"Shell" matching MCP servers:

An agent-native teaching OS that gives AI assistants a persistent classroom with courses, lessons, flashcards, and graded exercises via MCP tools.

Enables executing local commands via an argv-based tool with optional non-interactive sudo, command allowlisting, and filesystem write confinement using Bubblewrap.

Interactive shell, scriptable CLI and MCP server for Cloudinary — browse, upload, download, move and delete assets, with a confirm-token preview before anything destructive runs.

Opt-in, token-authenticated MCP server built into the Shelly Android terminal app: read-only tools for terminal output, git status, registered agents and repos on the phone, plus off-by-default run_command and write_file that need an on-device approval tap per call.

SkillTotal is a local stdio MCP server that lets an agent check a component before installing it. It statically analyzes MCP servers, agent skills, npm/PyPI packages and repos for supply-chain risks, dangerous capabilities (shell, filesystem, network, credentials), prompt-injection surfaces like tool poisoning, and exfiltration paths. Each finding cites file, line and snippet.

Enables AI agents to monitor server health and capacity, diagnose outages, inspect Docker and deployment status, and perform safe, bounded recovery actions via MCP without granting unrestricted shell or SSH access.

MCP server that vets LLM-emitted shell commands BEFORE execution — detects rm -rf nested deep in chains, package-manager glob removal (apt remove 'nvidia'), dd/mkfs filesystem destruction, chmod 777 / chown -R privilege blast, network-exfil via curl | bash, chained shutdown/reboot, git destructive ops. 30 detection rules across 8 families. Sub-second, local, free, MCP-native.

Outbound-only remote shell, detached long-running jobs, and temporary file courier for AI agents. Hosted Streamable HTTP plus stdio via npx -y @aicommander/mcp.

Offline server that explains any shell command token-by-token and flags destructive ones (rm -rf /, curl | sudo bash, dd/mkfs/shred to a disk device, chmod -R 777 /) — a safety gate for agentic shell execution.

Local-first operator MCP server: recall across your own sessions, chats and files, an encrypted vault, SSH to your own hosts, and gated shell, browser and device tools. 130 tools over stdio or HTTP; everything runs on your machine — no hosted service, no account, no API key.

More than just an MCP server that covers the entire range of Docker management tasks, it helps you create workflows to easily manage your Docker environments at scale. It allows you manage multiple local or remote (TCP, TLS, SSH) docker instances and exposes things like logs and stats as resources so that you can monitor and triage all of them.

MCP Bridge is a local-first Linux/Windows desktop app connecting ChatGPT to approved files and Chrome through authorized OpenAI tunnels, with optional shell tools. The Glama-hosted v0.1.0 release is a restricted READ-ONLY documentation demo: five tools can access only bundled public examples, not your computer, browser, credentials, shell, or files.

Indexes git history, shell commands with exit codes, project docs, and opt-in assistant transcripts into a local SQLite database, then serves ranked, token-budgeted context back over MCP. Uniquely links a failed shell command to the commit that fixed it, so agents can recall what was already tried and what worked.

Standard coding agents waste 70% of context tokens re-reading raw files with shell grep. Synapse-MCP indexes your codebase into a sub-millisecond local AST graph—giving Claude Code, Cursor, and Windsurf exact caller trees, 60% lower token spend, and zero-hallucination refactoring.

Enables an AI agent to safely observe and operate a Mac, starting read-only with optional read-write and admin tools for files, processes, apps, shell, AppleScript, and GUI control behind explicit permissions and human approval.

An MCP server that gives AI coding assistants a remote_exec tool to run shell commands on a remote computer through a relay, with supervised approval for each command. The remote machine only needs curl and bash, with no SSH access or installed agent required.

Advanced shell command execution for AI agents — a Model Context Protocol (MCP) server with security policy engine, process lifecycle management, bounded output capture, POSIX signals, and token-efficient responses.

Local code-graph engine for AI coding workflows: static analysis of Rust, Cangjie, ArkTS, TypeScript/JavaScript, C/C++, Python, and Shell projects into symbols, imports, call graphs, and quality gates, with pre-commit change review and impact analysis. Read-only by design — never executes build scripts or uploads code.

Secure, read-only MCP server that lets AI assistants (Claude, OpenCode, VS Code) inspect Android devices via ADB — logcat, UI hierarchy, installed packages, and allowlisted shell commands. TypeScript/Node.js.

Enables AI assistants to control Windows PCs by executing shell commands, managing files, capturing screenshots, and monitoring system information through a comprehensive set of MCP tools.