Aegis Ssh MCP MCP Server

Aegis-SSH-MCP is a small MCP-native bridge that lets an AI agent run **approved commands** on Linux hosts over SSH.

Local serverstdioGo

What is the Aegis Ssh MCP MCP server?

If you already use Aegis Ssh MCP, the aegis ssh mcp mcp server is the piece that lets your assistant work with it directly. Aegis-SSH-MCP is a small MCP-native bridge that lets an AI agent run approved commands on Linux hosts over SSH.

Available tools

The toolset is worth reading before you wire it up, because it tells you what the integration is really for:

  • alias — the friendly name for this host
  • ssh_user — the Linux user Aegis connects as
  • key_path — the private key path inside the container
  • rule_profile — the command rules this host uses
  • host_key_fingerprint — pins the SSH host key
  • api_keys — bearer tokens allowed to reach this host endpoint
  • readonly-safe — debian-readonly
  • debian-ops — ubuntu-readonly
  • ubuntu-ops — rhel-readonly
  • rhel-ops — proxmox-readonly
  • proxmox-ops — docker-readonly
  • docker-ops — systemd-ops

Installation

Setup follows the usual MCP pattern — install or clone the server, register it in your client's configuration file, restart the client.

Where it fits

Among the cloud and infrastructure options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. Aegis Ssh MCP's toolset — alias, ssh_user, key_path and 11 more — is a fair guide to whether it matches your workflow. It is maintained by sparksbenjamin; worth a glance at recent repository activity before you build anything load-bearing on it.

SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.

Worth knowing first

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • With 14 tools registered it takes up a noticeable share of the context window; turn it off in projects that never touch Aegis Ssh MCP.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

Available tools

ToolWhat it does
aliasthe friendly name for this host
ssh_userthe Linux user Aegis connects as
key_paththe private key path inside the container
rule_profilethe command rules this host uses
host_key_fingerprintpins the SSH host key
api_keysbearer tokens allowed to reach this host endpoint
readonly-safedebian-readonly
debian-opsubuntu-readonly
ubuntu-opsrhel-readonly
rhel-opsproxmox-readonly
proxmox-opsdocker-readonly
docker-opssystemd-ops
kubernetes-readonlynetwork-diagnostics
logs-readonlypackage-readonly

Example prompts to try

  • Use Aegis Ssh MCP to alias.
  • Use Aegis Ssh MCP to ssh user.
  • Use Aegis Ssh MCP to key path.

Frequently asked questions

It connects Aegis Ssh MCP to MCP-compatible AI assistants such as Claude and Cursor, exposing 14 tools (alias, ssh_user, key_path, and more) that the assistant can call on your behalf. Instead of copying data back and forth by hand, the assistant works with Aegis Ssh MCP directly.