The risk this server exists to manage. Giving an LLM shell access on a remote host puts private data, untrusted input and network egress in one place — Simon Willison's "lethal trifecta". Prompt…
SSH MCP Server is an MCP project maintained in the tufantunc/ssh-mcp repository. The maintainer describes its purpose as “The risk this server exists to manage. Giving an LLM shell access on a remote host puts private data, untrusted input and network egress in…”. Read the project documentation for the complete scope.
The project provides a local client configuration using ssh-mcp. Follow the repository’s build and installation steps before copying it, and replace example paths with the paths on your own computer.
The example declares SSH_MCP_PASSWORD. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| list-connections | Discover available hosts and connection status |
| list-sessions | List active sessions per host |
| open-session | Create a named interactive (stateful) or background session |
| close-session | Close a session. A background session's command is signalled (INT/TERM/KILL) before its channel is dropped |
| read-session-output | Read output from background sessions (e.g., tail -f) |
| read-command | Execute allowlisted read-only commands (ls, cat, grep, ...) |
| run-command | Execute arbitrary commands (destructive/privileged need approval, unless approvalPolicy = "auto") |
| privileged-command | Execute with sudo (needs approval, unless approvalPolicy = "auto") |
| sftp-upload | Upload a file via SFTP (replaces the destination unconditionally) |
| sftp-download | Download a file via SFTP |
| sftp-list | ✅ |
| sftp-upload-file | Stream a local file to the remote host, never through model context |
| sftp-download-file | Stream a remote file to local disk, never through model context |
| signal-process | Send INT/TERM/KILL to a remote PID |
| v1 | v2 |
| exec | run-command |
| sudo-exec | privileged-command |
{
"mcpServers": {
"ssh-mcp": {
"command": "ssh-mcp",
"env": {
"SSH_MCP_PASSWORD": "YOUR_SSH_MCP_PASSWORD"
}
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
| Variable | Description | Required |
|---|---|---|
| SSH_MCP_PASSWORD | Declared in the maintainer’s client configuration. | Check documentation |
Queries the NIST National Vulnerability Database (NVD) via its API.
Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.
Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.
Remote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
Remote MCP for A2A failure replay MCP, structured receipts, audit logs, and reviewer-ready evidence.
A comprehensive Model Context Protocol (MCP) server for ABP.IO framework with 48+ tools for application development, UI generation, and management