MCP SSH Agent
MCP SSH Agent is an MCP server that reads hosts from ~/.ssh/config, runs commands and copies files through system ssh and scp.
- 105 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- The agent executes arbitrary commands on remote servers with your account's rights.
- File transfer changes data on the server and on the local disk.
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add mcp/mcp-ssh-agentDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The agent executes arbitrary commands on remote servers with your account's rights.
- File transfer changes data on the server and on the local disk.
This is third-party code. Review the repository files before installing.
What it does
MCP SSH Agent adds SSH control to Claude Desktop and other MCP clients. The server finds hosts in `~/.ssh/config` and `~/.ssh/known_hosts` and runs commands through the stock `ssh` and `scp`, with no JavaScript SSH library. The agent gets seven tools: list known hosts, describe a host, check connectivity, run one command, run a batch of commands in sequence, upload a file and download a file. The SSH agent, keys and login methods stay as they are in a terminal. Passwords and key passphrases are supplied through the `@password` annotation and, per the author, never leave the machine.
Who it is for. Administrators and developers whose servers are already described in `~/.ssh/config` and who want to manage them from an MCP client.
Good fit when
- An agent checks whether a server from `~/.ssh/config` responds.
- A chain of commands has to run on a remote machine and its output must be read.
- An application config is downloaded from a server for editing in a local project.
- Hosts from `known_hosts` are listed in chat to pick the right one.
Not a fit when
- A production server where an agent must not run commands without reviewing each one.
- An interactive session with terminal input is needed.
- Access to a host must not be given to an external model at all.
Example request
List known SSH hosts, check connectivity to `staging` and print free disk space with `df -h`.MCP
- Transport
- stdio
- Authentication
- not required
Limitations
The `runRemoteCommand` tool executes an arbitrary command with the rights of the chosen SSH account, and `runCommandBatch` runs several in a row. The README describes no confirmation step inside the server, so protection rests on MCP client settings and the user's rights on the host. Uploads and downloads touch both remote and local paths. The last commit in the repository dates from August 2026. Use a separate account with minimal rights and do not connect production hosts unless necessary. Before a command batch, read each command and the copy paths.
How to disable. Remove the `mcp-ssh` entry from the client configuration and restart it. If installed globally, run `npm uninstall -g @aiondadotcom/mcp-ssh`. Revoke SSH keys and access on the servers themselves.
FAQ
Which tools does the server provide?
Seven: `listKnownHosts`, `runRemoteCommand`, `getHostInfo`, `checkConnectivity`, `uploadFile`, `downloadFile` and `runCommandBatch`.
Where does the server get its host list?
From `~/.ssh/config` first, then from `~/.ssh/known_hosts`. Configuration entries come first.
Can I log in with a password?
Yes. Set a password or key passphrase through the `@password` annotation. The author states they never leave the machine.
How do I install without npm commands?
Download the `.mcpb` file from the releases page and double-click it. Claude Desktop installs the bundle itself.
Do commands need confirmation?
The server asks for no confirmation. Enable tool-call confirmation in the MCP client itself.
Discussion
No questions or reviews yet.
Related
MCP serversMCP SSH Manager
mcp-ssh-manager
Managing several SSH connections from Claude Code and Codex: commands, file transfer, databases and backups
SSH MCP
ssh-mcp
A security-first SSH server: command classification, policy authorization and several sign-in methods. It runs commands on remote servers
SSH MCP Server (classfang): remote commands over SSH
SSH MCP Server (classfang)
An SSH MCP server: the agent runs commands, reads and writes files over SFTP, transfers files and starts long jobs while credentials stay with you
Self-hosted MCP server for running commands on remote servers over SSH, with tokens and roles
Console Automation MCP gives an agent local shells and SSH sessions: input, output, error detection, long processes
A command-line SSH tool for agents: remote execution, file upload and download, and command allow and block lists.
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| MCP SSH Agent (this card) | no | not required | 105 | |
| SSH MCP Server | no | API key | 2 | offers SSH access as a separate package; MCP SSH Agent reads hosts from `~/.ssh/config` and works through `ssh` and `scp` |
| MCP SSH Manager | no | API key | 539 | manages SSH connections with a different implementation; this one stresses stock utilities and host auto-discovery |
README in short
The server uses system `ssh` and `scp`, so the SSH agent, keys and familiar login methods work. Hosts are discovered automatically.