rustscp-mcp
Enables AI agents to manage objects in Amazon S3 buckets, including listing, uploading, downloading, and deleting objects using native AWS SigV4 authentication.
Enables AI agents to interact with Backblaze B2 cloud storage via the S3-compatible API, supporting object management operations.
Enables AI agents to manage objects in Cloudflare R2 storage, leveraging the S3-compatible API for listing, uploading, downloading, and deleting objects.
Enables AI agents to manage files and execute commands on remote Linux/Unix servers over SFTP and SSH, including directory listing, file editing, hash computation, and shell command execution.
Enables AI agents to manage objects in MinIO object storage through the S3-compatible API, including bucket and object operations.
Enables AI agents to interact with Wasabi hot cloud storage via the S3-compatible API, supporting object management.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@rustscp-mcplist files in /etc/nginx on my production server"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
🌟 Why RustSCP?
For more than two decades, WinSCP set the gold standard for dual-pane file management on Windows. However, modern engineering teams work across macOS, Linux, and Windows, deploy to cloud-native object stores (S3, Cloudflare R2, MinIO), and orchestrate infrastructure through Autonomous AI Agents.
RustSCP reimagines this legacy with modern systems engineering:
🚀 Blazing Native Performance: Built with pure asynchronous Rust (Tokio) and Tauri v2. Consumes under 40 MB of RAM — eliminating the heavy CPU & memory overhead of Electron.
🤖 Native AI Gateway (Model Context Protocol / MCP): An audited, sandboxed bastion server allowing LLM agents (Claude Code, Hermes, Antigravity, OpenClaw, Cursor) to safely query, inspect, and manage remote infrastructure without exposing raw credentials or private SSH keys.
🛡️ Guaranteed Memory Safety: Zero segfaults, zero memory leaks, and resilient concurrency guaranteed by Rust's ownership model.
⚡ Proactive Dual-Session SSH Architecture: Automatically authenticates an SFTP data channel and an interactive remote shell session during initial login. Execute instantaneous Linux commands (
rm -rf,sha256sum,systemctl) without extra logins or latency.
Related MCP server: MCP SSH Orchestrator
📊 Feature Comparison
Feature | RustSCP 🦀 | WinSCP 🪟 | FileZilla 📁 | Cyberduck 🦆 |
Core Architecture | Safe Rust + Tauri v2 | C++ / VCL | C++ / wxWidgets | Java / Cocoa |
Memory Footprint | ~35 - 45 MB | ~40 - 60 MB | ~80 - 120 MB | ~300 - 500 MB |
Native Multiplatform | macOS, Windows, Linux | Windows Only | macOS, Win, Linux | macOS, Windows |
AI Agent MCP Gateway | Built-in (Native) | ❌ No | ❌ No | ❌ No |
Dual-Pane Commander | Yes (Classic & Modern) | Yes | Split View | ❌ Single Pane |
SSH Dual-Session Shell | Instant (First Login) | Re-login required | ❌ No | ❌ No |
AWS S3 / R2 / MinIO | Native AWS SigV4 | S3 Only | Pro Edition ($) | Yes |
Remote Quick-Delete ( | Yes (Safe fallback) | Scripting only | ❌ Slow file-by-file | ❌ Slow file-by-file |
Visual Unix Chmod Studio | Real-time Octal Matrix | Basic | Basic | Basic |
Built-in Remote Code Editor | Yes ( | External / Basic | External only | External only |
Smart Context Menu | Edge-aware 60 FPS | Standard | Standard | Standard |
⚡ Key Highlights & Capabilities
🔒 1. Multi-Protocol Engine
SFTP (SSH File Transfer Protocol): Full SSH2 implementation supporting password auth, private keys (
id_rsa,id_ed25519,.pem, PuTTY.ppk), SSH Agent, and chunked high-throughput parallel streaming.SCP (Secure Copy): High-speed channel transfer for legacy servers.
Amazon S3 & Compatible Clouds: Native cryptographic AWS SigV4 engine in HMAC-SHA256. Tested with AWS S3, Cloudflare R2, MinIO, Wasabi, and Backblaze B2.
