Skip to main content
Glama
cfdude

Mac Shell MCP Server

deny_command

Reject pending macOS terminal commands with a reason to maintain security controls in the Mac Shell MCP Server.

Instructions

Deny a pending command

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
commandIdYesID of the command to deny
reasonNoReason for denial

Implementation Reference

  • The main execution handler for the 'deny_command' tool. Validates input with Zod schema, calls CommandService.denyCommand, and returns a success or error response.
    private async handleDenyCommand(args: unknown) {
      const schema = z.object({
        commandId: z.string(),
        reason: z.string().optional(),
      });
    
      const { commandId, reason } = schema.parse(args);
    
      try {
        this.commandService.denyCommand(commandId, reason);
    
        return {
          content: [
            {
              type: 'text',
              text: `Command denied${reason ? `: ${reason}` : ''}`,
            },
          ],
        };
      } catch (error) {
        if (error instanceof Error) {
          return {
            content: [
              {
                type: 'text',
                text: `Command denial failed: ${error.message}`,
              },
            ],
            isError: true,
          };
        }
        throw error;
      }
    }
  • The input schema definition for the 'deny_command' tool, registered in the ListTools response.
    {
      name: 'deny_command',
      description: 'Deny a pending command',
      inputSchema: {
        type: 'object',
        properties: {
          commandId: {
            type: 'string',
            description: 'ID of the command to deny',
          },
          reason: {
            type: 'string',
            description: 'Reason for denial',
          },
        },
        required: ['commandId'],
      },
  • src/index.ts:238-239 (registration)
    The dispatch/registration of the 'deny_command' handler in the CallToolRequestSchema switch statement.
    case 'deny_command':
      return await this.handleDenyCommand(args);
  • The supporting denyCommand method in CommandService that handles the actual denial logic: removes from pending, emits event, and rejects the promise.
      public denyCommand(commandId: string, reason: string = 'Command denied'): void {
        const pendingCommand = this.pendingCommands.get(commandId);
        if (!pendingCommand) {
          throw new Error(`No pending command with ID: ${commandId}`);
        }
    
        // Remove from pending queue
        this.pendingCommands.delete(commandId);
    
        // Emit event for denied command
        this.emit('command:denied', { commandId, reason });
    
        // Reject the original promise
        pendingCommand.reject(new Error(reason));
      }
    }

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/cfdude/mac-shell-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server