Super Shell MCP Server

What is Super Shell MCP Server?

An MCP server that securely executes shell commands across Windows, macOS, and Linux. It provides automatic platform detection, multiple shell support, and built-in command whitelisting with approval workflows. Designed for use with Claude Desktop (one-click extension available) and other MCP clients.

How to use Super Shell MCP Server?

Install via the Claude Desktop Extension (.dxt) for one-click setup, or use Smithery (npx -y @smithery/cli install @cfdude/super-shell-mcp --client claude), or clone the repository and run npm install && npm run build. For manual MCP client configuration, the recommended method uses NPX (npx -y super-shell-mcp). Configure environment variables like CUSTOM_SHELL or SUPER_SHELL_USE_SHELL as needed.

Key features of Super Shell MCP Server

• Cross-platform support: Windows, macOS, and Linux
• Automatic platform detection and shell selection
• Command whitelisting with Safe, Requires Approval, and Forbidden levels
• Shell parsing disabled by default to prevent command injection
• Non-blocking approval workflow for dangerous commands
• Comprehensive logging and command management tools

Use cases of Super Shell MCP Server

• Execute system commands from Claude Desktop with security controls
• Manage files and directories across operating systems
• Run scripts and utilities through approved command lists
• Build MCP clients that need safe shell access
• Automate workflows with platform-aware command execution

FAQ from Super Shell MCP Server

What is the Super Shell MCP Server?

It is an MCP server that allows AI assistants like Claude to execute shell commands on the host machine with built-in security features including whitelisting, approval workflows, and disabled shell parsing by default.

How can I install Super Shell MCP Server for Claude Desktop?

The recommended way is to download the .dxt file from the releases page and double-click it while Claude Desktop is open. This installs the extension automatically without requiring developer tools.

What security measures are in place?

Commands are categorized into Safe (auto-approved), Requires Approval (user must approve), and Forbidden (blocked). Shell parsing is disabled by default to eliminate command-injection risk, and can be optionally enabled via SUPER_SHELL_USE_SHELL environment variable for trusted workflows.

Which platforms are supported?

Windows (cmd.exe, PowerShell), macOS (zsh, bash, sh), and Linux (bash, sh, zsh). Configuration paths vary by platform.

How do I enable shell parsing and what are the risks?

Set the environment variable SUPER_SHELL_USE_SHELL to true (or 1/yes/on). Enabling shell parsing reintroduces command injection risk; only enable it when you fully trust the command source and payload.