What security controls does Lilith Shell have?
The current implementation has no command allowlist, no denylist, no environment filtering, no output sanitization, and no audit log. It uses `shell=True` with untrusted tool input.
@charles-adedotun
Basic information
An MCP (Model Context Protocol) server that enables AI assistants to execute terminal commands securely.
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"Lilith-Shell": {
"command": "python3",
"args": [
"-m",
"venv",
"venv"
]
}
}
}Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Lilith Shell is an experimental MCP server that exposes local shell command execution to an AI assistant. It is a prototype intended for development and testing, not for production use.
Install from source using pip install -e ".[dev]" after cloning the repository, then run the MCP server in your AI assistant client. The server registers one tool, execute_command, which accepts a command string and an optional directory string (defaults to ~).
execute_commandsubprocess.run(..., shell=True)The current implementation has no command allowlist, no denylist, no environment filtering, no output sanitization, and no audit log. It uses `shell=True` with untrusted tool input.
No. The README warns against running it on any host, account, or directory containing credentials, production data, private source code, SSH keys, or cloud tokens. It is strictly a prototype.
The README does not specify supported platforms beyond general Python execution. No Windows-specific execution path is implemented.
Use `pip install -e ".[dev]"` to install in development mode, then run `pytest` to execute tests.
Capabilities like command allowlisting, dangerous command detection, configurable modes, output sanitization, audit logging, working-directory confinement, cross-platform shell selection, and streaming output are not present in the current code.

Verified cyber-physical AI tools. 25 MCP tools, x402-payable on Base.

MCP server for AI Agents — exposes Yocoolab feedback threads and design selections as tools

Turn Perfex CRM into an AI-ready workspace. This MCP server exposes your full REST API to Claude, ChatGPT and any AI agent, so leads, invoices and tasks are one prompt away.

SSH MCP server for AI agents: remote commands, file transfer, log search and server audits through OpenSSH.

Verified distributed compute for humans, applications, and agents. Submit Blender, Octane, and video workloads, route them across qualified GPUs, track asynchronous execution, download finished artifacts, and verify FARP
Comments