mcp-ssh
This server provides SSH remote management tools for Windows, Linux, and macOS targets.
Test SSH connections: probe connectivity, detect OS, and output RDP bootstrap info if unreachable.
Execute remote commands: run commands/scripts with automatic Base64 encoding for PowerShell, long-command fallback via SFTP, and Windows Session 0 bypass (
desktop: true) to launch GUI apps on the interactive desktop.Transfer files: upload and download files securely via SFTP.
Set up passwordless SSH: deploy
ed25519public keys to Linux or Windows hosts and verify key-based login.Revoke passwordless access: remove a specific public key or clear all authorized keys.
Manage known hosts: clear stale or changed host entries from
~/.ssh/known_hosts.Generate Windows OpenSSH bootstrap: create a one-liner PowerShell script to install OpenSSH server via RDP.
List SSH profiles: read stored profiles from
~/.sshctl/profiles.json.Authentication and performance: support password/private key auth with environment variable resolution, and connection reuse with idle timeouts.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@mcp-sshSSH into 192.168.1.50 and rundf -h"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
sshctl
A unified CLI and Model Context Protocol (MCP) server for cross-platform SSH remote execution, passwordless key management, Windows Session 0 interactive desktop process launching, and SFTP file transfers.
Architecture
Terminal / Human (CLI) AI Agent (Claude / Antigravity)
│ │
▼ ▼
sshctl (bin/sshctl.js) MCP Protocol (stdio JSON-RPC)
│ │
└──────────────────┬──────────────────────┘
▼
Core SSH Engine
│
┌───────────────┼───────────────┐
▼ ▼ ▼
Connection Pool PowerShell/UTF-16LE SFTP Channel
(60s idle reuse) (Session 0 / 8K limit) (FastPut / FastGet)
│ │ │
└───────────────┼───────────────┘
▼
Remote Target Host
(Windows / Linux / macOS)Related MCP server: SSH MCP Server
Features
Dual-Mode: Run interactively via CLI (
sshctl) or as an automated MCP server (sshctl mcp).Zero Local Client Shell Dependencies: Pure TypeScript with
ssh2. Does not require WSL, Git Bash,sshpass,iconv, or localsshbinaries.Automated PowerShell Command Encoding: Converts Windows command bodies to Base64 UTF-16LE strings (
powershell.exe -EncodedCommand), removing quote escaping errors.Session 0 Desktop Handoff (
--desktop): Launches Windows GUI applications directly onto the logged-in user's interactive desktop (Session 1) via Task Scheduler.8,191-Character Auto-Fallback: Automatically detects when PowerShell payloads exceed the
cmd.execommand length limit, uploading a temporary script via SFTP with execution and cleanup.Connection Pooling: Reuses SSH2 connections per
user@host:portwith 60-second idle timeouts.Profiles & Secret Resolution: Store targets in
~/.sshctl/profiles.json, resolving environment variables (env:VAR_NAME) without storing plain text passwords in chat logs.
Quick Start
1. Build
cd claude/sshctl
npm install
npm run build
npm test # 43 unit and integration tests2. CLI Usage
# List profiles
sshctl profiles
# Test connectivity and probe remote OS
sshctl test my-profile
# Run remote command
sshctl exec my-profile "hostname && dir"
# Launch GUI app on Windows active desktop
sshctl exec my-profile "calc.exe" --desktop
# Upload/Download files via SFTP
sshctl push my-profile local.txt /remote/path/file.txt
sshctl pull my-profile /remote/path/file.txt local.txt
# Generate Windows OpenSSH installer 1-liner
sshctl bootstrap-rdp --admin3. Register as MCP Server
sshctl implements the standard Model Context Protocol (MCP). Any MCP client automatically discovers all tools, arguments, and prompts over stdio JSON-RPC without needing external configuration files.
