MCP SSH Server
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@MCP SSH ServerConnect to the Cisco switch and display the running configuration"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
MCP SSH Server
A fork of mixelpixx/SSH-MCP by Chris Stockslager, used under the MIT license. Most of this codebase is his original work — see Credits and Attribution and NOTICE.md.
A Model Context Protocol (MCP) server that provides comprehensive SSH and serial console access to remote servers and network devices. Enables AI tools like Claude Desktop to securely manage Linux servers, network switches, and infrastructure devices through both network SSH connections and direct USB-to-Serial console access.
Features
Core SSH Capabilities
SSH connection management with password or key-based authentication
Remote command execution with timeout handling
File upload and download via SFTP
Directory listing and file operations
Secure connection handling
Network Device Management
USB-to-Serial Console Access - Direct console connections via FTDI and other USB adapters
Network Switch Management - Full support for Cisco IOS/IOS-XE and Aruba switches
Device Discovery - Automatic detection of switch types and capabilities
Configuration Management - Backup, restore, and automated configuration
Network Diagnostics - Built-in ping, traceroute, and connectivity testing
Console-to-SSH Transition - Automated SSH setup via console connection
Firmware Management - Upload, verify, install, and rollback switch firmware
Server Management
Ubuntu server management tools (Nginx, SSL, packages, firewall)
Compatible with Claude Desktop, VS Code, and other MCP-compatible clients
Related MCP server: SSH MCP Server
Real-World Production Testing
This tool has been extensively tested in production network environments:
Network Discovery - Successfully discovered previously unknown fluttering ports on production switches that were causing intermittent connectivity issues
Zero Downtime - Managed multiple switches in live production networks without causing any network disruptions or outages
Time Savings - Automated SSH configuration reduced switch setup time from 15-20 minutes to under 2 minutes
Reliability - Zero incidents during production deployments across multiple network devices
USB-to-Serial Compatibility - Tested with FTDI FT232R/FT232H, Prolific PL2303, Silicon Labs CP2102/CP2104, and CH340 adapters
Switch Compatibility - Validated on Cisco Catalyst 2960/3560/3750 and Aruba 2530/2930 series switches
The tool has proven itself reliable enough for production network management tasks without requiring a separate lab environment for testing.
Prerequisites
Node.js 18 or higher
npm or yarn
Compatible with Windows, macOS, and Linux
Installation
Clone the repository:
git clone https://github.com/yourusername/mcp-ssh-server.git cd mcp-ssh-serverInstall dependencies:
npm installBuild the project:
npm run buildInstall globally (optional):
npm install -g .
Configuration
Claude Desktop Configuration
Open Claude Desktop
Go to Settings > Developer (or press Ctrl+Shift+D)
Edit the MCP configuration
Add the following configuration:
{
"mcpServers": {
"ssh-server": {
"command": "node",
"args": ["/path/to/mcp-ssh-server/build/index.js"],
"env": {
"NODE_NO_WARNINGS": "1"
}
}
}
}Important: Replace /path/to/mcp-ssh-server/build/index.js with the absolute path to your built index.js file.
VS Code Configuration (if using MCP extension)
Create or edit .vscode/mcp.json in your workspace:
{
"mcpServers": {
"ssh-server": {
"command": "node",
"args": ["/path/to/mcp-ssh-server/build/index.js"]
}
}
}Available Tools
Core SSH Tools
ssh_connect
Establish an SSH connection to a remote server.
Parameters:
host(required) - Hostname or IP addressusername(required) - SSH usernamepassword(optional) - SSH passwordprivateKeyPath(optional) - Path to private key filepassphrase(optional) - Passphrase for private keyport(optional) - SSH port (default: 22)connectionId(optional) - Unique identifier for this connection
Returns:
success- Boolean indicating successconnectionId- ID to use for subsequent commandsmessage- Connection status message
Example:
Connect to my server at example.com using username 'admin' and password authenticationssh_exec
Execute a command on the remote server.
Parameters:
connectionId(required) - ID from ssh_connectcommand(required) - Command to executecwd(optional) - Working directorytimeout(optional) - Command timeout in milliseconds (default: 60000)
Returns:
code- Exit codesignal- Signal that terminated the process (if any)stdout- Standard outputstderr- Standard error
Example:
Run "ls -la /var/www/html" on the serverssh_upload_file
Upload a file to the remote server.
Parameters:
connectionId(required) - ID from ssh_connectlocalPath(required) - Local file pathremotePath(required) - Remote destination path
Returns:
success- Boolean indicating successmessage- Upload status message
ssh_download_file
Download a file from the remote server.
Parameters:
connectionId(required) - ID from ssh_connectremotePath(required) - Remote file pathlocalPath(required) - Local destination path
Returns:
success- Boolean indicating successmessage- Download status message
ssh_list_files
List files in a directory on the remote server.
Parameters:
connectionId(required) - ID from ssh_connectremotePath(required) - Directory path to list
Returns:
files- Array of file objects with properties:filename- File nameisDirectory- Boolean indicating if it's a directorysize- File sizelastModified- Last modification time
ssh_disconnect
Close an SSH connection.
