Log inSubmit server
MCP Ssh Manager logo

MCP Ssh Manager

by bvisible

Manage SSH hosts from an MCP client with remote commands, file transfer, databases, backups, tunnels, and per-server controls.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install MCP Ssh Manager

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "bvisible-mcp-ssh-manager": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-ssh-manager"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Install not yet sandbox-tested— we haven't run this command through our automated sandbox yet. Not a red flag; we're working through the catalog.

Overview

bvisible/mcp-ssh-manager MCP server lets MCP-compatible agents manage multiple SSH hosts through OpenSSH. It supports remote command execution, file transfer, database operations, backups, health checks, persistent sessions, tunnels, ProxyJump, and bastion access. Per-server modes can allow unrestricted access, read-only operations, or commands matching configured allow and deny patterns. Reach for it when an agent needs operational access to Linux, macOS, or Windows SSH servers from Claude Code or OpenAI Codex.

Use cases

  • Execute commands across grouped SSH servers
  • Transfer and synchronize deployment files
  • Dump, import, or query remote databases
  • Create and restore server backups
  • Restrict agent actions on production hosts

Key features

  • Multi-server SSH command execution
  • File transfer and rsync synchronization
  • MySQL, PostgreSQL, and MongoDB operations
  • Backups, restores, and health monitoring
  • SSH tunnels, ProxyJump, and bastion support
  • Per-server readonly and restricted modes

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked Today

Recent health check succeeded.

21/21 checks healthy over the last 79d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 8d ago via OSV.dev · mcp-ssh-manager (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars525Stargazers on the source repository.
npm downloads6.5kPackage downloads in the last 30 days.
Last commit2d agoMost recent push to the default branch.
Directory activity13 viewsConfig copies, upvotes, and views on AllMCPs.

How MCP Ssh Manager works

What bvisible/mcp-ssh-manager MCP server does

bvisible/mcp-ssh-manager MCP server exposes SSH-based administration capabilities to an MCP client. It is designed for managing several remote servers from one configuration rather than connecting to each host manually. Supported tasks include running commands, moving files, synchronizing directories with rsync, creating and restoring backups, checking service and host health, and maintaining persistent remote sessions.

Database operations cover MySQL, PostgreSQL, and MongoDB. The listed functions include database dumps, imports, and queries. Read-only SQL enforcement is applied to ssh_db_query, which rejects statements that are not SELECT queries.

The server also supports SSH tunnels, ProxyJump, bastion hosts, and optional per-server SSH agent forwarding. Agent forwarding requires a running local SSH agent and does not copy private keys to the remote host.

How it works

The MCP server uses the OpenSSH client available on the host where it runs, and can target SSH servers on Linux, macOS, and Windows. Server definitions can include an optional group, allowing group-based command execution. Groups may be defined in .env or TOML configuration and can be combined with a .server-groups.json file.

Access policy is configured separately for each server. unrestricted is the default mode. readonly blocks mutating actions such as deployment, uploads, sudo operations, and database imports while retaining read operations. restricted requires every command to match an allow pattern and not match a deny pattern before it is sent to the host.

Sudo passwords are sent through the SSH channel’s standard input instead of being placed in the remote command line. The project also centralizes shell quoting for database, backup, and other command builders, with tests covering injection payload combinations.

Setup and configuration

The project is published as the npm package mcp-ssh-manager.

Configuration examples use per-server environment-variable names such as SSH_SERVER_PROD_MODE, SSH_SERVER_STAGING_MODE, and SSH_SERVER_STAGING_ALLOW_PATTERNS. Server settings can also include a group value and the forward_agent or FORWARD_AGENT option. Agent forwarding is opt-in and defaults to disabled.

Because the tool can execute commands on important hosts, configure security modes per server before giving an agent access. Review where the MCP host captures stderr and logs, and protect the SSH credentials and configuration used by the process.

Tools and capabilities

bvisible/mcp-ssh-manager MCP server supports capabilities in these areas:

  • Execute commands on named SSH servers or server groups.
  • Transfer files and synchronize directories with rsync.
  • Run MySQL, PostgreSQL, and MongoDB dump, import, and query operations.
  • Create and restore backups.
  • Inspect service status and host health, including tailing logs.
  • Maintain persistent SSH sessions.
  • Create SSH tunnels and connect through ProxyJump or bastion hosts.
  • Apply read-only or restricted command policies per server.
  • Record an audit log and optionally forward the local SSH agent.

Limitations and notes

The default unrestricted mode permits the full operation set, so it should not be treated as a safety boundary. Restricted patterns must be designed carefully, and readonly mode does not mean the agent has no access to remote data.

The README identifies security fixes in version 3.8.5 affecting backup tools, database dumps, service-status checks, log tailing, and the readonly or restricted policy path. Users relying on those features should upgrade to the fixed release and review the project’s security advisories.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about MCP Ssh Manager

It does not mention Claude Desktop.

Yes. Each server can use readonly mode to block mutating tools or restricted mode to require allow-pattern matches and reject deny-pattern matches.

Yes. The server supports database dumps, imports, and queries for MySQL and PostgreSQL, as well as MongoDB operations.

Related MCP servers

All in Command Line All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewMCP Ssh Manager AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/bvisible-mcp-ssh-manager?style=directory)](https://allmcps.com/mcp/bvisible-mcp-ssh-manager)
HTML Embed
<a href="https://allmcps.com/mcp/bvisible-mcp-ssh-manager"><img src="https://allmcps.com/api/badge/bvisible-mcp-ssh-manager?style=directory" alt="MCP Ssh Manager on AllMCPs" /></a>