Claude Code CLI
claude mcp add sshctl -- node "/path/to/sshctl/dist/index.js"Claude Desktop (claude_desktop_config.json) / Cursor (~/.cursor/mcp.json)
{
"mcpServers": {
"sshctl": {
"command": "node",
"args": ["/path/to/sshctl/dist/index.js"]
}
}
}Google Antigravity
To enable Antigravity's lazy-loading schema discovery:
npm run export:schemasThis automatically writes tool definition JSONs and instructions.md to ~/.gemini/antigravity/mcp/sshctl/.
MCP Tools Reference
ssh_list_profiles: List profiles from~/.sshctl/profiles.json.ssh_test_connection: Probe SSH connectivity & detect target OS.ssh_clear_known_hosts: Clear stale entries from~/.ssh/known_hosts.ssh_exec: Execute remote commands with Base64 UTF-16LE, Session 0 bypass (desktop: true), and output capping.ssh_setup_passwordless: Deployed25519key to Linux (~/.ssh/authorized_keys) or Windows (administrators_authorized_keyswith strict ACLs).ssh_remove_passwordless: Revoke public key or clear all keys.ssh_upload_file: Upload file via SFTP.ssh_download_file: Download file via SFTP.ssh_generate_rdp_bootstrap: Generate OpenSSH installation 1-liner.
Technical Documentation
For details on PowerShell Base64 encoding, the 8,191-character boundary fallback, Session 0 bypass mechanism, and error code tables, see docs/REFERENCE.md.
License
MIT
Available Tools
8 toolsssh_clear_known_hostsA
Remove stale/changed host entries from local ~/.ssh/known_hosts file.
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | Hostname or IP address to remove from known_hosts |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It states the action and target but omits critical details such as whether the removal is irreversible, whether it deletes only exact matches, and how missing host entries are handled. For a destructive operation, this is insufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one concise sentence with no filler, front-loading the action and target. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
While the schema covers the parameter, the description lacks details about edge cases and return behavior. With no output schema, it could mention success indications or the irreversible nature of the deletion. The tool is simple, but some gaps remain in fully understanding expected behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema fully describes the single 'host' parameter with a clear description. The tool description adds no additional semantics beyond restating that it removes entries for that host. Baseline 3 is appropriate when schema coverage is 100%.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool's purpose: removing stale or changed host entries from the local known_hosts file. It specifies the exact resource and action, distinguishing it from siblings focused on connection, execution, and file transfer.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage when host keys are stale or changed, but does not explicitly state when not to use this tool or point to alternatives. The context is clear enough for an agent to infer appropriate usage, but it lacks explicit exclusion guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_download_fileB
Download a remote file to local host via SFTP channel.
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | Target host IP or domain | |
| port | No | SSH port | |
| password | No | SSH password | |
| username | Yes | SSH username | |
| localPath | Yes | Local destination path | |
| remotePath | Yes | Remote file path to download | |
| privateKeyPath | No | Path to private key |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It only says 'Download a remote file,' which implies a read from remote and write to local, but it does not disclose whether existing local files are overwritten, whether directories are created, or what error conditions might arise (e.g., authentication failures). This is a significant gap for a file transfer operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that is front-loaded with the primary action and target. It is appropriately sized and contains no wasteful filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 7 parameters, no output schema, and no annotations, the description is too sparse. It does not indicate what the tool returns (e.g., success message, file size), how authentication works, or any edge cases. The tool's complexity demands more context than a simple one-liner.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all 7 parameters. The description adds no additional parameter semantics. The baseline score of 3 is appropriate because the schema handles the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Download') and the resource ('a remote file'), and adds the transport mechanism ('via SFTP channel'). This distinguishes it from sibling tools like ssh_upload_file (opposite direction) and ssh_exec (command execution).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no explicit guidance on when to use this tool versus alternatives. It does not mention that it is for file transfer rather than command execution, nor does it note authentication prerequisites (e.g., password vs. private key). No exclusions or alternative tool recommendations are given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_execA
Execute remote commands over SSH. Supports Base64 UTF-16LE, Session 0 bypass (--desktop), 8191 char limit bypass, and dual auth.
