"author:lanchenglin" matching MCP servers:

Enables AI-assisted remote server diagnostics by auto-executing known read-only commands and routing high-risk changes to a real human for approval through DingTalk interactive cards. It uses structured argv instead of shell strings, default-deny policy, and HMAC-signed agent execution with hash-chained auditing so the model never holds SSH keys or approval power.