What security controls does Lilith Shell have?
The current implementation has no command allowlist, no denylist, no environment filtering, no output sanitization, and no audit log. It uses `shell=True` with untrusted tool input.
@charles-adedotun
Basic information
An MCP (Model Context Protocol) server that enables AI assistants to execute terminal commands securely.
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"Lilith-Shell": {
"command": "python3",
"args": [
"-m",
"venv",
"venv"
]
}
}
}Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Lilith Shell is an experimental MCP server that exposes local shell command execution to an AI assistant. It is a prototype intended for development and testing, not for production use.
Install from source using pip install -e ".[dev]" after cloning the repository, then run the MCP server in your AI assistant client. The server registers one tool, execute_command, which accepts a command string and an optional directory string (defaults to ~).
execute_commandsubprocess.run(..., shell=True)The current implementation has no command allowlist, no denylist, no environment filtering, no output sanitization, and no audit log. It uses `shell=True` with untrusted tool input.
No. The README warns against running it on any host, account, or directory containing credentials, production data, private source code, SSH keys, or cloud tokens. It is strictly a prototype.
The README does not specify supported platforms beyond general Python execution. No Windows-specific execution path is implemented.
Use `pip install -e ".[dev]"` to install in development mode, then run `pytest` to execute tests.
Capabilities like command allowlisting, dangerous command detection, configurable modes, output sanitization, audit logging, working-directory confinement, cross-platform shell selection, and streaming output are not present in the current code.

Build custom POS apps with your AI agent. Final's MCP server lets developers scaffold checkout flows, adapt vetted screen blueprints for counter POS, self-checkout kiosks, restaurant ordering and payment terminals, previ

Verified distributed compute for humans, applications, and agents. Submit Blender, Octane, and video workloads, route them across qualified GPUs, track asynchronous execution, download finished artifacts, and verify FARP

Kaiva Bridge turns your API, database or documents into a managed MCP server for Claude, ChatGPT, Cursor and VS Code. Point it at an OpenAPI or Swagger spec, an API docs link, a cURL command, a Postman collection, a Grap
MCP server that lets Claude Code, Cursor or Codex ask you for API keys on a local page and write them to .env. The agent only ever sees key names.

Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.
Comments