ssh-mcp-pro

Name: ssh-mcp-pro
Author: oaslananka

security MCP Server

TypeScript MCP server for controlled SSH operations, remote host workflows, command execution guardrails, and infrastructure automation.

byoaslananka

VerifiedInstall Ready

securitysecurity typescript

1 views0 stars0 forksv1.1.1MIT

View on GitHub Homepage Docs

Why This Matters

Discovered via github-topic:mcp and last synced 3mo ago.

VerifiedInstall Ready

Source: github-topic:mcp
Stars: 0
Last synced: 3mo ago
Install: Instructions detected

Install

1. Install the package

npx ssh-mcp-pro

2. Add to claude_desktop_config.json

{
  "mcpServers": {
    "ssh-mcp-pro": {
      "command": "npx",
      "args": [
        "ssh-mcp-pro"
      ]
    }
  }
}

Config file location: ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) / %APPDATA%\Claude\claude_desktop_config.json (Windows)

Tools

Resources

Prompts

Standard I/O

Transport

Available Tools (69)

SSH_MCP_MAX_SESSIONS

`20`

SSH_MCP_RATE_LIMIT

`true`

SSH_MCP_COMMAND_TIMEOUT

`30000`

SSH_MCP_RATE_LIMIT_PER_SESSION

`true`

Variable

Default

SSH_MCP_DEBUG

`false`

SSH_MCP_KNOWN_HOSTS_PATH

`~/.ssh/known_hosts`

SSH_MCP_COMMAND_ALLOW

empty

SSH_MCP_TUNNEL_DENY_REMOTE_HOSTS

empty

SSH_MCP_HTTP_MAX_SESSIONS

`20`

SSH_MCP_CONNECTOR_CREDENTIAL_COMMAND_TIMEOUT_MS

`5000`

SSH_MCP_SESSION_TTL

`900000`

SSH_MCP_RATE_LIMIT_MAX

`100`

SSH_MCP_ALLOWED_CIPHERS

empty

SSH_MCP_PATH_ALLOW_PREFIXES

`/tmp,/var/tmp,/home,/Users`

SSH_MCP_TUNNEL_DENY_PORTS

empty

SSH_MCP_HTTP_PUBLIC_URL

unset

SSH_MCP_HTTP_AUTH_MODE

`bearer`

chatgpt

Baseline remote connector tools plus an empty ChatGPT extension set.

SSH_MCP_MAX_COMMAND_OUTPUT_BYTES

`1048576`

SSH_MCP_RATE_LIMIT_PER_SESSION_MAX

`50`

SSH_MCP_POLICY_MODE

`enforce`

SSH_MCP_LOCAL_PATH_ALLOW_PREFIXES

OS temp directory

SSH_MCP_HTTP_PORT

`3000`

SSH_MCP_MAX_STREAM_CHUNKS

`4096`

SSH_MCP_RATE_LIMIT_PER_SESSION_WINDOW_MS

`60000`

SSH_MCP_ALLOW_RAW_SUDO

`false`

SSH_MCP_LOCAL_PATH_DENY_PREFIXES

empty

SSH_MCP_HTTP_ALLOWED_ORIGINS

`http://127.0.0.1,http://localhost`

SSH_MCP_CONNECTOR_PROFILE

`full`

SSH_MCP_OAUTH_JWKS_URL

unset

remote-broker

Same remote connector subset as `remote-safe`.