Parameters:
connectionId(required) - ID from ssh_connect
Returns:
success- Boolean indicating successmessage- Disconnection status message
Usage Examples with Claude
Connect to your server:
Please connect to my VPS at example.com using username 'admin' and my SSH key at ~/.ssh/id_rsaCheck server status:
Run the command "systemctl status nginx" to check web server statusUpload a website file:
Upload my local file ~/websites/index.html to /var/www/html/index.html on the serverList website files:
Show me all files in the /var/www/html directoryDownload a backup:
Download the file /var/backups/website-backup.tar.gz to my local Downloads folderDisconnect when done:
Please disconnect from the SSH session
Network Switch Management Tools
switch_discover_device
Discover and identify network switch device type and capabilities.
Parameters:
connectionId(required) - ID of an active SSH connectionenablePassword(optional) - Enable password for privileged mode
switch_show_interfaces
Show interface status and configuration on network switch.
Parameters:
connectionId(required) - ID of an active SSH connectioninterfaceType(optional) - Type of interfaces to showenablePassword(optional) - Enable password for privileged mode
switch_show_vlans
Show VLAN configuration and status on network switch.
Parameters:
connectionId(required) - ID of an active SSH connectionenablePassword(optional) - Enable password for privileged mode
switch_backup_config
Backup switch configuration (running or startup config).
Parameters:
connectionId(required) - ID of an active SSH connectionconfigType(optional) - Type of configuration to backupenablePassword(optional) - Enable password for privileged mode
switch_network_diagnostics
Run network diagnostics from switch (ping, traceroute).
Parameters:
connectionId(required) - ID of an active SSH connectiontarget(required) - Target IP address or hostnamediagnosticType(optional) - Type of diagnostic to runenablePassword(optional) - Enable password for privileged mode
switch_show_mac_table
Show MAC address table on network switch.
Parameters:
connectionId(required) - ID of an active SSH connectionvlan(optional) - Specific VLAN to show MAC addresses forenablePassword(optional) - Enable password for privileged mode
USB-to-Serial Console Tools
These tools enable direct console access to network devices using USB-to-Serial adapters. This is essential for initial device setup, emergency access when network connectivity is lost, or when SSH has not yet been configured.
Supported USB-to-Serial Adapters:
FTDI FT232R/FT232H (recommended - most reliable)
Prolific PL2303 (widely compatible)
Silicon Labs CP2102/CP2104 (good performance)
CH340/CH341 chipsets (budget-friendly option)
All adapters work with standard Cisco/Aruba console cables (RJ45 to DB9 or direct USB).
serial_list_ports
List available USB-to-Serial ports on the system. Automatically detects FTDI, Prolific, Silicon Labs, and CH340 adapters.
Example:
Show me all available serial portsserial_connect
Connect to a network device via USB-to-Serial console port.
Parameters:
port(required) - Serial port name (e.g., COM3 on Windows, /dev/ttyUSB0 on Linux)baudRate(optional) - Baud rate (default: 9600 for most switches)connectionId(optional) - Unique identifier for connectiondeviceType(optional) - Device type for optimal settings (cisco, aruba, generic)
Example:
Connect to my Cisco switch console on COM3serial_send_command
Send a command to network device via serial connection.
Parameters:
connectionId(required) - ID of an active serial connectioncommand(required) - Command to send to devicewaitForResponse(optional) - Wait for device responsetimeout(optional) - Response timeout in milliseconds
Example:
Send "show version" command to the console connectionserial_discover_device
Discover device type and capabilities via serial connection. Automatically identifies Cisco IOS, Cisco IOS-XE, Aruba, and generic devices.
Parameters:
connectionId(required) - ID of an active serial connection
Example:
Discover what type of device is connectedserial_list_connections
List all active serial connections.
serial_disconnect
Disconnect from a serial port.
Parameters:
connectionId(required) - ID of an active serial connection
Ubuntu Website Management Tools
The following Ubuntu server management tools are available:
ubuntu_nginx_control - Web server control (start, stop, restart, status, reload, check-config)
ubuntu_update_packages - System package updates with security-only option
ubuntu_ssl_certificate - SSL certificate management using Let's Encrypt (issue, renew, status, list)
ubuntu_website_deployment - Website deployment with automatic backup and restore
ubuntu_ufw_firewall - Firewall (UFW) management (enable, disable, allow, deny, delete)
SSH Setup & Automation Tools
These tools automate the process of configuring SSH access on network switches via console connection, enabling a smooth transition from console-only to SSH-based management.
switch_generate_ssh_config
Generate SSH configuration template for a network switch based on device type and security level.
Parameters:
deviceType(optional) - Device type: cisco, aruba (auto-detected if not specified)securityLevel(optional) - Security level: basic, secure (default: basic)hostname(required) - Switch hostnameip_address(required) - Management IP addresssubnet_mask(optional) - Subnet mask (default: 255.255.255.0)gateway(required) - Default gatewayusername(required) - SSH usernamepassword(required) - SSH password
switch_apply_ssh_config
Apply SSH configuration to a switch via an active serial console connection.
