Agent SSH MCP
Enables port forwarding to expose a remote PostgreSQL server locally, allowing local clients to connect to the remote database.
Commands are run inside a tmux session, allowing users to attach and observe command execution in real-time.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Agent SSH MCPstart session with my-server and run 'df -h'"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Agent SSH MCP
MCP server for persistent SSH sessions with tmux integration, port forwarding, and SFTP file writes — built for AI agent workflows.
Based on ssh-mcp-sessions by Justin Fry (MIT), with significant enhancements for agent reliability.
What's improved over the original
The original fryjustinc/ssh-mcp-sessions provides 8 basic tools that execute commands directly in a hidden ssh2 shell buffer. This repo is a significant rework:
Architecture changes
Original | This repo |
Commands run in a hidden ssh2 shell; output captured via in-memory buffer | Commands run inside a tmux session ( |
Single end marker: | Dual start+end markers polled via |
No reconnect logic — connection loss kills the session | Auto-reconnects on next command; keepalive every 30 s |
No file transfer | SFTP: |
No port forwarding |
|
New tools added
Tool | Purpose |
| (Re)initialize tmux on an existing session |
| Upload local file to remote via SFTP |
| Download remote file to local via SFTP |
| Write text content directly via SFTP — no shell, no quoting issues, no heredoc |
| Forward a local TCP port to a remote host:port |
| Stop a port forward tunnel |
Reliability fixes
Issue | Root cause | Fix |
Captured output contained entire pane history | End marker regex required a preceding | Regex changed to `endMarker(\d+)(?:\n |
Long sessions accumulated large scrollback, slowing polling |
|
|
heredoc ( | tmux waits for EOF input that never arrives | Detected and rejected with a helpful error |
exit code | Timeout and true failure both returned the same code | Timeout now returns |
Related MCP server: mcp-remote-ssh
Installation
npm install -g agent-ssh-mcpOr run without installing:
npx agent-ssh-mcpMCP Client Configuration
Add to your MCP client config (Claude Desktop, Claude Code, Cursor, etc.):
{
"mcpServers": {
"ssh": {
"command": "npx",
"args": ["agent-ssh-mcp"]
}
}
}Claude Desktop — ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows)
Claude Code / VS Code — .vscode/settings.json:
{
"claude.mcpServers": {
"ssh": { "command": "npx", "args": ["agent-ssh-mcp"] }
}
}Cursor — ~/Library/Application Support/Cursor/mcp.json (macOS)
Host Configuration
Hosts are stored in ~/.ssh-mcp/hosts.json, created automatically on first use.
Add a host
{
"tool": "add-host",
"host_id": "my-server",
"host": "1.2.3.4",
"port": 22,
"username": "root",
"password": "optional",
"keyPath": "~/.ssh/id_rsa"
}Authentication priority: password → private key → SSH agent (SSH_AUTH_SOCK).
Tools Reference
Session lifecycle
Tool | Parameters | Description |
|
| Save SSH host config |
| — | List all saved hosts |
|
| Update host config |
|
| Delete host config |
|
| Connect and auto-initialize tmux |
| — | Show active sessions with uptime |
|
| Disconnect and clean up |
|
| (Re)initialize tmux on an existing session |
Command execution
Tool | Parameters | Description |
|
| Run a command; auto-routes through tmux when available |
Note: Do not use tmux send-keys manually — exec handles tmux routing automatically.
Avoid heredoc syntax (<< EOF). Use write-remote-file instead.
File transfer
Tool | Parameters | Description |
|
| Upload local file via SFTP (preferred for large/binary files) |
|
| Download remote file via SFTP |
|
| Write text content directly via SFTP — handles special characters, no shell quoting issues |
Port forwarding
Tool | Parameters | Description |
|
| Forward |
|
| Stop a port forward tunnel |
Example — access a remote PostgreSQL locally:
{
"tool": "forward-port",
"session_id": "my-session",
"local_port": 15432,
"remote_host": "127.0.0.1",
"remote_port": 5432
}Then connect to postgresql://user:pass@127.0.0.1:15432/db.
Typical Agent Workflow
1. add-host → save target server
2. start-session → SSH connect + tmux init (returns session_id)
3. exec → run commands (output is clean, no scrollback pollution)
4. write-remote-file / upload-file → write files reliably
5. forward-port → expose remote services locally if needed
6. close-session → clean upSessions auto-close after 2 hours of inactivity.
tmux Observability
Every command is executed inside a tmux session named ai. You (or the user) can attach to watch in real time:
ssh root@<host>
tmux attach -t aiBuilding from Source
git clone https://github.com/xcdd/Agent-SSH-MCP
cd Agent-SSH-MCP
npm install
npm run buildRun tests:
npm testSecurity Notes
~/.ssh-mcp/hosts.jsonmay contain passwords — treat it as sensitive (chmod 600).Prefer key-based or SSH agent authentication.
Sessions inherit all privileges of the SSH user.
License
MIT — see LICENSE.
Original work © 2025 Justin Fry. Modifications © 2026 xcdd.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Latest Blog Posts
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/xcdd/Agent-SSH-MCP'
If you have feedback or need assistance with the MCP directory API, please join our Discord server