SSH_MCP_MAX_FILE_SIZE

`10485760`

SSH_MCP_RATE_LIMIT_WINDOW_MS

`60000`

SSH_MCP_ALLOW_DESTRUCTIVE_COMMANDS

`false`

SSH_MCP_TUNNEL_ALLOW_BIND_HOSTS

`127.0.0.1,localhost,::1`

SSH_MCP_HTTP_BEARER_TOKEN_FILE

unset

SSH_MCP_CONNECTOR_CREDENTIAL_PROVIDER

`none`

SSH_MCP_OAUTH_RESOURCE

unset

SSH_MCP_MAX_FILE_WRITE_BYTES

`10485760`

SSH_MCP_STRICT_HOST_KEY

unset

SSH_MCP_ALLOW_DESTRUCTIVE_FS

`false`

SSH_MCP_TUNNEL_DENY_BIND_HOSTS

`0.0.0.0,::`

SSH_MCP_ENABLE_LEGACY_SSE

`false`

SSH_MCP_CONNECTOR_CREDENTIAL_COMMAND

unset

SSH_MCP_OAUTH_REQUIRED_SCOPES

`ssh-mcp-pro.read`

SSH_MCP_MAX_TRANSFER_BYTES

`52428800`

SSH_MCP_HOST_KEY_POLICY

`strict`

SSH_MCP_ALLOWED_HOSTS

empty

SSH_MCP_TUNNEL_ALLOW_REMOTE_HOSTS

empty

SSH_MCP_HTTP_MAX_REQUEST_BODY_BYTES

`1048576`

SSH_MCP_CONNECTOR_CREDENTIAL_COMMAND_ARGS

empty

Profile

Exposed tools

SSH_MCP_ALLOW_ROOT_LOGIN

`false`

SSH_MCP_COMMAND_DENY

empty

SSH_MCP_TUNNEL_ALLOW_PORTS

empty

SSH_MCP_HTTP_SESSION_IDLE_TTL_MS

`900000`

SSH_MCP_CONNECTOR_DEFAULT_USERNAME

unset

remote-safe

`connector_status`, `ssh_hosts_list`, `ssh_policy_explain`, `ssh_host_inspect`, `ssh_mutation_plan`.

SSH_MCP_POLICY_FILE

unset

SSH_MCP_PATH_DENY_PREFIXES

`/etc/sudoers,/etc/shadow,/etc/passwd,/boot,/dev,/proc`

SSH_MCP_HTTP_HOST

`127.0.0.1`

SSH_MCP_HTTP_TRUST_PROXY

`false`

SSH_MCP_OAUTH_ISSUER

unset

claude

Baseline remote connector tools plus an empty Claude extension set.

SSH_MCP_TOOL_PROFILE

`full`

SSH_MCP_OAUTH_AUDIENCE

unset

remote-readonly

Same remote connector subset as `remote-safe`.

full

All SSH, process, filesystem, transfer, ensure, tunnel, connector, and system tools.

Works Well With - Skills

revops

When the user wants help with revenue operations, lead lifecycle management, or marketing-to-sales handoff processes. Also use when the user mentions 'RevOps,' 'revenue operations,' 'lead scoring,' 'lead routing,' 'MQL,' 'SQL,' 'pipeline stages,' 'deal desk,' 'CRM automation,' 'marketing-to-sales handoff,' 'data hygiene,' 'leads aren't getting to sales,' 'pipeline management,' 'lead qualification,' or 'when should marketing hand off to sales.' Use this for anything involving the systems and proc

1104 starsHas guide

schema

When the user wants to add, fix, or optimize schema markup and structured data on their site. Also use when the user mentions "schema markup," "structured data," "JSON-LD," "rich snippets," "schema.org," "FAQ schema," "product schema," "review schema," "breadcrumb schema," "Google rich results," "knowledge panel," "star ratings in search," or "add structured data." Use this whenever someone wants their pages to show enhanced results in Google. For broader SEO issues, see seo-audit. For AI search

1104 starsHas guide

referrals

When the user wants to create, optimize, or analyze a referral program, affiliate program, or word-of-mouth strategy. Also use when the user mentions 'referral,' 'affiliate,' 'ambassador,' 'word of mouth,' 'viral loop,' 'refer a friend,' 'partner program,' 'referral incentive,' 'how to get referrals,' 'customers referring customers,' or 'affiliate payout.' Use this whenever someone wants existing users or partners to bring in new customers. For launch-specific virality, see launch.

1104 starsHas guide

social

When the user wants help creating, scheduling, or optimizing social media content for LinkedIn, Twitter/X, Instagram, TikTok, Facebook, or other platforms, or wants to do social listening and engagement triage. Also use when the user mentions 'LinkedIn post,' 'Twitter thread,' 'social media,' 'content calendar,' 'social scheduling,' 'engagement,' 'viral content,' 'what should I post,' 'repurpose this content,' 'tweet ideas,' 'LinkedIn carousel,' 'social media strategy,' 'grow my following,' 'Tik

1104 starsHas guide

Works Well With - Agents

Reasonix

DeepSeek-native AI coding agent for your terminal. Engineered around prefix-cache stability — leave it running.

35396 starslangchain

Archon

The first open-source harness builder for AI coding. Make AI coding deterministic and repeatable.

23395 stars

Ai Pdf Chatbot Langchain

AI PDF chatbot agent built with LangChain & LangGraph

16508 starslangchain

Rocketride Server

High-performance AI pipeline engine with a C++ core and 50+ Python-extensible nodes. Build, debug, and scale LLM workflows with 13+ model providers, 8+ vector databases, and agent orchestration, all from your IDE. Includes VS Code extension, TypeScript/Python SDKs, and Docker deployment.

8438 starscrewai