained by filesystem RPC root guards. Set capabilities.shell: false and security.allow_shell = false on the target host when filesystem roots must be the hard security boundary.

Only transport: "ssh" is supported in v0.1.

Usage

Recommended short command after installing the optional alias:

/target list
/target use prod
/target status
/target clear

The built-in plugin command remains available under Claude Code's required namespace:

/claudecode-rexd-target:target list
/claudecode-rexd-target:target use prod
/claudecode-rexd-target:target status
/claudecode-rexd-target:target clear

After target_use succeeds, Claude should use only the rexd-target MCP tools for remote filesystem, search, shell, and PTY work.

Available MCP tools: