How do I use ssh-mcp-server?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@ssh-mcp-server Check the current system status and disk usage" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

ssh-mcp-server

by ZachFlint

Overview Schema Source Related Servers Discussions Admin

TypeScript

Remote

ssh-mcp-server

SSH-based MCP (Model Context Protocol) server that allows remote execution of SSH commands via the MCP protocol.

Project Overview

ssh-mcp-server is a bridging tool that enables AI assistants and other applications supporting the MCP protocol to execute remote SSH commands through a standardized interface. This allows AI assistants to safely operate remote servers, execute commands, and retrieve results without directly exposing SSH credentials to AI models.

Related MCP server: SSH MCP Server

Key Features

Secure Connections: Supports multiple secure SSH connection methods, including password authentication and private key authentication (with passphrase support)
Command Security Control: Precisely control the range of allowed commands through flexible blacklist and whitelist mechanisms to prevent dangerous operations
Standardized Interface: Complies with MCP protocol specifications for seamless integration with AI assistants supporting the protocol
File Transfer: Supports bidirectional file transfers, uploading local files to servers or downloading files from servers
Credential Isolation: SSH credentials are managed entirely locally and never exposed to AI models, enhancing security
Ready to Use: Can be run directly using NPX without global installation, making it convenient and quick to deploy
Environment Variables: Support for credentials via environment variables for secure CI/CD integration
Batch Execution: Execute multiple commands in sequence with a single tool call

Tools List

Tool	Description
execute-command	Execute SSH commands with optional cwd and sudo support
execute-batch	Execute multiple commands in sequence with a single call
read-file	Read file contents from remote server with line range support
write-file	Write content to files on remote server with append mode
upload	Upload local files to remote server via SFTP
download	Download files from remote server via SFTP
test-connection	Test SSH connectivity and return server info
get-status	Get comprehensive system status (CPU, memory, disk, OS, processes)
check-port	Check if ports are open/listening on remote server
list-servers	List all configured SSH connections

Usage

MCP Configuration Examples

Important: In MCP configuration files, each command line argument and its value must be separate elements in the args array. Do NOT combine them with spaces. For example, use "--host", "192.168.1.1" instead of "--host 192.168.1.1".

Command Line Options

Options:
  -h, --host          SSH server host address
  -p, --port          SSH server port
  -u, --username      SSH username
  -w, --password      SSH password
  -k, --privateKey    SSH private key file path
  -P, --passphrase    Private key passphrase (if any)
  -W, --whitelist     Command whitelist, comma-separated regular expressions
  -B, --blacklist     Command blacklist, comma-separated regular expressions
  -s, --socksProxy    SOCKS proxy server address (e.g., socks://user:password@host:port)
  -t, --timeout       Default command timeout in milliseconds (default: 30000)

Environment Variables (alternative to CLI options):
  SSH_HOST            SSH server host address
  SSH_PORT            SSH server port (default: 22)
  SSH_USERNAME        SSH username
  SSH_PASSWORD        SSH password
  SSH_PRIVATE_KEY     SSH private key file path
  SSH_PASSPHRASE      Private key passphrase
  SSH_WHITELIST       Command whitelist
  SSH_BLACKLIST       Command blacklist
  SSH_SOCKS_PROXY     SOCKS proxy server address
  SSH_TIMEOUT         Default command timeout in milliseconds

Using Password

{
  "mcpServers": {
    "ssh-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "ssh-mcp-server",
        "--host", "192.168.1.1",
        "--port", "22",
        "--username", "root",
        "--password", "pwd123456"
      ]
    }
  }
}

Using Private Key

{
  "mcpServers": {
    "ssh-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "ssh-mcp-server",
        "--host", "192.168.1.1",
        "--port", "22",
        "--username", "root",
        "--privateKey", "~/.ssh/id_rsa"
      ]
    }
  }
}

Using Private Key with Passphrase

{
  "mcpServers": {
    "ssh-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "ssh-mcp-server",
        "--host", "192.168.1.1",
        "--port", "22",
        "--username", "root",
        "--privateKey", "~/.ssh/id_rsa",
        "--passphrase", "pwd123456"
      ]
    }
  }
}

Using SOCKS Proxy

{
  "mcpServers": {
    "ssh-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "ssh-mcp-server",
        "--host", "192.168.1.1",
        "--port", "22",
        "--username", "root",
        "--password", "pwd123456",
        "--socksProxy", "socks://username:password@proxy-host:proxy-port"
      ]
    }
  }
}

Using Command Whitelist and Blacklist

Use the --whitelist and --blacklist parameters to restrict the range of executable commands. Multiple patterns are separated by commas. Each pattern is a regular expression used to match commands.

Example: Using Command Whitelist

{
  "mcpServers": {
    "ssh-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "ssh-mcp-server",
        "--host", "192.168.1.1",
        "--port", "22",
        "--username", "root",
        "--password", "pwd123456",
        "--whitelist", "^ls( .*)?,^cat .*,^df.*"
      ]
    }
  }
}

Example: Using Command Blacklist

{
  "mcpServers": {
    "ssh-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "ssh-mcp-server",
        "--host", "192.168.1.1",
        "--port", "22",
        "--username", "root",
        "--password", "pwd123456",
        "--blacklist", "^rm .*,^shutdown.*,^reboot.*"
      ]
    }
  }
}

Note: If both whitelist and blacklist are specified, the system will first check whether the command is in the whitelist, and then check whether it is in the blacklist. The command must pass both checks to be executed.

Multi-SSH Connection Example

You can specify multiple SSH connections by passing multiple --ssh parameters, each with a unique name:

npx ssh-mcp-server \
  --ssh "name=dev,host=1.2.3.4,port=22,user=alice,password=xxx" \
  --ssh "name=prod,host=5.6.7.8,port=22,user=bob,password=yyy"

In MCP tool calls, specify the connection name via the connectionName parameter. If omitted, the default connection is used.

Example (execute command on 'prod' connection):

{
  "tool": "execute-command",
  "params": {
    "cmdString": "ls -al",
    "connectionName": "prod"
  }
}

Example (execute command with timeout options):

{
  "tool": "execute-command",
  "params": {
    "cmdString": "ping -c 10 127.0.0.1",
    "connectionName": "prod",
    "timeout": 5000
  }
}

Command Execution Timeout

The execute-command tool supports timeout options to prevent commands from hanging indefinitely:

timeout: Command execution timeout in milliseconds (optional, default is 30000ms)

This is particularly useful for commands like ping, tail -f, or other long-running processes that might block execution.

List All SSH Servers

You can use the MCP tool list-servers to get all available SSH server configurations:

Example call:

{
  "tool": "list-servers",
  "params": {}
}

Example response:

[
  { "name": "dev", "host": "1.2.3.4", "port": 22, "username": "alice" },
  { "name": "prod", "host": "5.6.7.8", "port": 22, "username": "bob" }
]

Test Connection

Use the test-connection tool to verify SSH connectivity before running commands:

{
  "tool": "test-connection",
  "params": {
    "connectionName": "prod"
  }
}

Example response:

{
  "success": true,
  "connectionTime": "245ms",
  "server": {
    "host": "192.168.1.1",
    "port": 22,
    "username": "root",
    "hostname": "my-server"
  }
}

Batch Command Execution

Use the execute-batch tool to run multiple commands in sequence:

{
  "tool": "execute-batch",
  "params": {
    "commands": ["cd /var/log", "ls -la", "df -h"],
    "connectionName": "prod",
    "stopOnError": true
  }
}

Example response:

{
  "summary": {
    "total": 3,
    "executed": 3,
    "succeeded": 3,
    "failed": 0
  },
  "results": [
    { "command": "cd /var/log", "success": true, "output": "", "executionTime": "12ms" },
    { "command": "ls -la", "success": true, "output": "...", "executionTime": "15ms" },
    { "command": "df -h", "success": true, "output": "...", "executionTime": "18ms" }
  ]
}

Using Environment Variables

For CI/CD pipelines or secure deployments, you can use environment variables instead of CLI arguments:

{
  "mcpServers": {
    "ssh-mcp-server": {
      "command": "npx",
      "args": ["-y", "ssh-mcp-server"],
      "env": {
        "SSH_HOST": "192.168.1.1",
        "SSH_PORT": "22",
        "SSH_USERNAME": "root",
        "SSH_PASSWORD": "pwd123456"
      }
    }
  }
}

Working Directory and Sudo

The execute-command tool supports cwd and sudo parameters:

{
  "tool": "execute-command",
  "params": {
    "cmdString": "ls -la",
    "cwd": "/var/log",
    "sudo": true
  }
}

Read Remote File

Read file contents with optional line range:

{
  "tool": "read-file",
  "params": {
    "path": "/etc/nginx/nginx.conf",
    "maxLines": 50,
    "startLine": 10
  }
}

Write Remote File

Write content to remote files:

{
  "tool": "write-file",
  "params": {
    "path": "/tmp/config.txt",
    "content": "key=value\nother=setting",
    "append": false,
    "createDirs": true
  }
}

Get Server Status

Get comprehensive system information:

{
  "tool": "get-status",
  "params": {}
}

Returns: hostname, OS, CPU, memory, disk, processes, services, uptime, and more.

Check Port

Check if a port is open:

{
  "tool": "check-port",
  "params": {
    "port": 80,
    "host": "localhost"
  }
}

Example response:

{
  "port": 80,
  "host": "localhost",
  "open": true,
  "service": "nginx",
  "pid": "1234"
}

Security Considerations

This server provides powerful capabilities to execute commands and transfer files on remote servers. To ensure it is used securely, please consider the following:

Command Whitelisting: It is strongly recommended to use the --whitelist option to restrict the set of commands that can be executed. Without a whitelist, any command can be executed on the remote server, which can be a significant security risk.
Private Key Security: The server reads the SSH private key into memory. Ensure that the machine running the ssh-mcp-server is secure. Do not expose the server to untrusted networks.
Denial of Service (DoS): The server does not have built-in rate limiting. An attacker could potentially launch a DoS attack by flooding the server with connection requests or large file transfers. It is recommended to run the server behind a firewall or reverse proxy with rate-limiting capabilities.
Path Traversal: The server has built-in protection against path traversal attacks on the local filesystem. However, it is still important to be mindful of the paths used in upload and download commands.

Available Tools

10 tools

check-portC

Check if a port is open/listening on the remote server or test connectivity to external hosts

Inputs: port (required), host, connectionName, timeout.

downloadC

Download file from connected server

Inputs: remotePath (required), localPath (required), connectionName.

execute-batchC

Execute multiple commands in sequence on connected server

Inputs: commands (required), connectionName, timeout, stopOnError.

execute-commandC

Execute command on connected server and get output result

Inputs: cmdString (required), connectionName, timeout, cwd, +1 more.

get-statusB

Get comprehensive system status information from the remote server (OS, CPU, memory, disk, processes, services)

Inputs: connectionName, refresh.

list-serversB

List all available SSH server configurations

Inputs: no named parameters.

read-fileC

Read contents of a file from the remote server

Inputs: path (required), connectionName, maxLines, startLine, +1 more.

test-connectionC

Test SSH connection and return server information

Inputs: connectionName.

uploadC

Upload file to connected server

Inputs: localPath (required), remotePath (required), connectionName.

write-fileC

Write content to a file on the remote server

Inputs: path (required), content (required), connectionName, append, +2 more.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

Deploy Server

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

A3.6/5.0

Scored 2026-04-18 06:25 across 10 tools

Disambiguation5/5

Each tool has a clearly distinct purpose with no significant overlap: check-port tests connectivity, execute-command and execute-batch handle command execution, get-status retrieves system info, list-servers manages configurations, and read-file/write-file/upload/download handle file operations. The descriptions clearly differentiate these functions, making misselection unlikely.

Naming Consistency5/5

All tools follow a consistent verb-noun naming pattern using kebab-case (e.g., check-port, execute-command, list-servers). This uniformity makes the tool set predictable and easy to understand, with no deviations in style or convention.

Tool Count5/5

With 10 tools, the count is well-scoped for an SSH server management domain. Each tool serves a distinct and necessary function, such as connection testing, command execution, file management, and system monitoring, without being excessive or insufficient for the intended purpose.

Completeness5/5

The tool set provides comprehensive coverage for SSH server operations, including connection management (test-connection, list-servers), system monitoring (get-status, check-port), command execution (execute-command, execute-batch), and full file CRUD operations (read-file, write-file, upload, download). No obvious gaps exist for core workflows.

Maintenance

ActivityInactive

ResponsivenessNo recent community issues

Resources

Related MCP Connectors

SentinelX MCP
app.sentinelx
Operate Linux, macOS and Windows from your LLM. Every action runs through an auditable allowlist.
Shell Access OS Automation
216
https://mcp.sentinelx.app/mcp/mcp
emisar
dev.emisar
Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step.
Cloud Platforms Security Networking & Infrastructure
2375
https://emisar.dev/api/mcp/rpc
DNS-DATA RemoteDeprecated
com.dns-data
Connect AI assistants to authorized Windows and macOS devices for files, commands, and management.
File Systems Command Line OS Automation
11
https://mcp.dns-data.com/mcp
RelayDeskA
io.github.Lakshay-24
Connect AI assistants to explicitly paired computers, servers, and VMs for permitted remote actions.
Command Line Shell Access OS Automation
1
https://relay-desk-mjq6.vercel.app/mcp

Related MCP Servers

MCP SSH Server
Shell Access Command Line
Fabber-bot
A
license
Not graded
quality
D
maintenance
Enables AI assistants to execute commands and transfer files on remote servers over SSH connections.
Updated 9 months ago (2026-02-19 17:32 UTC)
1
MIT
SSH MCP Server
Shell Access File Systems
uarlouski
A
license
Not graded
quality
D
maintenance
Enables AI assistants to securely execute commands, transfer files, and manage port forwarding on remote servers via SSH.
Updated 5 months ago (2026-06-10 10:12 UTC)
158 npm
38
Apache 2.0
SSH MCP Server
Command Line Monitoring Shell Access
hypnosis
A
license
A
quality
B
maintenance
Enables AI assistants to manage remote servers via SSH with 14 commands for execution, file transfer, auditing, and monitoring.
Updated 8 days ago (2026-11-02 20:00 UTC)
18
192 npm
10
MIT
fast-mcp-ssh
Shell Access Command Line
klNuno
A
license
Not graded
quality
B
maintenance
Enables AI agents to securely execute commands on remote hosts via SSH and SFTP, with persistent shells, file transfers, screenshots, and an audit log.
Updated 10 days ago (2026-11-01 09:57 UTC)
5
MIT

ssh-mcp-server

Project Overview

Key Features

Tools List

Usage

MCP Configuration Examples

Command Line Options

Using Password

Using Private Key

Using Private Key with Passphrase

Using SOCKS Proxy

Using Command Whitelist and Blacklist

Multi-SSH Connection Example

Command Execution Timeout

List All SSH Servers

Test Connection

Batch Command Execution

Using Environment Variables

Working Directory and Sudo

Read Remote File

Write Remote File

Get Server Status

Check Port

Security Considerations

Available Tools

Tool Schema Changelog

TDQS

Maintenance

Resources

Related MCP Connectors

Related MCP Servers

MCP SSH Server

SSH MCP Server

SSH MCP Server

fast-mcp-ssh