"Secure Shell (SSH) Overview or Usage" matching MCP tools:

• get_ssh_infoA

  BorealHostB

  Get SSH connection info for a VPS/dedicated site. Only available for VPS/dedicated plans (not shared hosting). Requires: API key with read scope. Args: slug: Site identifier Returns: {"host": "184.107.x.x", "port": 22, "username": "admin", "ssh_command": "ssh admin@184.107.x.x"} Errors: NOT_FOUND: Unknown slug FORBIDDEN: Plan does not support SSH (shared plans)

  ConnectorNo auth

• ssh_execA

  TermalinA

  Run a single shell command on one of your servers and return its combined output and exit code. Runs keyless over Termalin's tunnel — no SSH key, and the server needs no open inbound port. Each call is a fresh shell (cd does not persist — chain with &&). Keep a call under about 90 seconds: for anything longer (installs, builds, backups) use job_start and check on it with job_status.

  Connector

  Destructive

  No auth

• run_instance_commandA

  Cycle MCPA

  Run a shell command inside a running container instance on Cycle, over the instance's SSH gateway, and return the shell output. Use this for one-time setup that must run inside a container — e.g. initializing a MongoDB replica set with 'mongosh --eval "rs.initiate({...})"'. The instance must be RUNNING (start the container first). If the container has multiple instances, pass 'instance' (id or hostname); otherwise the sole instance is used. Containers reach each other by hostname over the environment's private network, so commands can reference sibling containers (e.g. mongo-1:27017). This executes an arbitrary command inside your container — it is powerful and mutating. Always call with preview:true first: it echoes back the exact command and target without making any connection, so the user can confirm it is what they intend (nothing is validated — the command may still fail when run). Confirm with the user, then call again without preview. Never run a command without explicit confirmation. Short-lived SSH credentials are generated for the run and expired immediately after. The command runs in an interactive shell; make destructive commands idempotent where possible.

  Connector

  Destructive

  API key

• runA

  Comment.ioA

  Run one Comment.io command or restricted shell script in your workspace, exactly as an SSH exec: same commands, output and exit codes. Start with {"command":"help"}. The command runs on Comment.io, not on your machine; pass text for --stdin commands in stdin. Every call ends within 45 seconds: error: deadline (exit 3) means the outcome is unknown and writes may still land within seconds. After a deadline, a nonzero exit or a lost response, reread state rather than repeating a mutation.

  Connector

  Destructive

  OAuth

• add_ssh_keyA

  BorealHostB

  Inject your SSH public key into a site's container for direct SSH access. The key is appended to /home/admin/.ssh/authorized_keys. Only available for VPS/dedicated plans. Requires: API key with write scope. Args: slug: Site identifier public_key: SSH public key string. Supported types: ssh-ed25519, ssh-rsa, ecdsa-sha2-nistp256/384/521 Returns: {"success": true, "message": "SSH key added", "ssh_command": "ssh admin@184.107.x.x"} Errors: VALIDATION_ERROR: Invalid or unsupported key format FORBIDDEN: Plan does not support SSH

  ConnectorNo auth

• inspect_targetA

  opencode-workbenchA

  Probe one Linux machine — this host (`local`) or a remote host over SSH (`ssh`) — and report its OS, kernel, architecture, package manager, Node/npm, OpenCode, Docker, and per-tool detection flags, plus the names (never values) of credentials present. Read-only: it runs one shell probe as the target user (over SSH when `mode:ssh`), installs nothing, writes nothing, contacts no external service, and can take a few seconds per hop. Parameter semantics: `target.mode` selects local vs ssh (default `local`); `target.host` is required only for ssh; `target.user` defaults to the ssh config/current user; `target.cwd` sets the directory for relative checks; `target.port`/`identityFile` pass straight to ssh. Use it to see what a clone would touch, then plan_clone to turn that into an ordered plan and apply_clone to perform it.

