Console Automation MCP Server
Console Automation MCP gives an agent local shells and SSH sessions: input, output, error detection, long processes
- 54 ★ on the repository
- Last commit
Broad access
Why this level
- The server runs arbitrary commands and opens SSH sessions with your credentials
- Terminal output, secrets included, enters the conversation with the model
Install
- Works in
Manual install
./install.sh --target codexRun from the repository clone, on Windows `.\install.ps1 -Target codex`.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The server runs arbitrary commands and opens SSH sessions with your credentials
- Terminal output, secrets included, enters the conversation with the model
This is third-party code. Review the repository files before installing.
What it does
Console Automation MCP is a server for controlled work with console applications and remote SSH sessions. The agent creates up to 50 concurrent sessions in cmd, PowerShell, bash, zsh and other shells, sends text and special keys such as Enter, Tab and Ctrl+C and reads output with search, filters and streaming for long processes. Built-in patterns detect errors, exceptions and stack traces across languages. SSH supports a password and a key with a passphrase, saved connection profiles and credential references from environment variables, as well as clouds, containers and WSL. A test automation set with output assertions exists. The project runs on Windows, macOS and Linux with no native dependencies.
Who it is for. Developers and admins who need to give an agent an interactive terminal with monitoring of long tasks.
Good fit when
- The agent starts a long build and watches for errors in the output without blocking the dialog
- An interactive program receives input step by step with control keys
- An SSH session on a remote server opens from a saved profile
- Command results are checked with assertions in an automated test
Not a fit when
- The agent must not run arbitrary commands
- The server has to run on a production server without a separate account
- A single one-off command with no sessions is enough
Example request
Start the project build in a new bash session, watch for errors in the output and tell me when the process finishesMCP
- Transport
- stdio
- Authentication
- not required
Environment variables
LOG_LEVEL- Log level, for example warn
Limitations
The server runs arbitrary commands and opens SSH sessions, so it behaves as a privileged terminal. The author advises keeping call approvals on, using SSH keys or environment variable references instead of inline passwords, creating a restricted account and a separate production approval step. The package is not published on npm: install from a clone with `./install.sh --target codex`, `npm ci` and `npm run build`. Enable debug logs and session persistence only when needed.
How to disable. Remove the registration with `codex mcp remove console-automation` or delete the server entry from the client, then delete the repository clone.
FAQ
How do I install it for Codex?
Clone the repository and run `./install.sh --target codex` or `.\install.ps1 -Target codex` on Windows. The installer calls `codex mcp add` and replaces an earlier registration.
Is there an npm package?
No, the package is not published, so `npx console-automation-mcp` and `@mcp/console-automation` do not work. Install from the repository.
Which shells are supported?
Locally cmd, PowerShell, pwsh, bash, zsh and sh, remotely SSH. Docker containers and WSL are attached separately.
How do I protect access?
Keep call approvals on, use SSH keys, create a restricted account and do not enable `MCP_DEBUG_LOG` without need.
How many sessions can it hold?
Up to 50 concurrent console sessions.
Discussion
No questions or reviews yet.
Related
MCP serversMCP server giving an agent a PowerShell 7 console shared with the user: commands appear live, passwords and MFA codes stay manual.
MCP SSH Agent is an MCP server that reads hosts from ~/.ssh/config, runs commands and copies files through system ssh and scp.
SSH MCP Server (classfang): remote commands over SSH
SSH MCP Server (classfang)
An SSH MCP server: the agent runs commands, reads and writes files over SFTP, transfers files and starts long jobs while credentials stay with you
A WebSSH console for VPS with an MCP server: the agent works across several servers while ACL tokens limit tools and hosts.
MCP SSH Manager
mcp-ssh-manager
Managing several SSH connections from Claude Code and Codex: commands, file transfer, databases and backups
SSH MCP
ssh-mcp
A security-first SSH server: command classification, policy authorization and several sign-in methods. It runs commands on remote servers
README in short
The README starts with a warning that the server must be treated as a privileged terminal and lists safety measures. Features, installation for Codex and by hand, configuration and troubleshooting follow.