Parameters:
serialConnectionId(required) - ID of an active serial connectiondeviceType(optional) - Device type: cisco, arubahostname(required) - Switch hostnameip_address(required) - Management IP addressgateway(required) - Default gatewayusername(required) - SSH usernamepassword(required) - SSH passwordconfirmApply(required) - Must be true to proceed
switch_verify_ssh_status
Check the current SSH configuration status on a switch via serial connection.
Parameters:
serialConnectionId(required) - ID of an active serial connection
switch_test_ssh_connection
Test SSH connectivity to a newly configured switch.
Parameters:
ip_address(required) - Switch IP addressusername(required) - SSH usernamepassword(required) - SSH passwordport(optional) - SSH port (default: 22)
switch_complete_ssh_setup
Complete end-to-end SSH setup workflow via console connection. This automates the entire process of configuring SSH on a switch.
Parameters:
serialConnectionId(required) - ID of an active serial connectionhostname(required) - Switch hostnameip_address(required) - Management IP addressgateway(required) - Default gatewayusername(required) - SSH usernamepassword(required) - SSH passwordconfirmSetup(required) - Must be true to proceed
Console-to-SSH Transition Tools
console_to_ssh_transition
Complete automated workflow to transition a network switch from console-only access to SSH management. This is the recommended tool for initial switch setup.
Parameters:
port(required) - Serial port (e.g., COM3, /dev/ttyUSB0)hostname(required) - Switch hostnameip_address(required) - Management IP addressgateway(required) - Default gatewayusername(required) - SSH usernamepassword(required) - SSH passworddeviceType(optional) - Device type: cisco, aruba (auto-detected if not specified)confirmTransition(required) - Must be true to proceed
Example:
Set up SSH on my Cisco switch connected to COM3 with hostname "switch-core-01", IP 192.168.1.10, gateway 192.168.1.1, username "admin"quick_ssh_check
Quick check of SSH status on a switch via serial connection without making any changes.
Parameters:
port(required) - Serial portbaudRate(optional) - Baud rate (default: 9600)enablePassword(optional) - Enable password if required
Firmware Management Tools
These tools provide comprehensive firmware management capabilities for network switches, including version checking, firmware upload, verification, installation, and rollback preparation.
switch_check_firmware
Check the current firmware version and system information on a network switch.
Parameters:
connectionId(required) - ID of an active SSH connectionenablePassword(optional) - Enable password for privileged mode
Returns:
Current firmware version
Boot version
Device model and serial number
System uptime
Full version output
switch_check_storage
Verify available storage space on the switch before firmware upload.
Parameters:
connectionId(required) - ID of an active SSH connectionenablePassword(optional) - Enable password for privileged mode
Returns:
Flash storage information
Available space
File system details
switch_upload_firmware
Upload a firmware file to the network switch via SFTP. Supports large firmware files with 30-minute timeout.
Parameters:
connectionId(required) - ID of an active SSH connectionlocalFirmwarePath(required) - Local path to firmware fileremotePath(optional) - Remote path on switch (default: flash:/filename)enablePassword(optional) - Enable password for privileged mode
Example:
Upload firmware file ~/downloads/c2960-lanbasek9-mz.150-2.SE11.bin to the switchswitch_verify_firmware
Verify the integrity of an uploaded firmware file on the switch using MD5 checksums.
Parameters:
connectionId(required) - ID of an active SSH connectionfirmwarePath(required) - Path to firmware file on switchenablePassword(optional) - Enable password for privileged mode
Returns:
Verification status
MD5 checksum results
File information
switch_install_firmware
Install firmware on the switch and optionally reboot to apply the update.
Parameters:
connectionId(required) - ID of an active SSH connectionfirmwarePath(required) - Path to firmware file on switchenablePassword(optional) - Enable password for privileged modeautoReboot(optional) - Automatically reboot after installation (default: false)
Important: This modifies the boot configuration. Test in a lab environment first!
Example:
Install firmware flash:/c2960-lanbasek9-mz.150-2.SE11.bin and reboot the switchswitch_prepare_rollback
Prepare information needed for firmware rollback in case of issues with new firmware.