FTP / FTPS: TLS-encrypted and standard FTP support.
Local Filesystem: Native high-speed local disk operations.
🤖 2. Model Context Protocol (MCP) AI Gateway
RustSCP includes an embedded JSON-RPC 2.0 MCP server (rustscp-mcp) acting as a secure bastion:
Enables AI tools (Claude Code, Hermes, Antigravity, Cursor, OpenClaw) to list directories, read configuration files, and perform authorized server actions.
Enforces granular permission controls, human-in-the-loop approvals, and structured audit logs.
Never reveals raw SSH credentials or root passwords to the AI model.
🔄 3. Dual-Session Proactive SSH Architecture
Unlike traditional tools that disconnect or force a second login prompt when running terminal operations:
RustSCP initializes both the SFTP file subsystem and an authenticated Shell channel on the initial handshake.
Remote operations like calculating recursive directory sizes (
du -sb), generating SHA-256 hashes, running system commands, or performing fast directory removals (rm -rf) execute instantaneously with zero re-authentication overhead.
🖥️ 4. Commander & Explorer Layouts
Dual-Pane (Commander Mode): Fast file movement between Local and Remote (or Remote to Remote) using traditional
Tab,F5(Copy), andF6(Move) workflows.Single-Pane (Explorer Mode): Distraction-free navigation with collapsible folder tree.
Multi-Session Tabs: Open simultaneous connections to multiple servers, clusters, and local drives with automatic reconnection and state recovery.
Session Memory: Remembers the last active remote directory per site/host upon disconnect or app shutdown (configurable in Settings).
📝 5. Built-in Remote Code Editor (F4 / F3)
View (
F3) and Edit (F4) remote server files directly inside the application.Syntax highlighting for over 30 languages (Rust, Go, Python, TypeScript, Shell, JSON, YAML, etc.).
Line numbers, search/replace (
Ctrl+F), and instant remote save (Ctrl+S) over the active SFTP stream.
🛡️ 6. Visual Unix Permissions (chmod) & Hashes
Comprehensive permissions studio (
Alt+Enter): visual checkboxes for Owner, Group, and Public (Read, Write, Execute, Sticky Bit) with bidirectional octal translation (0755,0644,0777).Integrity verification: compute and compare SHA-256 and MD5 hashes remotely or locally with one click.
🧭 7. Next-Gen Context Menu & UX
Dynamic Viewport Edge Mapping: The right-click menu detects screen boundaries; flips upwards when near the bottom of the window, and opens submenus to the left when near the right edge.
Visual Overflow Indicators: Animated "More above" and "More below" indicators with smooth auto-scroll on click.
Zero-Freeze Guarantee: Isolated rendering lifecycle with global dismiss listeners (
Escape, outside click backdrop, window blur).
🏗️ Architecture
RustSCP is designed as a modular workspace ensuring separation of concerns:
graph TD
UI[Frontend: React 19 + TypeScript + Tailwind CSS]
Tauri[Tauri v2 Desktop Bridge - IPC]
subgraph Rust Backend Monorepo
Desktop[apps/rustscp-desktop: Native Window & Shell]
Core[crates/rustscp-core: Multi-Protocol Driver Engine]
Actions[crates/rustscp-actions: Linux Smart Actions Studio]
Cache[crates/rustscp-cache: High-Speed Directory & Hash Cache]
MCP[crates/rustscp-mcp: Model Context Protocol AI Gateway]
end
UI <-->|Tauri IPC Commands & Events| Desktop
Desktop --> Core
Desktop --> Actions
Desktop --> Cache
Desktop --> MCP
Core -->|SFTP / SSH Shell| RemoteLinux[Linux / Unix Servers]
Core -->|AWS SigV4| S3Cloud[AWS S3 / Cloudflare R2 / MinIO]
Core -->|Local I/O| LocalDisk[Local Filesystem]
MCP <-->|JSON-RPC 2.0 / Stdio| AIAgents[Claude / Cursor / Hermes / Antigravity]Crate Breakdown:
crates/rustscp-core: Core networking, connection pooling, SFTP/SCP/S3/FTP abstractions, and dual-session SSH manager.crates/rustscp-actions: Linux Smart Actions catalog, parameter validator, safety level engine (Safe, Warning, Dangerous), and script execution runner.crates/rustscp-cache: In-memory and disk caching for directory listings, connection secrets (OS Keychain integration), and file hashes.crates/rustscp-mcp: Model Context Protocol (MCP) server implementation exposing tool definitions and resources to LLM agents.apps/rustscp-desktop: Tauri v2 application wrapper and React 19 single-page UI.