  ConnectorNo auth

• inspect_targetA

  opencode-workbenchA

  Probe one Linux machine — this host (`local`) or a remote host over SSH (`ssh`) — and report its OS, kernel, architecture, package manager, Node/npm, OpenCode, Docker, and per-tool detection flags, plus the names (never values) of credentials present. Read-only: it runs one shell probe as the target user (over SSH when `mode:ssh`), installs nothing, writes nothing, contacts no external service, and can take a few seconds per hop. Parameter semantics: `target.mode` selects local vs ssh (default `local`); `target.host` is required only for ssh; `target.user` defaults to the ssh config/current user; `target.cwd` sets the directory for relative checks; `target.port`/`identityFile` pass straight to ssh. Use it to see what a clone would touch, then plan_clone to turn that into an ordered plan and apply_clone to perform it.

  ConnectorNo auth

• get_vm_console_accessA

  Cycle MCPA

  Mint serial-over-SSH credentials so the USER can open their own interactive console session on a virtual machine, and return the exact ssh command to run. Use this when a person wants to drive the console themselves — poke around, watch a boot, run an interactive installer or a TUI. To run a specific command and get its output back, use run_vm_command instead; do NOT take these credentials and try to drive an interactive shell yourself. What comes back: the ssh command, the connection address, the connection secret (used at ssh's own password prompt), and the token's expiry. The credentials reach the VM's serial console through the Cycle gateway — no VM networking required, so this works even with public networking disabled or the guest's network broken. Logging IN to the guest is separate: past ssh, the console lands at the guest's own login prompt. The response includes the generated root password when it is still retrievable (~10 minutes after creation); after that the user needs their own guest credentials or an attached SSH key. Relay the credentials to the user plainly so they can paste the command. They are short-lived and they grant root-capable console access — treat them as a secret, do not write them into files, commits, or issues. action:"revoke" expires ALL serial-over-SSH tokens for the VM, immediately disconnecting every active console session on it (including a session the user is in the middle of, and anyone else's). It is a mutation: confirm with the user before calling it.

  Connector

  Destructive

  API key

• diagnose_bastionA

  AnkraB

  Inspect the SSH bastion host of an Ankra-provisioned cluster: sshd configuration, failed-login volume and top sources over the last 24 hours, disk usage, failed systemd units, recent journal errors, listening ports and pending security updates. Read-only. Use this after a bastion outage, or when asked about the bastion's security posture - the bastion runs no kubelet, so ssh_diagnose_node cannot inspect it. It reaches the host over SSH rather than through the cluster agent, because the agent sits behind the bastion. It cannot succeed while the bastion is offline - call get_bastion_health first, which answers the platform's recorded verdict without touching the host. For the power action, restart_node with target="bastion" reboots the bastion VM.

  ConnectorOAuth

• start_processA

  ShellwayA

  Start a command that keeps running (a dev server, a build, a Python or Node shell, an ssh session) and return its first output. Use read_process_output and interact_with_process to follow up and force_terminate to stop it. There is no terminal, so full-screen programs and password prompts will not work. At most 5 run at once; one nobody touches for 30 minutes is stopped.

  Connector

  Destructive

  OAuth

• assets_create_uploadA

  SuprSendA

  For agents that can run shell commands (for example Claude Code): gives a single-use URL to upload a local image (PNG, JPEG, GIF, WebP) or PDF to the SuprSend CDN, with the curl command to run. The command prints the public URL. The file is public: never upload private files. Without a shell, use assets_upload.

  ConnectorOAuth

• book_hotelA

  1stayA

  Book exactly one hotel room. The first 1Stay release does not support multi-room searches or reservations. Returns a secure checkout URL. This tool accepts no guest identity or payment fields. Name, email, phone, and payment details are collected on the secure checkout page. Guest pays the hotel directly. Their credit card statement shows the hotel name, not 1Stay. Hotel's own confirmation number. Loyalty points apply automatically. The displayed total includes taxes and any applicable, itemized 1Stay Booking Fee. Requires a rate_code from get_hotel_details, valid approximately 15 minutes. Expired codes are rejected.

  ConnectorNo auth

• place_bidA

  upgrade-agentA

  Places an upgrade bid, or buys a fixed-price (INSTANT) upgrade, for a checked booking. Takes an eligibility-check session id, an amount (omitted for INSTANT), and a cabin/segment. Returns a secure operator link to complete payment.

