Shell MCP Server
Shell MCP 서버
안전한 셸 명령 실행 기능을 제공하는 모델 컨텍스트 프로토콜(MCP)의 Node.js 구현입니다. 이 서버를 통해 AI 모델은 보안 기능이 내장된 제어된 환경에서 셸 명령을 실행할 수 있습니다. Claude Desktop 과 쉽게 통합되어 Claude를 셸에 연결할 수 있습니다.
특징
MCP 호환 서버 구현
블랙리스트 보호를 통한 안전한 명령 실행
명령 존재 검증
표준 I/O 기반 전송
오류 처리 및 정상적인 종료
Related MCP server: MCP Shell Server
설치
npx mcp-shell 실행합니다.
Claude Desktop에 추가하려면 npx mcp-shell config 실행하세요. 또는 설정 파일에 npx -y mcp-shell 직접 추가하세요.
Claude Desktop을 시작(또는 재시작)하면 랜딩 페이지에 MCP 도구가 나열되어 있어야 합니다.
보안 기능
서버는 여러 가지 보안 조치를 구현합니다.
명령 블랙리스트
위험한 시스템 명령 실행을 방지합니다.
중요 시스템 수정에 대한 액세스를 차단합니다.
파일 시스템 파괴로부터 보호합니다
권한 상승을 방지합니다
명령 검증
실행 전에 명령의 존재 여부를 확인합니다.
블랙리스트에 대해 검증합니다
잘못된 명령에 대한 명확한 오류 메시지를 반환합니다.
사용 가능한 도구
서버는 하나의 도구를 제공합니다.
실행 명령
쉘 명령을 실행하고 출력을 반환합니다.
입력 스키마:
지엑스피1
응답:
성공: 명령 출력을 일반 텍스트로 표시
오류: 일반 텍스트로 된 오류 메시지
블랙리스트에 등록된 명령
보안을 위해 다음 명령 범주는 차단되었습니다.
파일 시스템 파괴 명령(rm, rmdir, del)
디스크/파일 시스템 명령(format, mkfs, dd)
권한/소유권 명령(chmod, chown)
권한 상승 명령(sudo, su)
코드 실행 명령(exec, eval)
시스템 통신 명령(쓰기, wall)
시스템 제어 명령(종료, 재부팅, 초기화)
오류 처리
서버에는 포괄적인 오류 처리 기능이 포함되어 있습니다.
명령을 찾을 수 없음 오류
블랙리스트에 등록된 명령 오류
실행 오류
MCP 프로토콜 오류
SIGINT에 대한 정상적인 종료
구현 세부 사항
서버는 다음을 사용하여 구축되었습니다.
모델 컨텍스트 프로토콜 SDK
통신을 위한 StdioServerTransport
명령 실행을 위한 execa
명령 검증을 위한 command-exists
개발
보안 설정을 수정하려면 다음을 수행하세요.
차단된 명령을 조정하려면
BLACKLISTED_COMMANDS세트를 편집하세요.validateCommand함수를 수정하여 추가 검증 규칙을 추가합니다.CallToolRequestSchema핸들러에서 명령 구문 분석 논리를 향상시킵니다.
Available Tools
1 toolrun_commandC
Run a shell command
| Name | Required | Description | Default |
|---|---|---|---|
| command | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden but only states the action without disclosing behavioral traits. It doesn't cover critical aspects like whether the command runs locally or remotely, if it requires elevated privileges, potential side effects (e.g., file modifications), error handling, or output format. This leaves significant uncertainty for safe and effective use.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise with just three words, front-loaded and zero waste. It efficiently conveys the core action without unnecessary elaboration, making it easy to parse quickly. However, this conciseness comes at the cost of completeness, as noted in other dimensions.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of running shell commands (which can be high-risk with mutations and side effects), no annotations, no output schema, and low parameter coverage, the description is incomplete. It lacks essential context such as execution environment, security implications, error responses, and usage scenarios, making it inadequate for safe agent operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 1 parameter with 0% description coverage, and the description adds no meaning beyond the schema. It doesn't explain what the 'command' parameter should contain (e.g., syntax, examples, allowed commands) or any constraints. Since schema coverage is low, the description fails to compensate, leaving the parameter poorly documented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Run a shell command' clearly states the action (run) and target (shell command), providing a basic understanding of purpose. However, it lacks specificity about what kind of shell command or execution environment, making it somewhat vague. Since there are no sibling tools, differentiation isn't required, but the description could be more detailed.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool, such as for administrative tasks, automation, or debugging. It doesn't mention prerequisites like permissions, security considerations, or alternatives, leaving the agent with no context for decision-making. With no sibling tools, this is less critical but still a gap.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
1 tool update
v1.0.0- First observed
run_command
TDQS
With only one tool, there is no possibility of ambiguity or overlap between tools. The single tool 'run_command' has a clear and distinct purpose that cannot be confused with any other tool in this set.
The naming is perfectly consistent as there is only one tool. It follows a clear verb_noun pattern ('run_command'), and with no other tools to compare against, there is no inconsistency in naming conventions.
A single tool is too few for a server named 'Shell MCP Server', which implies broader shell-related functionality. This minimal set feels thin and under-scoped, as it only covers basic command execution without supporting common shell operations like listing files, checking processes, or managing environment variables.
The tool set is severely incomplete for a shell server. While 'run_command' covers arbitrary command execution, it lacks tools for specific shell tasks (e.g., file operations, process management, directory navigation), leaving significant gaps that will likely cause agent failures when trying to perform common shell workflows.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
A comprehensive Model Context Protocol (MCP) server that enables AI assistants to interact with yo…
Operate Linux, macOS and Windows from your LLM. Every action runs through an auditable allowlist.
A Model Context Protocol server for Wix AI tools
A paid remote MCP for OpenAI Codex context compressor, built to return verdicts, receipts, usage log
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceA Model Context Protocol server that allows LLMs to execute shell commands and receive their output in a controlled manner.7MIT
- FlicenseNot gradedqualityDmaintenanceA secure interface that enables language models to execute shell commands on the host operating system through the Model Context Protocol.1-
- FlicenseAqualityDmaintenanceA local Model Context Protocol server that allows LLMs to securely execute shell commands on remote Linux and Windows systems via SSH connections.6252-
- FlicenseBqualityDmaintenanceA Model Context Protocol server that enables LLM applications to safely execute shell commands with error handling and timeout settings.1-
Appeared in Searches
- Bash shell scripting and command line resources
- Security testing and vulnerability assessment of MCP Server execution functions
- Security vulnerabilities and risks in MCP Server execution methods
- Security vulnerabilities in MCP Server related to subprocess execution
- NestJS framework information and resources
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/hdresearch/mcp-shell'
If you have feedback or need assistance with the MCP directory API, please join our Discord server