Parameters:
connectionId(required) - ID of an active SSH connectionenablePassword(optional) - Enable password for privileged mode
Returns:
Current boot configuration
Available firmware images
Rollback instructions
USB-to-Serial Console Setup
Hardware Requirements
USB-to-Serial Adapters:
FTDI-based adapters (FT232R, FT232H) - Best choice for reliability
Prolific PL2303 - Widely available and compatible
Silicon Labs CP2102/CP2104 - Good performance and stability
CH340/CH341 - Budget option, works well on most systems
Console Cables:
Cisco console cable (RJ45 to DB9 or USB)
Aruba/HP console cable (RJ45 to DB9 or USB)
Universal console cables work with most devices
Driver Installation
Windows:
FTDI drivers: Usually auto-installed, or download from ftdichip.com
Prolific drivers: Available from prolific.com.tw
Silicon Labs drivers: Download from silabs.com
CH340 drivers: Usually included in Windows 10/11, or download separately
macOS:
FTDI adapters: Usually work out-of-the-box
Other adapters: May require driver installation from manufacturer
Linux:
Most adapters work immediately with kernel drivers
FTDI, Silicon Labs, CH340: Built into kernel
Check
dmesgafter plugging in adapter to verify detection
Quick Start with Console
Connect USB-to-Serial adapter to your computer
Connect console cable from adapter to switch console port
List available ports: "Show me available serial ports"
Connect to port: "Connect to COM3 for Cisco switch"
Send commands or run automated setup
Security Notes
Store SSH private keys securely
Use key-based authentication when possible
Limit SSH access to specific IP addresses
Keep your server updated
Use strong passwords or passphrases (minimum 8 characters)
Secure physical access to console ports and USB-to-Serial adapters
Consider setting up environment variables in a
.envfile for sensitive information
Troubleshooting
Server won't start
Check that Node.js is installed:
node --versionVerify all dependencies are installed:
npm installRebuild the project:
npm run build
Connection issues
Verify SSH server is running on the target
Check firewall settings
Confirm credentials are correct
Test SSH connection manually first
Claude Desktop integration
Ensure the path in configuration is absolute
Restart Claude Desktop after configuration changes
Check Developer Console for error messages
Development
To modify or extend the server:
Edit source files in
src/Rebuild:
npm run buildTest your changes
Restart Claude Desktop or VS Code to pick up changes
Running in Development Mode
For quick testing during development:
npm run devContributing
Contributions for additional tools and features are welcome. Please feel free to submit pull requests or open issues for enhancements and bug fixes.
Credits and Attribution
This project is a fork of mixelpixx/SSH-MCP by Chris Stockslager (@mixelpixx), used and redistributed under its MIT license. The core MCP server, SSH/SFTP tooling, USB-to-Serial console support, network switch management, and the accompanying guides are his original work.
Upstream additionally received a contribution from Frank Fiegel (@punkpeye).
The upstream project is deprecated; its author's successor is SSH-Connect, a Rust rewrite.
This fork adds SSH config (~/.ssh/config) host-alias resolution, a command guard layer,
and a refactor of the core SSH tools. Full upstream commit history is preserved here, so
git log and git blame show exactly which code came from where.
See NOTICE.md for the complete provenance record.
License
MIT License — see LICENSE.
Copyright (c) 2025-2026 Chris Stockslager (mixelpixx) — original work Copyright (c) 2026 Mihir Bhadak — modifications in this fork
Available Tools
13 toolsssh_connectA
Connect to a remote server via SSH. Pass profile or host with a Host alias from ~/.ssh/config, or provide host/username/key directly.
| Name | Required | Description | Default |
|---|---|---|---|
| host | No | Hostname, IP, or Host alias from ~/.ssh/config | |
| port | No | SSH port (default: 22) | |
| profile | No | Host alias from ~/.ssh/config (e.g. Beta, Main, Cron). Case-insensitive. | |
| password | No | SSH password (if not using key-based authentication) | |
| username | No | SSH username | |
| passphrase | No | Passphrase for private key (if needed) | |
| connectionId | No | Unique identifier for this connection (defaults to profile name or ssh-<timestamp>) | |
| privateKeyPath | No | Path to private key file (if using key-based authentication) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description is the sole source of behavioral info. It describes authentication options but omits side effects (creating a persistent connection), failure conditions (unreachable host, bad credentials), or return value (connectionId). This significant gap is not covered elsewhere.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The two-sentence description is tight: first sentence states purpose, second covers principal usage patterns. No redundant text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the 8-parameter schema and no output schema, the description only partially captures the tool's behavior. It doesn't explain the return value (connectionId defaulting), when the connection is established (e.g., persistent session), or how to use it with sibling tools. The rich schema descriptions compensate for parameter semantics, but behavioral completeness is lacking.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 100% coverage, so the baseline is 3. The description adds a key clarification: you can pass either a profile or a Host alias, or provide host/username/key directly, which helps disambiguate which parameters to use together. This adds value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool connects to a remote server via SSH and specifies the supported ways to specify the target (profile, host alias, or direct host/username/key). This distinguishes it from sibling tools like ssh_exec, ssh_list_connections, and file transfer tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains how to provide connection information (via profile, host alias, or direct host/username/key) but does not explicitly discuss when to use this tool versus alternatives such as ssh_exec (which requires an existing connection) or ssh_list_connections. The usage is implied by the tool name and sibling context but not stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_disconnectB
Close an SSH connection
| Name | Required | Description | Default |
|---|---|---|---|
| connectionId | Yes | ID of an active SSH connection |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must fully disclose behavior. It states the action but does not mention consequences like terminating active sessions, idempotency, or permission requirements, which is a gap for a state-changing operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise sentence with no unnecessary words. It is perfectly sized for a simple tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with one parameter and no output schema, the description is largely sufficient. However, the lack of annotations and behavioral context about what happens when disconnecting (e.g., killing active processes) leaves minor ambiguity, making it adequate but not exemplary.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema fully documents the single parameter connectionId with a clear description, and schema description coverage is 100%. The tool description adds no additional meaning beyond what the schema already provides, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'Close' and resource 'SSH connection', making the action unambiguous. It clearly distinguishes from sibling tools like ssh_connect and ssh_list_connections.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not provide any guidance on when to use this tool, such as after completing operations or when needing to terminate a connection. It offers no exclusions or alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_download_fileB
Download a file from the remote server to a local path
| Name | Required | Description | Default |
|---|---|---|---|
| localPath | Yes | Path where the file should be saved locally | |
| remotePath | Yes | Path to the file on the remote server | |
