Loading...
SSH MCP Server enables secure remote shell command execution on Linux/Windows systems via SSH, integrating with LLMs and other MCP clients.
Boost this tool
Subscribe to listing upgrades or segmented pushes.
SSH MCP Server enables secure remote shell command execution on Linux/Windows systems via SSH, integrating with LLMs and other MCP clients.
This server allows remote execution of shell commands, posing a significant risk if misconfigured or compromised. It is relatively safe if sudo is disabled, strong passwords/keys are used, and command timeouts are short. It is risky if sudo is enabled with weak passwords, no command length limits, and long timeouts.
Performance is limited by network latency and the execution time of the shell commands. Concurrent executions are not supported.
Cost is primarily related to the resources consumed on the remote server during command execution. There are no direct API costs.
{
"mcpServers": {
"ssh-mcp": {
"command": "npx",
"args": [
"ssh-mcp",
"-y",
"--",
"--host=1.2.3.4",
"--port=22",
"--user=root",
"--password=pass",
"--key=path/to/key"
]
}
}
}execExecutes a shell command on the remote server.
Allows arbitrary shell command execution.
sudo-execExecutes a shell command on the remote server with sudo privileges.
Allows arbitrary shell command execution with elevated privileges.
Password|API Key
hybrid
This server allows remote execution of shell commands, posing a significant risk if misconfigured or compromised. It is relatively safe if sudo is disabled, strong passwords/keys are used, and command timeouts are short. It is risky if sudo is enabled with weak passwords, no command length limits, and long timeouts.
Autonomy is highly dependent on the commands executed. No built-in safeguards exist beyond timeout and character limits.
Production Tip
Implement robust logging and monitoring on the remote server to track command execution and potential issues.
The server attempts to abort the running process and closes the connection.
Start the server with the `--disableSudo` flag.
The default timeout is 60000ms (1 minute).
Use the `--maxChars` command-line argument. Set to `none` or `0` to disable the limit.
Yes, specify the path to your private key using the `--key` parameter.
Use the `--suPassword` option to establish a root shell.
Use the `claude mcp add` command with the appropriate parameters, as shown in the documentation.