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | Target host IP or domain | |
| port | No | SSH port (default 22) | |
| command | Yes | Command or script body to execute remotely | |
| desktop | No | Windows only: launch process in active GUI user session (Session 1) | |
| session | No | Windows only: specific session ID for desktop launch | |
| password | No | SSH password | |
| targetOs | No | Target OS (default auto-detect) | auto |
| username | Yes | SSH username | |
| privateKeyPath | No | Path to private key file |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the transparency burden. It discloses specific technical behaviors such as Base64 UTF-16LE encoding, Session 0 bypass, 8191-character limit bypass, and dual authentication, which go beyond a simple statement of purpose and provide useful context about the tool's operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that front-loads the main purpose and then lists key capabilities in a compact manner. Every word contributes meaningful information, with no fluff or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is complex (9 parameters, no output schema, no annotations) and the description omits crucial information such as return values, exit codes, error handling, and authentication details beyond the vague 'dual auth.' The description does not fully equip an agent to understand the tool's complete behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description enriches parameter understanding by explaining that Base64 UTF-16LE relates to command encoding and that Session 0 bypass relates to desktop session handling, adding value beyond the schema's individual parameter descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Execute remote commands over SSH.' It distinguishes itself from siblings like file transfer and connection testing by focusing on command execution, making its purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for running commands remotely but does not explicitly state when to use this tool versus alternatives. It provides no exclusions or comparisons with sibling tools, leaving the usage context inferred.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_generate_rdp_bootstrapA
Generate 1-liner PowerShell script to copy-paste into an RDP session to install OpenSSH server on Windows target.
| Name | Required | Description | Default |
|---|---|---|---|
| host | No | Target host IP or hostname | |
| userType | No | Type of Windows user logged into RDP: admin (Elevated PowerShell) or user (Standard PowerShell triggering UAC) | admin |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It transparently discloses the core behavior (generates a PowerShell install script), but doesn't elaborate on how the host and userType parameters shape the script, or whether the script triggers side effects like firewall changes or reboots. Some secondary behavioral details remain opaque.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence with zero redundancy. Every word adds information: the action ('Generate'), the format ('1-liner PowerShell script'), the delivery channel ('copy-paste into RDP'), and the goal ('install OpenSSH server').
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the essential output and purpose for a simple generation tool with no required parameters and a rich schema. It doesn't explicitly explain how this tool fits into the broader SSH workflow (e.g., enabling later ssh_* operations), but that is inferable from sibling names and the stated goal.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already provides high coverage (100%), with clear descriptions for both parameters: host as 'Target host IP or hostname' and userType as an enum with admin/user meanings. The description adds no additional parameter semantics, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Generate') and resource ('1-liner PowerShell script to install OpenSSH server'), clearly distinguishing it from sibling tools that test connections, execute commands, or transfer files. The 'RDP session' context further pinpoints the exact workflow.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly states the usage context: copying the script into an RDP session to bootstrap OpenSSH on a Windows target. It doesn't explicitly list alternatives or when not to use, but the purpose is distinct enough from siblings that no further exclusion is needed.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_remove_passwordlessA
Remove public key entry or clear ALL keys from authorized_keys on remote host, revoking passwordless SSH login.
