A
security-
licenseA
qualityAn enhanced Windows CLI MCP server providing unrestricted system access capabilities, designed for trusted environments with full system access requirements.
Last updated -
4
251
6
MIT License
The mcp-wsl-exec server allows for secure execution of commands within Windows Subsystem for Linux (WSL) environments with built-in safety features and validation.
Execute Commands: Run commands in WSL with optional timeout and working directory settings
Security Features: Implement dangerous command detection, command sanitization, path traversal prevention, and shell injection protection
Confirmation System: Manage execution of flagged commands requiring confirmation
Error Handling: Provide validation and detailed output formatting
mcp-wsl-exec
A Model Context Protocol (MCP) server for executing commands in Windows Subsystem for Linux (WSL) environments. This server provides secure command execution with built-in safety features and validation.
Features
🔒 Secure command execution in WSL environments
⚡ Built-in safety features:
Dangerous command detection
Command confirmation system
Path traversal prevention
Command sanitization
📁 Working directory support
⏱️ Command timeout functionality
🔍 Detailed command output formatting
❌ Error handling and validation
🛡️ Protection against shell injection
Configuration
This server requires configuration through your MCP client. Here are examples for different environments:
Cline Configuration
Add this to your Cline MCP settings:
{
"mcpServers": {
"mcp-wsl-exec": {
"command": "npx",
"args": ["-y", "mcp-wsl-exec"]
}
}
}
Claude Desktop Configuration
Add this to your Claude Desktop configuration:
{
"mcpServers": {
"mcp-wsl-exec": {
"command": "npx",
"args": ["-y", "mcp-wsl-exec"]
}
}
}
API
The server implements two MCP tools:
execute_command
Execute a command in WSL with safety checks and validation.
Parameters:
command(string, required): Command to executeworking_dir(string, optional): Working directory for command executiontimeout(number, optional): Timeout in milliseconds
confirm_command
Confirm execution of a dangerous command that was flagged by safety checks.
Parameters:
confirmation_id(string, required): Confirmation ID received from execute_commandconfirm(boolean, required): Whether to proceed with the command execution
Safety Features
Dangerous Command Detection
The server maintains a list of potentially dangerous commands that require explicit confirmation before execution, including:
File system operations (rm, rmdir, mv)
System commands (shutdown, reboot)
Package management (apt, yum, dnf)
File redirections (>, >>)
Permission changes (chmod, chown)
And more...
Command Sanitization
All commands are sanitized to prevent:
Shell metacharacter injection
Path traversal attempts
Home directory references
Dangerous command chaining
Development
Setup
Clone the repository
Install dependencies:
pnpm install
Build the project:
pnpm build
Run in development mode:
pnpm dev
Publishing
The project uses changesets for version management. To publish:
Create a changeset:
pnpm changeset
Version the package:
pnpm changeset version
Publish to npm:
pnpm release
Contributing
Contributions are welcome! Please feel free to submit a Pull Request.
License
MIT License - see the LICENSE file for details.
Acknowledgments
Built on the Model Context Protocol
Designed for secure WSL command execution
Related MCP Servers
- AsecurityAlicenseAqualityAn MCP server that enables secure terminal command execution, directory navigation, and file system operations through a standardized interface for LLMs.Last updated -1091MIT License
- AsecurityAlicenseAqualityA Model Context Protocol server that provides secure command-line access to Windows systems, allowing MCP clients like Claude Desktop to safely execute commands in PowerShell, CMD, and Git Bash shells with configurable security controls.Last updated -9251249MIT License
- Asecurity-licenseAqualityAn MCP server that enables secure execution of shell commands across Windows, macOS, and Linux with built-in whitelisting and approval mechanisms for enhanced security.Last updated -94299MIT License