🔐 ssh-mcp-server

Name: 🔐 ssh-mcp-server
Author: classfang

@classfang

リポジトリ

🔐 ssh-mcp-server について

基于 SSH 的 MCP 服务 🧙‍♀️。已被MCP官方收录 🎉。 SSH MCP Server 🧙‍♀️. It has been included in the community MCP repository 🎉.

基本情報

カテゴリ

開発者ツール

ライセンス

ISC

ランタイム

node

トランスポート

stdio

公開者

classfang

設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "ssh-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@fangjunjie/ssh-mcp-server",
        "--host",
        "192.168.1.1",
        "--port",
        "22",
        "--username",
        "root",
        "--password",
        "pwd123456"
      ]
    }
  }
}

ツール

ツールは検出されませんでした

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is 🔐 ssh-mcp-server?

🔐 ssh-mcp-server is a Model Context Protocol (MCP) server that enables AI assistants and other MCP-compatible applications to execute remote SSH commands through a standardized interface. It acts as a secure bridge, allowing AI models to operate remote servers without directly exposing SSH credentials.

How to use 🔐 ssh-mcp-server?

It can be run directly via npx without global installation. Configuration is done in your MCP client's mcp.json file, passing arguments such as --host, --port, --username, and authentication method (--password, --privateKey, or --passphrase). Multiple connection profiles, command restrictions, transport modes, and MFA support are configured through additional CLI arguments or a JSON config file.

Key features of 🔐 ssh-mcp-server

Supports password and private key (with passphrase) authentication
Whitelist and blacklist patterns for command security control
Complies with MCP protocol for seamless AI integration
Dual transport modes: exec and shell for bastion/jump hosts
Bidirectional file transfer (upload and download)
Credentials managed locally, never exposed to AI models

Use cases of 🔐 ssh-mcp-server

AI assistant executing remote server commands (e.g., system inspection, log reading)
Securely managing servers through MCP clients with command restrictions
Connecting to bastion/jump hosts or devices that require an interactive shell
Multi-server management via a single MCP server configuration
Automated file transfers between local and remote machines

FAQ from 🔐 ssh-mcp-server

What authentication methods are supported?

Password authentication, private key authentication, and private key with passphrase are supported. The server can also reuse entries from ~/.ssh/config.

How can I restrict which commands can be executed?

Use --whitelist to allow only commands matching specified patterns, or --blacklist to block dangerous commands. Both accept comma-separated regular expressions.

What is the difference between `exec` and `shell` transport modes?

exec mode supports command execution, upload, and download. shell mode runs commands through a persistent shell session (useful for bastion hosts) but does not support file transfers (upload/download).

How do I handle MFA (multi-factor authentication) on the SSH server?

Enable --try-keyboard and set the environment variable SSH_MCP_2FA_CODE before connecting. The server will supply password and private key automatically, then prompt for the 2FA code.

What tools does this server provide?

It provides four tools: execute-command (run commands), upload (upload files), download (download files), and list-servers (list configured SSH connections).