The best MCP servers for the command line — let AI agents run terminal commands, manage processes, and drive CLI tools with scoped, auditable access.
Why it’s hereMost popular in this category on AllMCPs
MCP server exposing SSH control for Linux and Windows servers via Model Context Protocol. Securely execute remote shell commands with password or SSH key authentication.
Why it’s hereCommunity pick
Manage multiple SSH servers from one MCP: command execution, file transfer/rsync, database dump/import/query (MySQL/PostgreSQL/MongoDB), backups & restore, health monitoring, persistent sessions, tunnels, ProxyJump/bastion, and opt-in per-server security modes (readonly/restricted) with audit log. Linux, macOS & Windows OpenSSH.
Why it’s hereCommunity pick
A Model Context Protocol server that provides access to iTerm. You can run commands and ask questions about what you see in the iTerm terminal.
Why it’s hereCommunity pick
MCP server for AI CLI tools (Claude, Codex, and Gemini) with background process management
Why it’s hereCommunity pick
MCP server for SSH operations with built-in diagnostics
Why it’s hereCommunity pick
Run approved shell commands on remote computers through AI assistants. The remote machine needs only curl and bash, with no SSH access or installed agent.
Why it’s hereCommunity pick
bash for AI agents on Windows via deterministic bash→PowerShell translation — no WSL, VM, or bash toolchain. MCP bash tool with GNU-style output, bash-style errors, coreutils exit codes, session-persisted cwd/env across calls, and per-file UTF-8/GBK sniffing (GBK files grep correctly, unlike Git Bash). Unsupported bash constructs fail loudly with the construct named; native commands (git/node/npm) pass through with argv quoting. npm install -g fauxnix-cli; verified with Claude Code, Codex, OpenCode, Kimi Code and Qwen Code.
When choosing a Model Context Protocol server for Command Line & Terminal, select verified or official listings if you need strict API security guarantees. For rapid local dev testing with Claude or Cursor, community-maintained tools offer zero-setup configuration blocks ready to copy-paste.
Shell and terminal MCP servers that support allow-lists and working-directory limits are the most trusted. This page ranks command-line MCP servers by real usage.
Use a server that supports command allow-lists or confirmation prompts, run it as a low-privilege user, and scope it to a specific working directory. Never grant unrestricted root shell access.
Some manage background processes and stream output; others are built for one-shot commands. Check each listing for process-management support.