| connectionId | Yes | ID of an active SSH connection |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It only states the basic operation and provides no details about overwrite behavior, permission requirements, binary safety, or connection prerequisites. Significant behavioral gaps remain.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, clear sentence with no wasted words. It is front-loaded with the core action and resource.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a simple tool but lacks behavioral details such as overwrite handling, connection requirement, and success/failure indicators. No output schema or annotations exist, so the description should provide more context to be fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so each parameter is documented. The description adds no extra parameter context beyond the schema, which serves as the baseline of 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific action (download) with source (remote server) and destination (local path). It distinguishes itself from siblings like ssh_upload_file (opposite direction) and ssh_read_file (reading vs transferring).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for copying files from remote to local, but it does not explicitly state when to prefer this over ssh_read_file or other alternatives. Context is clear but no exclusions or alternative references are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_execA
Execute a read-only or safe command on the remote server. Destructive commands are blocked (rm, mv, chmod, systemctl, kill, firewall tools, SQL DROP/DELETE/ALTER/TRUNCATE, and similar). Use ssh_read_file to read files instead of cat.
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | Working directory for the command | |
| command | Yes | Command to execute | |
| timeout | No | Command timeout in milliseconds | |
| connectionId | Yes | ID of an active SSH connection |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Since no annotations are provided, the description carries the full burden of behavioral disclosure. It discloses that destructive commands are blocked with examples, which is key safety behavior. However, it does not specify what happens when a blocked command is attempted (e.g., error returned) or whether the command output is returned. This is a minor gap given the absence of annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, two sentences long, and front-loaded with the primary purpose. Every sentence earns its place: the first defines the scope, the second lists blocked commands and provides an alternative for file reads. No redundancy or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has no output schema, so the description should ideally explain what is returned (e.g., stdout/stderr, exit code). It does not. While it covers safety and usage, it omits return-value behavior, which is a notable gap for a command execution tool. The completeness is adequate but not thorough.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, with each parameter having a description in the input schema. The description adds no new parameter-specific semantics beyond what the schema already provides. The mention of 'Use ssh_read_file to read files instead of cat' relates to command usage but not to parameter details, so the score remains at the baseline of 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Execute a read-only or safe command on the remote server.' It distinguishes itself from siblings by explicitly mentioning ssh_read_file for reading files and provides a concrete list of blocked commands, making the purpose specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit usage context: it is for safe commands, destructive commands are blocked, and it names an alternative tool (ssh_read_file) with the directive 'Use ssh_read_file to read files instead of cat.' This clearly tells the agent when to use this tool versus a sibling.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_list_connectionsA
List active SSH connections and Host entries from ~/.ssh/config. Call this when the user mentions a server by name (e.g. "beta server") to find the right connectionId.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of behavioral disclosure. It does reveal that the tool reads from ~/.ssh/config and lists both active connections and Host entries, which is useful context. However, it does not explicitly state whether the operation is read-only, how 'active' is determined, or what happens if the config file is missing. This is adequate but not rich.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is exactly two sentences, front-loaded with the primary action, and provides a practical usage example. Every word earns its place; there is no fluff or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (no parameters, no annotations, no output schema), the description is fairly complete. It explains what the tool lists, the source, and when to invoke it. The mention of 'find the right connectionId' hints at the output's purpose. It could additionally describe the output format, but for this simple tool, the coverage is strong.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the baseline for this dimension is 4 per the rubric. The description adds no parameter explanation because none is needed. It does provide context about what the output is used for (finding the right connectionId), which indirectly clarifies the purpose of any returned data.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'List active SSH connections and Host entries from ~/.ssh/config'. It uses a specific verb ('List'), identifies the resource (SSH connections and Host entries), and provides the source file. This distinguishes it from sibling tools like ssh_connect or ssh_exec, which perform actions rather than listing.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly tells when to use the tool: 'Call this when the user mentions a server by name (e.g. "beta server") to find the right connectionId.' This is clear contextual guidance, though it does not mention when not to use it or name alternatives. Since the task is simple and the trigger condition is well-defined, this is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_list_filesB
List files in a directory on the remote server
| Name | Required | Description | Default |
|---|---|---|---|
| remotePath | Yes | Path to the directory on the remote server | |
| connectionId | Yes | ID of an active SSH connection |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the behavioral disclosure burden. It only states the action without revealing details like whether it lists recursively, includes file metadata, or how errors are handled. For a read operation, this is a notable gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, tightly-worded sentence. It is concise, front-loaded, and free of unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no annotations and no output schema, the description should disclose what the tool returns (e.g., list of filenames, full paths, metadata) and any limitations. It does not. For a simple tool it is usable, but it leaves meaningful gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% description coverage, so baseline is 3. The description does not add meaning beyond the schema—both remotePath and connectionId are adequately defined in the schema already.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'List files in a directory on the remote server' with a specific verb and resource. It distinguishes itself from siblings like ssh_read_file and ssh_download_file by focusing on listing directory contents.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage (when you need to list remote directory contents) but does not explicitly mention alternatives or exclusions. Since there are sibling tools, more explicit guidance would be better, but the basic context is present.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_read_fileA
Read and return the contents of a file on a remote server. Use this when the user asks to explain, analyze, review, or show a file from a server. Requires an active SSH connection.