  ConnectorNo auth

• run_terminal_command

  Local MCPB

  Runs a shell command on the user's Mac and returns its output. Always active. Disabled when LMCP is in read-only mode. Dangerous commands (sudo, recursive deletes of system/home paths, disk formatting, shutdown/reboot, piping a downloaded script into a shell, fork bombs, daemon control) are refused. Commands run in a macOS sandbox with the same protected locations as file_read/file_write: credentials (keychains, ~/.ssh private keys, ~/.aws, ~/.config/gh, browser logins, another user's home) can't be read, and Local MCP's own settings, LaunchAgents and shell startup files can't be written; a command that names one is refused up front. CLIs that read their own credential file (aws, kubectl, gh with a file token) work only if the user adds that exact path to "fs_read_sensitive_allow" in Local MCP's config.json; keychain items stay out of reach. Inside the sandbox SwiftPM needs --disable-sandbox. Destructive: it previews the command first — pass confirm:true to actually run it. Output and runtime are capped.

  Connector

  Destructive

  OAuth

• create_page_linkA

  ctlsurfB

  Create a properly formatted page link for use in markdown content. Returns the wiki-style link format: [[Display Text|page_uuid]] Use this to generate links when creating or updating text blocks. The link format ensures the link remains valid even if the page is renamed. Example: create_page_link(page_id="abc-123", display_text="Architecture Overview") -> Returns: {"link": "[[Architecture Overview|abc-123]]", ...} If display_text is not provided, the page's current title will be used. Usage in text block: update_block(block_id, props={"content": "See the " + link + " for details."})

  ConnectorAPI key

• usage_platform_adjacencyA

  Crawlora MCPB

  Returns, per scraping platform, how many real users have used it (lifetime, successful requests only), its request volume, top entry endpoints, and which other platforms those users also use. Aggregated across all customers with internal, static, and console traffic excluded; recomputed at most once per 24 hours and served from cache. Powers the console dashboard's "Explore more" recommendation. Use usage_overview to retrieve current principal's API usage overview.

  ConnectorNo auth

• usage_platform_adjacencyA

  Crawlora MCPA

  Returns, per scraping platform, how many real users have used it (lifetime, successful requests only), its request volume, top entry endpoints, and which other platforms those users also use. Aggregated across all customers with internal, static, and console traffic excluded; recomputed at most once per 24 hours and served from cache. Powers the console dashboard's "Explore more" recommendation. Use usage_overview to retrieve current principal's API usage overview.

  ConnectorNo auth

• deploy_ssh_keyA

  VPSnetB

  Deploy an SSH key to VPS. Returns a noty UUID; follow it with wait_for_event. ASYNC — wait 15-30 seconds after deploying before attempting SSH. Use list_ssh_keys to get available key IDs. To add your own key first: read ~/.ssh/id_rsa.pub from local machine, then create_ssh_key, then deploy it here. Remote OAuth requires vm:exec; direct API-key use requires services:manage and a full-access key.

  Connector

  Destructive

  OAuth

• suitedash_send_messageA

  CotletB

  SuiteDash: New Secure Messaging thread, or a reply in an existing one. Sends a Secure Messaging message: a reply when thread_id is set, otherwise a new thread to the contacts or staff in to, with a subject. Messages go out under your name. By default you confirm each call; you can switch that off for this tool. Reaches other people: by default the call waits for the owner's approval in the Cotlet console (status pending); check it later with cotlet_get_call. Needs the user's Cotlet API key or sign-in with access to this app.

  ConnectorNo auth

• mint_eligibility_sessionA

  upgrade-agentA

  Internal helper for the inline eligibility form: creates a secure session and returns its id. No UI; agents should use start_eligibility_check instead.

  ConnectorNo auth

• connect_pedidosyaA

  veloraB

  [demo: deshabilitada] Connects PedidosYa for this business using the BYOA secure-form model. Primary: returns a secure link. Fallback: accepts an API token directly.

  Connector

  Destructive

  No auth