広告掲載
MCP.so
ログイン
S

Shellguard MCP Server

@jonchun

リポジトリ

基本情報

カテゴリ

開発者ツール

トランスポート

stdio

作者

jonchun

投稿者

Jonathan Chun

Shellguard MCP Server について

ShellGuard is an MCP server that lets LLM agents securely SSH into remote Linux hosts with read-only shell access. Instead of copy-pasting terminal output, your AI can run safe diagnostics, inspect logs, query systems, and troubleshoot production, staging, or dev environments aut

#mcp#mcp-server#llm-tools#ai-agents#agent-infrastructure#developer-tools#cli#automation#devops#sysadmin#sre#infrastructure#linux#unix#bash#shell#ssh#remote-access#diagnostics#troubleshooting#log-inspection#observability#incident-response#aiops#llm-infrastructure#agentic-debugging#hands-free-debugging#ai-assisted-ops#secure-by-default#read-only#least-privilege#production-safe

Shellguard MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "shellguard": {
      "command": "shellguard"
    }
  }
}

Shellguard MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Shellguard?

Shellguard is an MCP server that gives LLM agents read-only bash access to remote servers over SSH. It allows AI assistants to run diagnostics, inspect logs, query databases, and troubleshoot remote servers without manual context-switching. Commands are restricted to a curated set of read-only tools; destructive operations are blocked with actionable suggestions.

How to use Shellguard?

Install via Homebrew (brew install jonchun/tap/shellguard), curl, or Go install. Then add it as a stdio MCP server to your client (Cursor, Claude Desktop, Claude Code, OpenCode, VS Code, Zed, Roo Code) using the command shellguard with no arguments. Configuration for SSH can be set in a YAML file (~/.config/shellguard/config.yaml) or via environment variables.

Key features of Shellguard

  • Exposes seven read-only tools: connect, execute, list_commands, disconnect, provision, download_file, sleep
  • Parses shell commands into AST and rejects unsafe syntax
  • Validates commands against an allowlist with explicit denylist
  • Supports native (built-in) and system (local ssh binary) SSH modes
  • Verifies host keys with accept-new, strict, or off modes
  • Probes and provisions diagnostic tools (rg, jq, yq) on remote hosts

Use cases of Shellguard

  • Investigate production incidents by running diagnostics on remote servers
  • Query databases or inspect logs without leaving the AI chat interface
  • Troubleshoot server behaviour by executing read-only commands
  • Deploy common diagnostic tools to servers that lack them

よくある質問

1

What commands can the LLM run?

Only read-only commands from a curated allowlist. Every command is parsed, validated against the allowlist, reconstructed to prevent injection, and then executed with per-command timeouts and output truncation.

2

How does Shellguard prevent destructive actions?

Commands are parsed into an AST; shell tricks like semicolons, redirections, and command substitution are rejected at the syntax level. Destructive operations (e.g., `wget -r`, `tail -f`, `sed`) are blocked with specific suggestions so the LLM can self-correct.

3

What SSH authentication methods are supported?

Shellguard tries in order: explicit key (`identity_file` parameter in `connect`), ssh-agent, then default keys (`~/.ssh/id_ed25519`, `id_ecdsa`, `id_rsa`). Passphrase-protected keys are silently skipped unless specified via `identity_file`, which will cause a fatal error.

4

Can I use bastion hosts or ProxyJump?

Yes. Shellguard offers a "system" SSH mode that uses the local `ssh` binary, providing full support for `ProxyJump`, `ProxyCommand`, and `Match` blocks. Native mode (default) does not support these features, so switch to system mode if your infrastructure requires them.

5

What are the size and timeout limits?

The `download_file` tool has a 50MB limit. The `sleep` tool can wait up to 15 seconds between diagnostic checks. Per-command timeouts and output truncation are applied automatically.

コメント

「開発者ツール」の他のコンテンツ

Foremerge

naw103

Catch intent conflicts before code conflicts. The open-source coordination protocol for coding agents, built above Git.

50

FARPY

mangomunchr

Verified distributed compute for humans, applications, and agents. Submit Blender, Octane, and video workloads, route them across qualified GPUs, track asynchronous execution, download finished artifacts, and verify FARP

1

Capgo MCP

Cap-go

Console, Backend and CLI to manage Capgo Instant update and Native build for Capacitor apps Build and upload to app store your mobile app

NextBlock CMS

NextBlock

Open-source Next.js + Supabase CMS with a per-site MCP server: scaffold a site, then create pages, posts, navigation, media and SEO from Claude, Cursor or any MCP client. Streamable HTTP with a bearer token you mint in y

LastPing

LastPing

Know when your AI agents, cron jobs and CI pipelines fail, stall or go quiet. Your agent sets up monitors from a plain description, tells you what is broken and why, reads run history and traces, and writes notes on inci

広告掲載