| Name | Required | Description | Default |
|---|---|---|---|
| maxBytes | No | Maximum bytes to read (default: 1048576) | |
| remotePath | Yes | Absolute path to the file on the remote server | |
| connectionId | Yes | Host alias from ~/.ssh/config (e.g. "Beta") or an active connection ID |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses the read-only nature implicitly and the active connection requirement, but it doesn't mention potential truncation due to maxBytes, permission errors, or what happens if the file is missing. This is a minimal but not comprehensive disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise: two sentences that front-load the purpose and immediately provide usage context. Every word earns its place with no fluff or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple 3-parameter read tool with no output schema, the description covers purpose, usage, and a prerequisite. It omits return-format details and error behavior, but given the tool's simplicity and full schema coverage, it is sufficiently complete for an agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds no additional parameter-level detail beyond what the schema already provides, so no extra credit is warranted.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Read and return the contents of a file on a remote server.' It uses a specific verb and resource, and differentiates from siblings by explicitly mentioning use cases like 'explain, analyze, review, or show a file' versus downloading.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It provides explicit guidance with 'Use this when the user asks to explain, analyze, review, or show a file from a server' and notes a prerequisite ('Requires an active SSH connection'). However, it doesn't explicitly mention alternatives or when not to use it, which would earn a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_upload_fileB
Upload a file to the remote server
| Name | Required | Description | Default |
|---|---|---|---|
| localPath | Yes | Path to the local file | |
| remotePath | Yes | Path where the file should be saved on the remote server | |
| connectionId | Yes | ID of an active SSH connection |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It does not state whether the upload overwrites existing files, requires an active connection, or has any side effects on the remote server. The description is too terse to convey these important behaviors.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no wasted words. It is appropriately front-loaded, stating the core action immediately, and is easily parsed by an agent.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple file upload tool with fully described parameters, the description is minimally viable. However, it lacks behavioral context such as overwrite policy, required connection state, and any error conditions, which could affect an agent's invocation. The absence of an output schema means description should clarify return values, but it does not.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema provides 100% coverage with clear descriptions for all three parameters (localPath, remotePath, connectionId). The description adds no additional parameter semantics beyond what the schema already states, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Upload'), the object ('a file'), and the destination ('remote server'), which is specific and distinguishes this tool from siblings like ssh_download_file and ssh_read_file. The verb-resource pairing is unambiguous and matches the tool's name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives such as ssh_download_file or ssh_exec. It also does not mention prerequisites like having an active SSH connection, though the schema hints at this via connectionId.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ubuntu_nginx_controlC
Control Nginx web server on Ubuntu
| Name | Required | Description | Default |
|---|---|---|---|
| sudo | No | Whether to run the command with sudo (default: true) | |
| action | Yes | Action to perform (start, stop, restart, status, reload, check-config) | |
| connectionId | Yes | ID of an active SSH connection |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of disclosing behavioral traits. It only states 'Control Nginx web server on Ubuntu' without mentioning that actions like start, stop, or reload mutate system state, that sudo is likely involved, or what the output/return value looks like. This is inadequate for a service-control tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single short sentence with no wasted words, and the key resource ('Nginx') is front-loaded. However, it is so sparse that it sacrifices informative value, though that is not purely a conciseness issue. It could benefit from listing the actions, but as written it is structurally efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema and no annotations, the description does not explain the operational context: it doesn't mention that it uses an SSH connection, that some actions are destructive, or how results are returned. Given the sibling tools, an agent might infer the domain, but the description alone is insufficient for confident invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%: each parameter is described, including the allowed actions for the 'action' parameter. The tool description adds no extra semantic meaning beyond what the schema already provides, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses the vague verb 'Control' but identifies a specific resource: 'Nginx web server on Ubuntu'. It doesn't enumerate the specific operations (start, stop, reload, etc.), making the purpose broad. It is distinguishable from sibling tools like ssh_exec because it targets Nginx specifically, but the verb lacks precision.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives such as ssh_exec or other ubuntu_* tools. There is no mention of prerequisites (e.g., Nginx installed, active SSH connection) or scenarios where this tool is preferred. Usage is only implied by the tool's name and the presence of sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ubuntu_ssl_certificateC
Manage SSL certificates using Let's Encrypt on Ubuntu
