A
securityA
licenseA
qualityA secure shell command execution server implementing the Model Context Protocol (MCP). This server allows remote execution of whitelisted shell commands with support for stdin input.
Last updated -
1
154
MIT License
The Shell-MCP server enables secure execution of whitelisted shell commands for MCP-compatible LLMs with robust safety controls.
Execute Whitelisted Commands: Run commands like
ls,cat,pwd,df,grep,ps,free,date,netstat,find, and more with allowed arguments.Security Measures: Ensures only pre-approved commands and arguments can be executed.
Resource Management: Monitors memory and CPU usage, automatically terminates long-running commands, and restricts output size.
Integration: Works with MCP-compatible LLMs such as Claude.
Flexible Setup: Can be configured with Dive Desktop or started manually.
shell-mcp
Shell command execution MCP server
An MCP server implementation that provides secure shell command execution capabilities for LLMs.
Features
Secure Execution: Whitelisted commands and arguments only
Resource Control: Memory and CPU usage monitoring
Timeout Control: Automatic termination of long-running commands
Size Limits: Output size restrictions for safety
MCP Integration: Works with Claude and other MCP-compatible LLMs
Installation
npm install @kevinwatt/shell-mcp
Configuration with Dive Desktop
Click "+ Add MCP Server" in Dive Desktop
Copy and paste this configuration:
{
"mcpServers": {
"shell": {
"command": "npx",
"args": [
"-y",
"@kevinwatt/shell-mcp"
]
}
}
}
Tool Documentation
shell_ls, shell_pwd, shell_df, etc.
Execute whitelisted shell commands
Inputs:
command(string, required): Command to executeargs(array, optional): Command argumentstimeout(number, optional): Execution timeout in ms
Usage Examples
Ask your LLM to:
"Show current directory using shell_pwd"
"List files using shell_ls with -l argument"
"Check disk usage using shell_df with -h argument"
Manual Start
If needed, start the server manually:
npx @kevinwatt/shell-mcp
Requirements
Node.js 18+
MCP-compatible LLM service
Development
# Install dependencies
npm install
# Watch mode
npm run watch
# Run tests
npm test
# Lint
npm run lint
License
MIT © Dewei Yen
Keywords
mcp
shell
command
claude
llm
automation
Available Commands
The following shell commands are available:
Command | Description | Allowed Arguments |
ls | List directory contents | -l, -a, -h, -R, --help, * |
cat | Concatenate and display file contents | -n, -b, --help, * |
pwd | Show current working directory | None |
df | Show disk usage | -h, -T, --help |
echo | Display text | Any text |
ps | Show process status | -e, -f, -u, --help |
free | Show memory usage | -h, -m, -g, --help |
uptime | Show system uptime | None |
date | Show system date and time | +%Y-%m-%d, +%H:%M:%S, --help |
grep | Search text patterns in files | -i, -v, -n, -r, -l, --color, * |
w | Show who is logged on and what they are doing | -h, -s, --no-header, --help |
whois | Query WHOIS domain registration information | -H, * |
find | Search for files in a directory hierarchy | -name, -type, -size, -mtime, * |
netstat | Network connection information | -a, -n, -t, -u, -l, -p, --help |
lspci | List PCI devices | -v, -k, -mm, -nn, --help |
lsusb | List USB devices | -v, -t, -d, -s, --help |
dig | DNS lookup utility | +short, +trace, +dnssec, @*, * |
nslookup | Query DNS records | -type= , -query= , * |
ip | Show network devices and interfaces | addr, link, route, neigh, -br, * |
whereis | Locate binary, source and manual files | -b, -m, -s, * |
Related MCP Servers
- -securityFlicense-qualityA secure server that allows LLM applications like Claude to execute whitelisted system commands with user confirmation and comprehensive security features.Last updated -
- AsecurityAlicenseAqualityAn MCP server that enables secure execution of shell commands across Windows, macOS, and Linux with built-in whitelisting and approval mechanisms for enhanced security.Last updated -94210MIT License
- -security-license-qualityA secure MCP server that provides controlled ShellJS access for LLMs, enabling AI systems to safely execute shell commands and interact with the filesystem within a configurable security sandbox.