广告合作
MCP.so
登录
S

Shellguard MCP Server

@jonchun

代码仓库

基本信息

分类

开发工具

传输方式

stdio

作者

jonchun

提交者

Jonathan Chun

关于 Shellguard MCP Server

ShellGuard is an MCP server that lets LLM agents securely SSH into remote Linux hosts with read-only shell access. Instead of copy-pasting terminal output, your AI can run safe diagnostics, inspect logs, query systems, and troubleshoot production, staging, or dev environments aut

#mcp#mcp-server#llm-tools#ai-agents#agent-infrastructure#developer-tools#cli#automation#devops#sysadmin#sre#infrastructure#linux#unix#bash#shell#ssh#remote-access#diagnostics#troubleshooting#log-inspection#observability#incident-response#aiops#llm-infrastructure#agentic-debugging#hands-free-debugging#ai-assisted-ops#secure-by-default#read-only#least-privilege#production-safe

Shellguard MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "shellguard": {
      "command": "shellguard"
    }
  }
}

Shellguard MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Shellguard?

Shellguard is an MCP server that gives LLM agents read-only bash access to remote servers over SSH. It allows AI assistants to run diagnostics, inspect logs, query databases, and troubleshoot remote servers without manual context-switching. Commands are restricted to a curated set of read-only tools; destructive operations are blocked with actionable suggestions.

How to use Shellguard?

Install via Homebrew (brew install jonchun/tap/shellguard), curl, or Go install. Then add it as a stdio MCP server to your client (Cursor, Claude Desktop, Claude Code, OpenCode, VS Code, Zed, Roo Code) using the command shellguard with no arguments. Configuration for SSH can be set in a YAML file (~/.config/shellguard/config.yaml) or via environment variables.

Key features of Shellguard

  • Exposes seven read-only tools: connect, execute, list_commands, disconnect, provision, download_file, sleep
  • Parses shell commands into AST and rejects unsafe syntax
  • Validates commands against an allowlist with explicit denylist
  • Supports native (built-in) and system (local ssh binary) SSH modes
  • Verifies host keys with accept-new, strict, or off modes
  • Probes and provisions diagnostic tools (rg, jq, yq) on remote hosts

Use cases of Shellguard

  • Investigate production incidents by running diagnostics on remote servers
  • Query databases or inspect logs without leaving the AI chat interface
  • Troubleshoot server behaviour by executing read-only commands
  • Deploy common diagnostic tools to servers that lack them

常见问题

1

What commands can the LLM run?

Only read-only commands from a curated allowlist. Every command is parsed, validated against the allowlist, reconstructed to prevent injection, and then executed with per-command timeouts and output truncation.

2

How does Shellguard prevent destructive actions?

Commands are parsed into an AST; shell tricks like semicolons, redirections, and command substitution are rejected at the syntax level. Destructive operations (e.g., `wget -r`, `tail -f`, `sed`) are blocked with specific suggestions so the LLM can self-correct.

3

What SSH authentication methods are supported?

Shellguard tries in order: explicit key (`identity_file` parameter in `connect`), ssh-agent, then default keys (`~/.ssh/id_ed25519`, `id_ecdsa`, `id_rsa`). Passphrase-protected keys are silently skipped unless specified via `identity_file`, which will cause a fatal error.

4

Can I use bastion hosts or ProxyJump?

Yes. Shellguard offers a "system" SSH mode that uses the local `ssh` binary, providing full support for `ProxyJump`, `ProxyCommand`, and `Match` blocks. Native mode (default) does not support these features, so switch to system mode if your infrastructure requires them.

5

What are the size and timeout limits?

The `download_file` tool has a 50MB limit. The `sleep` tool can wait up to 15 seconds between diagnostic checks. Per-command timeouts and output truncation are applied automatically.

评论

开发工具 分类下的更多 MCP 服务器

ZeroBeacon — 1000-Tool Collision-Proof Commerce Router

DavidFox998

ZeroBeacon.ai — Collision-proof commerce router for AI agents. 1000 MCP tools: commerce, trust, billing, sovereign ID + everyday tools. LIVE.

Mcp-Warden

ermoluk

Local-first credential broker for MCP. AI coding agents (Claude Code, Cursor, Codex…) call APIs, SSH and databases through scoped presets; secrets stay in your OS keychain and never enter the agent's context.

4

Moxie Docs

Jackalope-Dev

Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.

1

Casefile

azimov777

One case file per task — shared by every session, agent and person that touches it. Self-hosted MCP server and live board. MIT.

3

LastPing

LastPing

Know when your AI agents, cron jobs and CI pipelines fail, stall or go quiet. Your agent sets up monitors from a plain description, tells you what is broken and why, reads run history and traces, and writes notes on inci

广告合作