"Shell" matching MCP servers:

MCP server that provides shell script linting via ShellCheck. Allows AI agents to analyze shell scripts for common errors, stylistic issues, and potential bugs.

A secure MCP server that exposes local repository context to ChatGPT/Codex with read-only access, path validation, and no generic shell.

Deterministic AST deconstruction and runtime circuit breaker preventing rogue shell escapes, dynamic eval(), and covert lateral socket egress in autonomous LLM tool calls.

Analyzes codebases for cross-platform compatibility issues, detecting platform-specific APIs, file path problems, line ending inconsistencies, and shell command incompatibilities across Windows, macOS, and Linux.

A TypeScript/Node.js MCP toolkit with servers for code search, docs, databases, OpenAPI, Git, and shell-based developer workflows.

Enables AI assistants to execute SuperSQL queries on data files and SuperDB databases without shell escaping issues. Supports querying, schema inspection, database pool management, and provides LSP features for code completion and documentation.

Enables LLM clients to search, read, and patch a trusted source repository with rollback-safe edits, Git operations, and allowlisted validation over stdio or OAuth-protected HTTP. Keeps secrets and arbitrary shell access out of reach while enforcing bounded batched I/O and operator-controlled workspace trust.

Provides read-only, structured access to a Git repository's history through seven typed tools, enabling search commits, file evolution, blame, churn, contributors, commit details, and ref comparisons without a shell.

Enables MCP clients to inspect and interact with VS Code virtual workspaces and live editor buffers, including reading, searching, editing, saving, and diagnostics without shell access.

Remote MCP coding bridge that gives ChatGPT/Codex secure local workspace access, including file retrieval, semantic code intelligence, Git, diagnostics, and guarded shell execution.

A medical MCP server for agents that diagnoses tracebacks, provides exact fixes, and converts verified solutions into reusable prescriptions, plus a guard for destructive shell commands.

Provides AI assistants with 28 developer tools across file, git, code analysis, HTTP, and system domains, enabling tasks like file editing, repository management, code analysis, and shell command execution.

MCP server for developing Quickshell widgets that lets AI agents render individual widgets to PNG previews offscreen, without screen capture or affecting the live shell.

Vets MCP servers, Claude Code skills, or plugins for unsafe behavior like shell execution, secret access, data exfiltration, prompt injection, and remote code before installation, returning a graded verdict with findings.

SecHelix is an evidence-first AppSec MCP server for reviewing repositories you own or are authorized to test. It verifies candidate findings, refutes false positives, and exposes a root-confined local MCP interface with no shell or arbitrary command execution.

Enables an LLM to run a project's real test suite and SonarQube scan against on-disk projects using throwaway, socket-proxied containers without granting raw shell access.

Governed development control plane for VedaOps projects, letting authorized agents inspect, search, patch, test, lint, and coordinate registered software without exposing a general shell.

SkillTotal is a local stdio MCP server that lets an agent check a component before installing it. It statically analyzes MCP servers, agent skills, npm/PyPI packages and repos for supply-chain risks, dangerous capabilities (shell, filesystem, network, credentials), prompt-injection surfaces like tool poisoning, and exfiltration paths. Each finding cites file, line and snippet.

Standard coding agents waste 70% of context tokens re-reading raw files with shell grep. Synapse-MCP indexes your codebase into a sub-millisecond local AST graph—giving Claude Code, Cursor, and Windsurf exact caller trees, 60% lower token spend, and zero-hallucination refactoring.

Local code-graph engine for AI coding workflows: static analysis of Rust, Cangjie, ArkTS, TypeScript/JavaScript, C/C++, Python, and Shell projects into symbols, imports, call graphs, and quality gates, with pre-commit change review and impact analysis. Read-only by design — never executes build scripts or uploads code.