Open a temporary in-memory SSH connection. Requires host, username, and either password OR privateKey (PEM). All credentials are kept in RAM only and wiped on disconnect. WARNING: this connects to a real remote host and host-key checking is disabled — the calling user is responsible for trust.

Close the named SSH connection and wipe its credentials from memory.

List currently registered SSH connections. Returns only non-sensitive metadata (connectionName, host, port, username, connectedAt, status).

Return explicit local diagnostics: MCP server alive, registered connections, known jobs, or a short SSH probe for a named connection. This helps distinguish server unavailable, SSH unavailable, dead connection, and MCP transport issues.

Execute a shell command over SSH on the named connection. WARNING: this runs real commands on a real remote machine — destructive operations are NOT blocked by this server. The MCP client / approval layer is responsible for confirming dangerous commands with the user.

Start a command over SSH and return immediately with a jobId. Use exec_status to read stdout/stderr later and exec_cancel to stop it. This avoids MCP client tool-call timeouts for git clone, pip install, apt install, dkms builds, reboot waits, and similar long operations.

Run a command non-interactively as another Linux user via sudo -S -p '' -iu <runAs> -- bash -lc <command>. The optional sudoPassword is piped to stdin and is never returned or logged. runAs is strictly validated as a Linux username. WARNING: this performs privileged actions on the remote host.

Start a sudo -iu command and return immediately with a jobId. Read it with exec_status; stop it with exec_cancel. The optional sudoPassword is piped through stdin and never logged.

Return job status plus stdout/stderr slices. Pass stdoutOffset/stderrOffset from the previous response's nextOffset fields to read incrementally.

List known exec jobs and their statuses. Output is metadata only, without logs.

Best-effort cancellation for a job. If the remote job PID is known, the MCP server sends the signal to the remote process group, then closes the SSH channel.

Forget a completed/cancelled/failed job and drop its buffered stdout/stderr.

Upload a single local file to the remote host via SFTP. localPath and remotePath are taken from arguments only — no paths are hardcoded.

Recursively upload a local directory tree to the remote host via SFTP. Excludes are caller-supplied (no project dirs hardcoded). Symlinks are not followed unless explicitly requested.

Download a remote file to the local filesystem via SFTP. File content is not included in the tool response; only the byte count.

Read up to maxBytes of a remote file as UTF-8 text. Content is redacted for known secret patterns before being returned.

Write a UTF-8 text payload to a remote file via SFTP. Useful for staging config files (e.g. into /tmp) which a subsequent exec can move into place with sudo mv / tee.