| Name | Required | Description | Default |
|---|---|---|---|
| sudo | No | Whether to run the command with sudo (default: true) | |
| No | Email address for Let's Encrypt notifications (required for issue) | ||
| action | Yes | Action to perform (issue, renew, status, list) | |
| domain | No | Domain name for the certificate (required for issue and renew) | |
| webroot | No | Web root path for domain verification (default: /var/www/html) | |
| connectionId | Yes | ID of an active SSH connection |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must disclose behavioral traits. It doesn't mention that this tool modifies the server's certificate store, requires root/sudo, or makes network requests to Let's Encrypt. The vague verb 'Manage' gives no safety or side-effect information.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one short sentence, making it concise and front-loaded. However, it is so generic that it borders on under-specification, repeating the tool's name without meaningful value. It earns a middle score for brevity but lacks substance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema and no annotations, the description is the only narrative source for expected behavior. It doesn't explain return values, error conditions, or effects on the system. The schema helps with parameters, but the description is insufficient for a tool that can issue and renew certificates.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema documents all six parameters with descriptions (100% coverage), so parameter semantics are already provided programmatically. The description adds no additional meaning beyond what the schema contains.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description identifies the resource (Let's Encrypt SSL certificates on Ubuntu) and implies management operations, but the verb 'Manage' is broad and doesn't specify concrete actions like issue, renew, status, or list. It is clear enough to distinguish from sibling tools (which handle SSH, nginx, firewall), but lacks precision for a high score.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool instead of alternatives like ubuntu_nginx_control or ssh_exec. It doesn't mention prerequisites (e.g., domain DNS pointing to server, HTTP server running for webroot validation) or exclude any cases.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ubuntu_ufw_firewallC
Manage Ubuntu Uncomplicated Firewall (UFW)
| Name | Required | Description | Default |
|---|---|---|---|
| from | No | Source IP address or network | |
| port | No | Port number or service name (e.g., 80, 443, ssh, http) | |
| sudo | No | Whether to run the command with sudo (default: true) | |
| action | Yes | Action to perform (enable, disable, status, allow, deny, delete, reset) | |
| protocol | No | Protocol (tcp, udp) | |
| connectionId | Yes | ID of an active SSH connection |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations to rely on, the description fails to disclose important behavioral traits: actions are mutating and high-risk (e.g., deny could lock out the SSH session), sudo may be required (though a sudo parameter exists), and firewall state changes persist. The word 'manage' does not convey the potential for disruption.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence with no filler. It efficiently communicates the tool's general purpose, though it is minimal. It earns its place without being verbose, but could be slightly more informative without sacrificing concision.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (multiple actions, unclear safety implications, no output schema, no annotations), the description is far from complete. It lacks guidance on rule syntax, what 'delete' or 'reset' entails, and any warnings. The schema covers parameters but not operational context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description adds no parameter meaning, but the schema provides comprehensive descriptions for all 6 properties (100% coverage). The action field enumerates possible values, and port/protocol descriptions are clear, so the description's lack of parameter detail is not a major gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the resource (Ubuntu UFW) and a managing action. It distinguishes from siblings like ssh_exec or nginx_control, though 'manage' is somewhat broad. The schema's action parameter grounds the specific operations, making the purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives like ssh_exec, nor does it note prerequisites such as an active SSH connection (connectionId required). It neither mentions when to use it nor when not to, leaving the agent without decision context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ubuntu_update_packagesC
Update system packages on Ubuntu
| Name | Required | Description | Default |
|---|---|---|---|
| sudo | No | Whether to run the command with sudo (default: true) | |
| upgrade | No | Whether to upgrade packages after update (default: true) | |
| autoremove | No | Whether to remove unused packages after update (default: false) | |
| connectionId | Yes | ID of an active SSH connection | |
| securityOnly | No | Whether to update only security packages (default: false) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure. It states 'update system packages' but does not explain that this likely runs apt-get update/upgrade, may require sudo, or could modify the system and reboot services. Side effects are undisclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence with no wasted words. However, it is extremely brief and omits useful context that could be included without bloating the text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 5 parameters, no output schema, and no annotations, the description is under-specified. It does not explain what 'update' entails, the role of connectionId, or what the tool returns (e.g., command output). The schema provides parameter details, but overall context is lacking.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema provides descriptions for 100% of the 5 parameters, including sudo, upgrade, autoremove, connectionId, and securityOnly. The description adds no additional parameter semantics beyond what the schema already conveys, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear action ('Update') and resource ('system packages') with a platform qualifier ('on Ubuntu'). It distinguishes itself from sibling tools like nginx_control or ssh_exec, though it relies on the name for full distinction.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided about when to use this tool versus alternatives such as ssh_exec for running apt commands manually. There is no mention of prerequisites, context, or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ubuntu_website_deploymentC