⌨️ Keyboard Shortcuts
Action | macOS 🍏 | Windows / Linux 🪟🐧 |
Switch Panes |
|
|
View File |
|
|
Edit File |
|
|
Copy Files |
|
|
Move / Rename |
|
|
New Folder |
|
|
Delete (Move to Trash) |
|
|
Permanent Delete |
|
|
Properties & Chmod |
|
|
Quick Terminal Command |
|
|
Navigate Up Directory |
|
|
Save in Editor |
|
|
Close Dialog / Menu |
|
|
🚀 Getting Started & Installation
Pre-built Binaries
Download the latest pre-compiled binaries from the Releases page:
macOS:
.dmginstaller or.appbundle (supports Apple Siliconaarch64and Intelx86_64).Windows:
.msiinstaller or standalone.exe.Linux:
.AppImage,.deb, or.tar.gz.
Building from Source
Prerequisites
Rust: Latest stable toolchain (
rustup update stable).Node.js & pnpm: Node.js 20+ and
pnpm(corepack enable pnpm).Platform Libraries:
macOS: Xcode Command Line Tools (
xcode-select --install).Linux (Ubuntu/Debian):
sudo apt update && sudo apt install -y libwebkit2gtk-4.1-dev build-essential curl wget file libxdo-dev libssl-dev libayatana-appindicator3-dev librsvg2-devWindows: C++ Build Tools and WebView2.
Build Instructions
# 1. Clone the repository
git clone https://github.com/tiagobecker/RustSCP.git
cd RustSCP
# 2. Install UI dependencies
pnpm install
# 3. Run in Desktop Development Mode (with Hot Reload)
pnpm desktop:dev
# 4. Build Optimized Production Release
pnpm release
# 5. Create native installers (.dmg, .msi, .deb, etc.)
pnpm bundle🤝 Contributing
Contributions are warmly welcome! Please check out our Contributing Guidelines and Security Policy before submitting pull requests.
# Run backend test suite
cargo test --all
# Run linting
cargo clippy --workspace --all-targets -- -D warnings
pnpm --dir apps/rustscp-desktop/ui lint
# Build verification
pnpm build📜 License
This project is licensed under the MIT License - see the LICENSE file for details.
Copyright (c) 2026 Tiago Becker.
This server cannot be deployed
Maintenance
Related MCP Connectors
- emisarOAuthdev.emisar
Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step.
Scoped, audited SSH exec, sessions, and SFTP on your saved servers without exposing credentials
Security gateway for AI agents: policy, approval, and audited execution, no secrets shared.
Operate Linux, macOS and Windows from your LLM. Every action runs through an auditable allowlist.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables secure remote access operations through SSH, SFTP, rsync, VPN, and tunneling with enterprise-grade policy enforcement and audit logging. Provides AI assistants with secure, policy-driven access to remote systems while maintaining comprehensive audit trails and zero-trust security.1Apache 2.0
- AlicenseBqualityAmaintenanceProvides policy-driven, auditable SSH access to server fleets for AI assistants with zero-trust security controls, command whitelisting, and comprehensive audit logging to safely manage infrastructure.1327Apache 2.0
- AlicenseAqualityCmaintenanceEnables AI assistants to securely execute remote SSH commands, perform file transfers, and monitor system status through a standardized interface. It features robust security controls including command whitelisting, blacklisting, and credential isolation to prevent unauthorized operations.1022MIT
- AlicenseNot gradedqualityAmaintenanceEnables AI assistants to securely execute SSH commands on remote servers with connection pooling, session isolation, and a web audit panel.3MIT