"Zsh" matching MCP servers:

Enables AI agents to inspect and manage remote hosts over SSH with tiered blast-radius containment that classifies and blocks destructive commands, plus forensic post-flight assertions that verify ports, processes, files, and HTTP health. It also provides long-running background task envelopes and atomic SFTP file editing with automatic backups, unified diffs, and one-click rollback.

Connects to Ubuntu servers over SSH to manage, maintain, and secure them through natural language conversation.

Enables assistants to inspect tamper-evident AI agent action journals through read-only verification, event querying, and policy-rule explanation.

Enables offline, deterministic verification that one immutable artifact followed a declared build-to-production promotion chain, using only hash-based evidence and failing closed on incomplete or nonconformant gate records.

Offers proof-only tools to inspect and verify remediation closure receipts, deterministically confirming asset coverage, fixed artifact deployment, rescanning, deadline compliance, and zero-residual closure without executing scans or touching live systems.

Enables verification of deployment-scoped model-visible DSH tool surface conformance by checking recorded tool identities and schemas against approved locks, reporting only drift categories and hashes.

Enables permission-scoped MCP clients to interact with DeepSeek Harness Desktop over a local loopback HTTP bridge, including checking status, listing models/workspaces/sessions, reading bounded session history, and creating, sending, waiting for, or canceling chats. Access is restricted per bearer token and only exposes the tools and sessions granted to that token.

Enables verifying that recorded build accesses stay within a declared closure by inspecting and verifying hash-only receipts, without executing builds or making network requests.

Enables offline verification that a supplied DSH workflow adhered to declared duty-separation constraints, producing a redacted, content-addressed JSON verdict.

This is a secure SSH MCP server providing enterprise-grade SSH management with AI assistance, MFA, RBAC, encryption, and compliance auditing.

An MCP server that gives Claude a shell on your servers, and cannot use it without your explicit consent.

MCP server for auditing DeepSeek Harness evidence. Enables inspection and verification of content-addressed audit manifests with fail-closed validation.

Enables offline, deterministic verification of credential retirement settlements from explicit receipts, proving that rotations activated new credentials, rejected old ones, and closed without exposing secrets.

Enables AI assistants to securely execute shell commands on local machines through an SSH interface with session management, command execution, and sudo support.

Enables AI agents to securely access encrypted secrets (SSH keys, API tokens, passwords) with real-time user approval via Passkey, and supports SSH remote execution through the MCP protocol.

Enables DeepSeek Harness agents to natively use Burp Suite capabilities such as proxy, logger, history, repeater, rewrite, intercept, BCheck, and Bambda, with runtime configuration and controlled active operations.

Certification lookup for DeepSeek Harness plugins: an agent-facing interface to the dsh-plugin-certification registry, checking a plugin's five reproducible dimensions (manifest compliance, build hygiene, supply-chain Scorecard, release provenance, sandboxed install smoke) before recommending or installing it.

Enables secure remote SSH command execution with strict read-only enforcement, allowing safe delegation of SSH access to Claude while preventing write operations. Supports connection pooling, command validation, and comprehensive logging for audit trails.

Enables read-only interaction with YesWeHack hunter accounts via MCP, allowing consultation of programs, scopes, reports, and credits using email/password/TOTP authentication.

Provides policy-driven, auditable SSH access to server fleets for AI assistants with zero-trust security controls, command whitelisting, and comprehensive audit logging to safely manage infrastructure.