@tumf
基本信息
Secure MCP server for whitelisted shell command execution with stdin, argv pipelines, timeouts, and structured audit logging.
使用下面的配置,将此服务器添加到你的 MCP 客户端。
{
"mcpServers": {
"mcp-shell-server": {
"command": "npx",
"args": [
"-y",
"@smithery/cli",
"install",
"mcp-shell-server",
"--client",
"claude"
]
}
}
}工具列表暂未提供
当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。
点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。
A secure shell command execution server implementing the Model Context Protocol (MCP). It allows remote execution of a pre‑whitelisted set of shell commands with optional stdin input, designed for controlled, auditable command‑line access from MCP clients.
Install with pip install mcp-shell-server or automatically via Smithery (npx -y @smithery/cli install mcp-shell-server --client claude). Set the ALLOW_COMMANDS (or ALLOWED_COMMANDS) environment variable with comma‑separated command names, then start the server with ALLOW_COMMANDS="ls,cat,echo" uvx mcp-shell-server. Configure the MCP client (e.g., Claude Desktop) with a JSON entry pointing to this command and any required environment variables.
<, >, >> to the working directoryls, grep, or catOnly command names listed in the `ALLOW_COMMANDS` (or `ALLOWED_COMMANDS`) environment variable, or matching a full‑match regex from `ALLOW_PATTERNS`, are allowed. The server also rejects known exec‑capable vectors like `find -exec` or shell interpreters even if the command name is allowlisted.
Children receive a minimal environment (only `PATH` and essential Windows keys by default). Additional variable names can be inherited from the parent or per‑call overrides using `MCP_SHELL_CHILD_ENV_ALLOWLIST`. Secret‑like names (e.g., containing `TOKEN`, `PASSWORD`) are redacted in logs.
The default timeout is 30 seconds, the maximum accepted timeout is 300 seconds, and the output limit per stdout/stderr stream is 1 MiB. Client‑supplied timeouts are clamped to the server maximum; processes exceeding these limits are terminated and reported.
No. It is not an OS‑level sandbox. While it enforces a command allowlist, argument hardening, and environment isolation, allowed binaries can still read accessible files or consume CPU. For untrusted workloads, run the server inside an external container, VM, or OS policy boundary.
The server is designed for stdio transport, as shown by the MCP client configuration examples that run it as a subprocess (e.g., via `uvx`). It communicates with the MCP client over standard input/output.
Build custom POS apps with your AI agent. Final's MCP server lets developers scaffold checkout flows, adapt vetted screen blueprints for counter POS, self-checkout kiosks, restaurant ordering and payment terminals, previ
Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.
Catch intent conflicts before code conflicts. The open-source coordination protocol for coding agents, built above Git.
MCP server for AI Agents — exposes Yocoolab feedback threads and design selections as tools
Official Porkbun MCP server, maintained by Porkbun. Check domain availability and pricing, register, renew and transfer domains, and manage DNS records, nameservers, URL forwarding, glue records, DNSSEC and domain contac
评论