SSH MCP
ssh-mcp
A security-first SSH server: command classification, policy authorization and several sign-in methods. It runs commands on remote servers
- 804 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- Runs commands on remote servers
- The README names the danger as a combination of private data, untrusted input and outbound network
- A separate account with minimal rights is needed
Install
- Works in
Manual install
claude mcp add --transport stdio ssh-mcp -- ssh-mcpFirst npm install -g ssh-mcp. A sample launch: npx ssh-mcp --host=10.0.0.5 --user=deploy --group=dev.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Runs commands on remote servers
- The README names the danger as a combination of private data, untrusted input and outbound network
- A separate account with minimal rights is needed
This is third-party code. Review the repository files before installing.
What it does
SSH MCP lets an agent run commands on remote servers over SSH. It bets on security: it classifies commands, allows them by policy and supports several sign-in methods, including the operating system key store. The README itself names the danger a lethal trifecta: private data, untrusted input and outbound network in one place. Installation: `npm install -g ssh-mcp`, in Claude Code `claude mcp add --transport stdio ssh-mcp -- ssh-mcp`, a sample launch `npx ssh-mcp --host=10.0.0.5 --user=deploy --group=dev`. Version 2.18.0 from 04.10.2026, MIT license.
Who it is for. For administrators and DevOps who need to give an agent limited access to servers: reading logs, diagnostics, typical operations.
Good fit when
- You need an agent to diagnose a server over SSH
- You need policies that allow some commands and forbid others
- You need to work with keys from the operating system key store
Not a fit when
- You cannot let an agent run commands on production servers
- You have no account with minimal rights for the agent
Example request
Connect to the test server as the deploy user, show the free disk space and the latest errors in the service logMCP
- Transport
- stdio
- Authentication
- API key
Limitations
The server runs commands on remote servers, so access is wide. The README itself warns about the danger of combining private data, untrusted input and outbound network. Use a separate account with minimal rights and policies that allow only the needed commands. Do not connect the server to production systems without checking the policies on a test machine.
How to disable. Remove the ssh-mcp entry from the client config (claude mcp remove ssh-mcp), remove the package and revoke the keys or account access on the servers.
FAQ
What does SSH MCP do?
It lets an agent run commands on remote servers over SSH with command classification and policies.
Is it dangerous?
Access is wide: the README names the danger as a combination of private data, untrusted input and outbound network. Use minimal rights and policies.
How do I install it?
npm install -g ssh-mcp and claude mcp add --transport stdio ssh-mcp -- ssh-mcp.
Discussion
No questions or reviews yet.
Related
MCP serversMCP SSH Manager
mcp-ssh-manager
Managing several SSH connections from Claude Code and Codex: commands, file transfer, databases and backups
Self-hosted MCP server for running commands on remote servers over SSH, with tokens and roles
A proxy between MCP transports: connects stdio clients to remote SSE and HTTP servers and exposes local servers over the network
MCPM
mcpm
A package manager and registry for MCP on all platforms and clients: finds, adds and configures MCP servers, remembers the source and updates
A self-hosted gateway that merges several MCP servers into one endpoint with auth and tool selection
A secure MCP runtime through which an agent operates local machines, servers and containers
Comparison with similar tools
Entries that share the main search query, and how they differ.
| Entry | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| SSH MCP (this entry) | no | API key | 804 | |
| MCP SSH Manager | no | API key | 506 | SSH to several servers with the default mode unrestricted |
| wcgw | no | not required | 678 | an interactive shell and file editing with unfiltered access |
README in short
The README describes an SSH server with command classification, policies and sign-in methods and directly warns about the danger of combining data, input and network. MIT license.