mcp-ssh-tool

security MCP Server

Production-grade MCP SSH automation server with strict host-key verification, policy-gated command/file tools, transfers, tunnels, package/service helpers, audit logs, metrics, and HTTP/stdio transports.

Verified
securitysecurity
3 views4 stars3 forksv2.3.2MIT

Why This Matters

Discovered via github-topic:mcp and last synced 4mo ago.

Verified
Source
github-topic:mcp
Stars
4
Last synced
4mo ago
Install
Check source

Install

Install instructions not detected yet

Check the source repository for the latest setup steps.

View source instructions
33
Tools
0
Resources
0
Prompts
Standard I/O
Transport

Available Tools (33)

Linux

Full support.

3000

Streamable HTTP port.

SSH_MCP_HTTP_HOST

`127.0.0.1`

SSH_MCP_HTTP_MAX_REQUEST_BODY_BYTES

`1048576`

SSH_MCP_KNOWN_HOSTS_PATH

`~/.ssh/known_hosts`

SSH_MCP_HTTP_ALLOWED_ORIGINS

loopback origins

SSH_MCP_HTTP_BEARER_TOKEN_FILE

unset

Mode

Command

Area

v2 Default

SSH_MCP_MAX_FILE_SIZE

`10485760`

df

uptime

SSH_MCP_COMMAND_TIMEOUT

`30000`

Variable

Default

Target

Status

SSH_MCP_TUNNEL_DENY_BIND_HOSTS

`0.0.0.0,::`

stdio

`mcp-ssh-tool`

SSH_MCP_HOST_KEY_POLICY

`strict`

SSH_MCP_MAX_STREAM_CHUNKS

`4096`

SSH_MCP_HTTP_PUBLIC_URL

unset

SSH_MCP_TUNNEL_ALLOW_BIND_HOSTS

`127.0.0.1,localhost,::1`

SSH_MCP_TUNNEL_DENY_PORTS

unset

SSH_MCP_MAX_COMMAND_OUTPUT_BYTES

`1048576`

SSH_MCP_HTTP_SESSION_IDLE_TTL_MS

`900000`

SSH_MCP_TUNNEL_ALLOW_PORTS

unset

Transfers

bounded by `SSH_MCP_MAX_TRANSFER_BYTES`

SSH_MCP_POLICY_FILE

unset

SSH_MCP_MAX_FILE_WRITE_BYTES

`10485760`

SSH_MCP_MAX_TRANSFER_BYTES

`52428800`

SSH_MCP_HTTP_MAX_SESSIONS

`20`

SSH_MCP_HTTP_TRUST_PROXY

`false`

SSH_MCP_LOCAL_PATH_ALLOW_PREFIXES

OS temp directory

SSH_MCP_TUNNEL_ALLOW_REMOTE_HOSTS

unset

SSH_MCP_TUNNEL_DENY_REMOTE_HOSTS

unset