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | Target host IP or domain | |
| port | No | SSH port | |
| password | No | SSH password (required if passwordless key is removed) | |
| targetOs | No | Target OS type | auto |
| username | Yes | Target SSH username | |
| removeAllKeys | No | Clear ALL authorized keys on target host instead of specific key | |
| privateKeyPath | No | Private key path to authenticate current session if removing key | |
| keyPathToRemove | No | Path to local public key file to remove (defaults to ~/.ssh/id_ed25519.pub or id_rsa.pub) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses the primary destructive behavior (removing keys/clearing all) and consequence (revoking passwordless login), but doesn't mention authentication prerequisites, lockout risks, or reversibility.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One sentence that conveys the action and scope efficiently without wasted words. It front-loads the primary function.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has 8 parameters and no output schema, and the description is minimal. It doesn't explain authentication prerequisites or failure modes, though the schema covers parameter semantics. It's sufficient for a straightforward revocation tool but lacks deeper behavioral context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 100% coverage for parameter descriptions, so the baseline is 3. The description adds no specific parameter details beyond what's in the schema, but it does align the 'remove specific key' vs 'clear all' options with keyPathToRemove and removeAllKeys.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's action ('Remove public key entry or clear ALL keys from authorized_keys') with specific resource and purpose, distinguishing it from siblings like ssh_setup_passwordless and ssh_clear_known_hosts.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the usage context (revoking passwordless SSH login) and clearly differentiates the two modes (specific key vs all keys). It doesn't explicitly name alternatives, but the tool's function is self-evident in context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_setup_passwordlessA
Deploy ed25519 public key to Linux (~/.ssh/authorized_keys) or Windows (administrators_authorized_keys with ACLs) and verify key login.
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | Target host IP or domain | |
| port | No | SSH port | |
| keyPath | No | Local private key path (defaults to ~/.ssh/id_ed25519) | |
| password | Yes | Current SSH password (required to deploy key for the first time) | |
| targetOs | No | Target OS type | auto |
| username | Yes | Target SSH username | |
| forceOverwrite | No | Force overwrite existing key entry if key mismatch occurs |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the transparency burden. It discloses target file paths and Windows ACL handling, plus verification of key login. However, it omits side-effects like modifying authorized_keys, whether it generates a key pair, or what happens on key mismatch (though forceOverwrite param hints at this). The description provides useful but incomplete behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence that front-loads the action and includes essential details (target OS paths, ACL mention, verification). Every word adds value, with no redundancy or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (7 params, multi-OS support, verification step), the description covers the core purpose and key behavioral aspects but lacks details on return values, error handling, prerequisites, and side-effects. It is sufficient for a high-level understanding but leaves operational gaps that could be covered by annotations or a more thorough description.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds context about ed25519 key type and deployment destinations, but does not elaborate on parameter semantics beyond what the schema already documents. The keyPath parameter's private/public key ambiguity is not clarified in the description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Deploy', the resource 'ed25519 public key', and the specific destinations (Linux ~/.ssh/authorized_keys, Windows administrators_authorized_keys with ACLs). It distinguishes this tool from siblings like ssh_remove_passwordless and ssh_test_connection by implying a setup action for passwordless login.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is used to enable passwordless SSH login, but it does not explicitly state when to use it over alternatives or provide exclusions. Context from the tool name and siblings suggests usage, but there is no direct guidance on selecting this vs. ssh_test_connection or ssh_remove_passwordless.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_test_connectionA
Test SSH connection & probe target OS. If server is unreachable/uninstalled, outputs RDP 1-liner script.
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | Target hostname or IP address | |
| port | No | SSH port (default 22) | |
| password | No | SSH password | |
| username | Yes | SSH username | |
| privateKeyPath | No | Path to private key file |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses a notable behavioral trait: outputting an RDP script if the server is unreachable/uninstalled. However, it does not mention potential side effects (e.g., known_hosts modification) or detail what happens on a successful connection beyond 'probe target OS.'
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that front-loads the primary action and includes the key fallback behavior. It is concise, readable, and free of unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is incomplete for a tool with no output schema or annotations. It does not specify what is returned on a successful connection (e.g., OS type), what 'uninstalled' means, or any side effects or prerequisites. Agents need more detail to fully understand the tool's behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All 5 parameters have descriptions in the schema (100% coverage), so the baseline is 3. The description adds no additional parameter-level information or context beyond what the schema already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's action: 'Test SSH connection & probe target OS.' It also mentions a distinct fallback behavior (outputs RDP 1-liner script), which helps differentiate it from sibling tools like ssh_exec or ssh_upload_file. The verb and resource are specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage through its purpose, but it does not explicitly state when to use this tool versus alternatives, nor does it mention any exclusions or direct comparisons to sibling tools. The fallback behavior gives some context but no formal guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_upload_fileB
Upload a local file to remote host via SFTP channel.
