mcp-shell MCP Server

@sonirico

代码仓库

基本信息

分类

开发工具

许可证

GPL-3.0

传输方式

stdio

作者

sonirico

关于 mcp-shell MCP Server

Give hands to AI. MCP server to run shell commands securely, auditably, and on demand.

#go #shell #bash #terminal #ai #mcp #llm #model-context-protocol#os-exec

mcp-shell MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "mcp-shell": {
      "command": "docker",
      "args": [
        "run",
        "-it",
        "--rm",
        "-v",
        "/tmp/mcp-workspace:/tmp/mcp-workspace",
        "sonirico/mcp-shell:latest"
      ]
    }
  }
}

mcp-shell MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is mcp-shell?

mcp-shell is an MCP server that runs shell commands, giving an LLM a tool while keeping control over what commands execute and how. Written in Go and built on mark3labs/mcp-go.

How to use mcp-shell?

Run via Docker (docker run -it --rm -v /tmp/mcp-workspace:/tmp/mcp-workspace sonirico/mcp-shell:latest) or from source (git clone, make install, then mcp-shell). Default is secure mode; customize with a YAML config file pointed to by MCP_SHELL_SEC_CONFIG_FILE. Wire into Claude Desktop by adding a shell server entry in its MCP config pointing to the Docker image or binary.

Key features of mcp-shell

Executes shell commands as an MCP tool.
Secure default mode with a strict executable allowlist (read‑only utilities).
Configurable YAML policy for both secure and legacy shell‑execution modes.
Docker deployment as a non‑root Alpine image.
Tool response includes exit code, stdout, stderr, execution time, and security info.
Audit logging and configurable timeouts and output size limits.

Use cases of mcp-shell

LLM agents perform read‑only file operations (list, cat, grep) in a controlled workspace.
Running approved system tasks under user‑defined command policies.
Integrating shell execution into AI workflows with audited, sandboxed commands.
Debugging or inspecting system state via an LLM interface.

常见问题

What is the default security mode?

Secure mode is the default, restricting execution to a narrow allowlist of read‑only utilities (`ls`, `cat`, `grep`, `find`, `head`, `tail`, …). No shell interpretation or interpreters are allowed.

How do I run unrestricted commands?

Set the environment variable `MCP_SHELL_ALLOW_UNSAFE=true` before starting the server. This disables all validation and is not recommended for production.

How do I customize the security policy?

Create a YAML config file and set `MCP_SHELL_SEC_CONFIG_FILE` to its path. You can enable secure or legacy mode, define allowed executables/commands, blocked patterns, timeouts, and output limits.

What happens if I allow an interpreter like bash?

The server warns at startup and denies the command. Interpreters execute whatever they are handed, bypassing secure mode, so they are hard‑denied even if on the allowlist.

How does the tool API work?

Pass a `command` string (required) and optional `base64` boolean. The response includes `status`, `exit_code`, `stdout`, `stderr`, `command`, `execution_time`, and optional `security_info`. Uses `exec.Command` in secure mode.

开发工具分类下的更多 MCP 服务器

offprompt

MCP server that lets Claude Code, Cursor or Codex ask you for API keys on a local page and write them to .env. The agent only ever sees key names.

LastPing

Know when your AI agents, cron jobs and CI pipelines fail, stall or go quiet. Your agent sets up monitors from a plain description, tells you what is broken and why, reads run history and traces, and writes notes on inci

Testiny MCP server

Mategra GmbH

Testiny is a test case management platform. Its remote MCP server lets AI assistants such as Claude, ChatGPT, GitHub Copilot, Cursor and other MCP clients work directly with your Testiny data. Browse and search projects,

Moxie Docs

Jackalope-Dev

Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.

Layro

Layro connects your AI coding tool (Cursor, Claude Code, VS Code, Windsurf, Codex, Gemini CLI) to 112 production React, TypeScript and Tailwind CSS components. Your agent can search the library, read each component's pro