广告合作
MCP.so
登录
S

Shellguard MCP Server

@jonchun

代码仓库

基本信息

分类

开发工具

传输方式

stdio

作者

jonchun

提交者

Jonathan Chun

关于 Shellguard MCP Server

ShellGuard is an MCP server that lets LLM agents securely SSH into remote Linux hosts with read-only shell access. Instead of copy-pasting terminal output, your AI can run safe diagnostics, inspect logs, query systems, and troubleshoot production, staging, or dev environments aut

#mcp#mcp-server#llm-tools#ai-agents#agent-infrastructure#developer-tools#cli#automation#devops#sysadmin#sre#infrastructure#linux#unix#bash#shell#ssh#remote-access#diagnostics#troubleshooting#log-inspection#observability#incident-response#aiops#llm-infrastructure#agentic-debugging#hands-free-debugging#ai-assisted-ops#secure-by-default#read-only#least-privilege#production-safe

Shellguard MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "shellguard": {
      "command": "shellguard"
    }
  }
}

Shellguard MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Shellguard?

Shellguard is an MCP server that gives LLM agents read-only bash access to remote servers over SSH. It allows AI assistants to run diagnostics, inspect logs, query databases, and troubleshoot remote servers without manual context-switching. Commands are restricted to a curated set of read-only tools; destructive operations are blocked with actionable suggestions.

How to use Shellguard?

Install via Homebrew (brew install jonchun/tap/shellguard), curl, or Go install. Then add it as a stdio MCP server to your client (Cursor, Claude Desktop, Claude Code, OpenCode, VS Code, Zed, Roo Code) using the command shellguard with no arguments. Configuration for SSH can be set in a YAML file (~/.config/shellguard/config.yaml) or via environment variables.

Key features of Shellguard

  • Exposes seven read-only tools: connect, execute, list_commands, disconnect, provision, download_file, sleep
  • Parses shell commands into AST and rejects unsafe syntax
  • Validates commands against an allowlist with explicit denylist
  • Supports native (built-in) and system (local ssh binary) SSH modes
  • Verifies host keys with accept-new, strict, or off modes
  • Probes and provisions diagnostic tools (rg, jq, yq) on remote hosts

Use cases of Shellguard

  • Investigate production incidents by running diagnostics on remote servers
  • Query databases or inspect logs without leaving the AI chat interface
  • Troubleshoot server behaviour by executing read-only commands
  • Deploy common diagnostic tools to servers that lack them

常见问题

1

What commands can the LLM run?

Only read-only commands from a curated allowlist. Every command is parsed, validated against the allowlist, reconstructed to prevent injection, and then executed with per-command timeouts and output truncation.

2

How does Shellguard prevent destructive actions?

Commands are parsed into an AST; shell tricks like semicolons, redirections, and command substitution are rejected at the syntax level. Destructive operations (e.g., `wget -r`, `tail -f`, `sed`) are blocked with specific suggestions so the LLM can self-correct.

3

What SSH authentication methods are supported?

Shellguard tries in order: explicit key (`identity_file` parameter in `connect`), ssh-agent, then default keys (`~/.ssh/id_ed25519`, `id_ecdsa`, `id_rsa`). Passphrase-protected keys are silently skipped unless specified via `identity_file`, which will cause a fatal error.

4

Can I use bastion hosts or ProxyJump?

Yes. Shellguard offers a "system" SSH mode that uses the local `ssh` binary, providing full support for `ProxyJump`, `ProxyCommand`, and `Match` blocks. Native mode (default) does not support these features, so switch to system mode if your infrastructure requires them.

5

What are the size and timeout limits?

The `download_file` tool has a 50MB limit. The `sleep` tool can wait up to 15 seconds between diagnostic checks. Per-command timeouts and output truncation are applied automatically.

评论

开发工具 分类下的更多 MCP 服务器

JiCo for Jira & Confluence – PII-redacting MCP server with Human-in-the-Loop

drkv-com

JiCo for Jira & Confluence: local MCP server for Jira Data Center - redacts personal data before the AI model, holds every write for approval

Yocoolab

Yocoolab

MCP server for AI Agents — exposes Yocoolab feedback threads and design selections as tools

1

GripForge

gripforgeai

The tools your AI needs to make your games. Turn prompts into production-ready game assets — animated characters with their weapons attached, seamless textures, terrain, VFX, HUDs — and playable game kits Unity, Godot, U

1

Official Porkbun MCP Server

Porkbun LLC

Official Porkbun MCP server, maintained by Porkbun. Check domain availability and pricing, register, renew and transfer domains, and manage DNS records, nameservers, URL forwarding, glue records, DNSSEC and domain contac

32

Raccha AI

Shree Mandadi

MCP-first toolbox for agents: namespaced key-value storage, a FIFO queue, auth, and a handful of stateless utility tools (JWT decode, hashing, cert inspection, CIDR math). Free while in early access. This repository is a

广告合作