Deploy website files and create backups on Ubuntu
| Name | Required | Description | Default |
|---|---|---|---|
| sudo | No | Whether to run the command with sudo (default: true) | |
| action | Yes | Action to perform (deploy, backup, restore) | |
| localPath | No | Local path to the website files for deployment | |
| backupPath | No | Path to store backups (default: /var/backups/websites) | |
| remotePath | No | Remote path where the website is located (default: /var/www/html) | |
| connectionId | Yes | ID of an active SSH connection | |
| createBackup | No | Whether to create a backup before deployment (default: true) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
There are no annotations, so the description carries full responsibility for disclosing behavioral traits. It fails to mention that the tool may overwrite remote files, run with sudo, require an active connection, or that 'restore' modifies existing site state. It also does not explain the backup behavior or implications of the 'createBackup' default. This is a significant transparency gap for a tool with mutating actions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no fluff, but it is under-specified for a tool with 7 parameters and 3 distinct actions. It is concise in the sense of being short, but it omits required function details, so it is not appropriately sized for the tool's complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (7 parameters, 3 actions, no output schema, no annotations), the description is severely incomplete. It only mentions deploy and backup, omits restore, connection requirements, default paths, and behavior. An agent would have to rely on parameter descriptions alone to understand how to use this tool effectively.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so every parameter already has a description. The tool description adds minimal extra meaning by mentioning 'deploy' and 'backups', which loosely maps to the action and createBackup parameters, but it does not clarify the meaning of 'restore' or the roles of path parameters. Baseline 3 is appropriate because the schema already does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear verb and resource: 'Deploy website files and create backups on Ubuntu'. This differentiates it from generic SSH file tools, though it omits the 'restore' action available in the schema. The name and description together make the tool's primary purpose evident.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is given for when to use this tool vs. alternatives like ssh_upload_file, ssh_exec, or other ubuntu_* tools. There are no prerequisites mentioned (e.g., active SSH connection) or exclusions, leaving the agent to infer usage from the name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
13 tool updates
v1.0.0- First observed
ssh_connect - First observed
ssh_disconnect - First observed
ssh_download_file - First observed
ssh_exec - First observed
ssh_list_connections - First observed
ssh_list_files - First observed
ssh_read_file - First observed
ssh_upload_file - First observed
ubuntu_nginx_control - First observed
ubuntu_ssl_certificate - First observed
ubuntu_ufw_firewall - First observed
ubuntu_update_packages - First observed
ubuntu_website_deployment
TDQS
Scored across 13 tools
Each tool targets a distinct operation: connection management, file transfer, file reading, command execution, and specific Ubuntu admin tasks. The descriptions clearly differentiate between reading a file and executing a command, and between downloading and reading.
General SSH tools follow a consistent ssh_verb_noun pattern (e.g., ssh_list_files, ssh_upload_file), but Ubuntu tools mix patterns: some are noun_verb (ubuntu_nginx_control) and others are noun phrases without a verb (ubuntu_ssl_certificate, ubuntu_website_deployment). This creates two inconsistent naming conventions within the same server.
13 tools is well within the ideal range, covering both core SSH operations and a reasonable set of Ubuntu server management tasks without being overwhelming.
The SSH operations cover connect/disconnect, file transfer, file listing/reading, and safe command execution, which is quite complete. The Ubuntu tools cover common web server management tasks (Nginx, SSL, deployment, firewall, updates), though a few extras like user management or service restart could be missing but are not critical gaps.
Maintenance
Related MCP Connectors
Scoped, audited SSH exec, sessions, and SFTP on your saved servers without exposing credentials
Secure tunneling, reverse proxy and remote access for local applications.
Run commands and read/write files on your servers over Termalin's keyless tunnels (hosted MCP).
Remote shell and detached long-running jobs on your own machines — no SSH, open ports or VPN.
Related MCP Servers
- AlicenseAqualityDmaintenanceEnables secure SSH connections to multiple remote servers with support for command execution, file transfers (SFTP), directory listing, and both password and key-based authentication.7MIT
- AlicenseAqualityDmaintenanceEnables remote server management through SSH and SFTP, supporting command execution, file transfers, and interactive shell sessions. It allows for multiple concurrent connections using either password or SSH key authentication.119 npm4MIT
- FlicenseNot gradedqualityBmaintenanceEnables remote shell control of Linux and network devices via SSH/Telnet, with session management and file transfer capabilities.-
- FlicenseNot gradedqualityCmaintenanceEnables remote server management via SSH, including command execution, file transfer (SFTP), and interactive shell sessions, with support for multiple hosts.-