SSH

SSH

An MCP server that can execute SSH commands remotely, upload files, download files, and so on.

89
Stars
22
Forks
0
Releases

Overview

ssh-mcp-server is a bridging tool that enables AI assistants and other applications supporting the MCP protocol to execute remote SSH commands through a standardized interface. This allows AI assistants to safely operate remote servers, execute commands, and retrieve results without directly exposing SSH credentials to AI models. The server exposes MCP-compatible commands and tools for executing remote commands (execute-command), uploading and downloading files (upload, download), and listing configured SSH servers (list-servers). It supports secure SSH connections via password authentication or private key authentication (with optional passphrase) and offers command-security controls through whitelist and blacklist patterns to constrain operations. Commands can be routed to named SSH connections in multi-SSH setups, and the MCP configuration emphasizes explicit argument separation to avoid misconfigurations. The server is designed to be drop-in runnable with NPX, so no global installation is necessary. Security considerations highlight local credential isolation, the absence of built-in DoS protection, and safeguards against path traversal in file operations. The project also demonstrates how to specify hosts, ports, credentials, and proxy settings to fit various deployment needs.

Details

Owner
classfang
Language
TypeScript
License
ISC License
Updated
2025-12-07

Features

Secure Connections

Supports password and private key authentication (with optional passphrase) for SSH connections.

Command Security Control

Whitelist and blacklist patterns constrain executable commands to prevent dangerous operations.

Standardized Interface

Follows MCP protocol specifications for seamless integration with AI assistants.

File Transfer

Supports bidirectional file transfers—uploading local files to remote servers and downloading files from them.

Credential Isolation

SSH credentials are managed locally and never exposed to AI models.

Ready to Use

Can be run directly with NPX without a global installation.

Audience

AI assistantsEnable AI assistants to securely run remote SSH commands via MCP without handling credentials.
DevelopersIntegrate MCP-enabled SSH control into applications with secure local credential handling.

Tags

sshmcpremote-commandfile-transferwhitelistblacklistcredential-isolationnpxsocks-proxymulti-sshlist-servers