Provides controlled access to ShellJS commands for filesystem operations, including read-only functions (ls, grep, find) and optional read-write capabilities (mkdir, touch, cp, mv, rm, sed).
Built with TypeScript for strong typing, enabling integration with TypeScript applications through a programmatic API.
Implements schema-based validation for command inputs and responses, ensuring that all operations conform to defined security constraints.
An MCP server that provides safe, controlled ShellJS access for LLMs like Claude.
MCP-ShellJS bridges the Model Context Protocol (MCP) with ShellJS, enabling AI systems to execute shell commands within a secure sandbox. It provides controlled filesystem access with multiple security layers.
ls, grep, sed, find, etc.)MCP-ShellJS implements a simple security model:
--enable-rw): Enables commands that can create, modify, or delete files--enable-exec): Enables the potentially dangerous exec command for executing arbitrary shell commandsThe server runs with stdio transport only, making it suitable for integration with desktop LLM applications.
For AI developers, MCP-ShellJS enables powerful filesystem capabilities with controlled risk:
grep and find across codebasessed without loading them entirelyProvides directory listing with powerful filtering capabilities:
| Parameter | Description |
|---|---|
include | Glob pattern(s) to include (e.g., *.js,*.ts) |
exclude | Glob pattern(s) to exclude (e.g., node_modules,dist) |
honor_gitignore | When true, filters out files matching patterns in .gitignore |
recursive | When true, includes subdirectories recursively |
Example:
Provides file contents with options for viewing specific portions:
| Parameter | Description |
|---|---|
lines | When true, includes line numbers in output |
start | First line to include (1-based indexing) |
end | Last line to include |
highlight | Glob pattern to highlight matching text |
Example:
MCP-ShellJS exposes ShellJS commands as tools, grouped by security risk level:
| Tool | Description | Arguments |
|---|---|---|
cat | Output file contents | files: String/Array, options: Object with -n (number lines) |
grep | Search files for patterns | regex, files, options: Object with -v (invert), -l (filenames only), -i (ignore case) |
find | Recursively find files | paths: String/Array (returns file paths including base dirs) |
ls | List directory contents | paths: String/Array, options: Object with -R (recursive), -A (all), -L (follow symlinks), -d (dirs only) |
which | Locate a command | command: String (returns path to command) |
pwd | Print working directory | (no arguments) |
test | Test file conditions | expression: String (e.g., -d path directory exists, -f path file exists) |
head | Show first lines | files: String/Array, options: Object with -n <num> (lines to show) |
tail | Show last lines | files: String/Array, options: Object with -n <num> (lines to show) |
sort | Sort lines | files: String/Array, options: Object with -r (reverse), -n (numeric) |
uniq | Filter duplicated lines | input: String, output: String, options: Object with -i (ignore case), -c (count), -d (duplicates only) |
| Tool | Description | Arguments |
|---|---|---|
mkdir | Create directories | dir: String/Array, options: Object with -p (create intermediate dirs) |
touch | Create/update files | files: String/Array, options: Object with -c (no create), -a (access time only), -m (mod time only) |
cp | Copy files/directories | source: String/Array, dest: String, options: Object with -R (recursive), -n (no clobber), -f (force) |
mv | Move files/directories | source: String/Array, dest: String, options: Object with -f (force), -n (no clobber) |
rm | Remove files/directories | files: String/Array, options: Object with -r/-R (recursive), -f (force) |
sed | Stream editor for files | search_regex: RegExp, replacement: String, files: String/Array, options: Object with -i (in-place) |
| Tool | Description | Arguments |
|---|---|---|
exec | Execute command | command: String, options: Object with async, silent, requires allowExec: true config |
This server cannot be installed
local-only server
The server can only run on the client's local machine because it depends on local resources.
A secure MCP server that provides controlled ShellJS access for LLMs, enabling AI systems to safely execute shell commands and interact with the filesystem within a configurable security sandbox.
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/erniebrodeur/mcp-shelljs'
If you have feedback or need assistance with the MCP directory API, please join our Discord server