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | Target host IP or domain | |
| port | No | SSH port | |
| password | No | SSH password | |
| username | Yes | SSH username | |
| localPath | Yes | Local file path to upload | |
| remotePath | Yes | Remote target destination path | |
| privateKeyPath | No | Path to private key |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the full burden of behavioral disclosure. It only states the basic upload action and does not disclose whether the remote file is overwritten, whether directories are created automatically, or any side effects. Authentication requirements are present only in the schema, not the description.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, clear sentence with no fluff or redundant information. It is front-loaded with the core action and resource, making it easy to parse. While it is terse, it is not under-specified to the point of being unhelpful.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the absence of annotations and output schema, the description is too sparse to guide correct use in all situations. It does not mention prerequisites (e.g., local file existence), authentication choices, or behavior on conflicts, which are essential for a file-transfer tool. The schema covers parameter syntax but not operational context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, meaning the schema already documents all parameters (e.g., localPath, remotePath, password, privateKeyPath). The description adds no additional semantic meaning, such as the relationship between password and privateKeyPath or path format requirements, but the baseline of 3 is appropriate due to full schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Upload') and clearly identifies the resource ('local file to remote host via SFTP channel'). It unambiguously distinguishes this tool from siblings like ssh_download_file (opposite operation) and ssh_exec (command execution).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies use when a file needs to be transferred to a remote host via SFTP, but provides no explicit guidance on when not to use it or which alternatives to consider. Sibling tools exist (e.g., ssh_download_file) but are not referenced, so the agent must infer usage from the tool name and description alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
TDQS
Each tool targets a distinct SSH operation: connection testing, command execution, passwordless setup/removal, file transfer, known hosts management, and RDP bootstrap. No two tools overlap in purpose, making selection unambiguous.
All tools share the ssh_ prefix and mostly follow verb_noun pattern (clear_known_hosts, upload_file, setup_passwordless). The exception is ssh_exec, which is verb-only but still clear and consistent in style.
Eight tools is well-scoped for an SSH management server, covering core operations without bloat. Each tool has a clear role, and the count is typical for a focused utility server.
The toolset covers the primary SSH lifecycle: connection, execution, file transfer, key management, and known hosts. Minor gaps exist (e.g., no explicit tool to list known hosts or manage port forwarding), but the core workflows are complete.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Scoped, audited SSH exec, sessions, and SFTP on your saved servers without exposing credentials
Secure tunneling, reverse proxy and remote access for local applications.
Remote shell and detached long-running jobs on your own machines — no SSH, open ports or VPN.
Operate Linux, macOS and Windows from your LLM. Every action runs through an auditable allowlist.
Related MCP Servers
- AlicenseAqualityDmaintenanceEnables secure SSH connections to multiple remote servers with support for command execution, file transfers (SFTP), directory listing, and both password and key-based authentication.7MIT
- AlicenseAqualityCmaintenanceEnables remote server management through SSH and SFTP, supporting command execution, file transfers, and interactive shell sessions. It allows for multiple concurrent connections using either password or SSH key authentication.11194MIT
- AlicenseAqualityNot gradedmaintenanceEnables persistent SSH sessions and SFTP file transfers with native GUI credential prompts for secure remote server management. It supports background command execution, session pooling, and automatic connection reuse across multiple commands.7
- AlicenseBqualityDmaintenanceEnables secure remote and local command execution via SSH, with session management and environment variable support.1363MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/nguyenvanhuy0612/sshctl'
If you have feedback or need assistance with the MCP directory API, please join our Discord server