Remote Ssh MCP vs Remotify MCP

A side-by-side look at the Remote Ssh MCP and Remotify MCP MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.

Remote Ssh MCP logoRemote Ssh MCPCommand Line · Local subprocess (stdio)Persistent stateful remote SSH sessions for AI agents via MCP + OpenSSH.60GoodAuth: not declaredRemotify MCP logoRemotify MCPCommand Line · Local subprocess (stdio)Run approved shell commands on remote computers through AI assistants. The remote machine needs only curl and bash, with no SSH access or installed agent.65GreatAuth: not declared

Verdict: choose Remote Ssh MCP for command line work as a local process; choose Remotify MCP for command line as a local process. You can also run both side by side in one mcpServers block.

Which MCP server should you choose?

Remote Ssh MCP logoChoose Remote Ssh MCP when

  • You need dedicated capabilities in the Command Line domain.
  • You prefer a local stdio subprocess transport.
  • You want tools like ssh_hosts, ssh_open, ssh_run.
Explore Remote Ssh MCP

Remotify MCP logoChoose Remotify MCP when

  • You need dedicated capabilities in the Command Line domain.
  • You prefer a local stdio subprocess transport.
  • You have the keys it needs: DOMAIN, SCHEME, PUBLIC_PORT, NGINX_MODE, SESSION_TTL, LONGPOLL_MS, MAX_BODY_SIZE, CERTBOT_EMAIL.
  • You want tools like remote_exec, remote_session_info, remote_session_reset.
Explore Remotify MCP

Feature & specification comparison

Rows where the two servers differ are marked.

SpecRemote Ssh MCP logoRemote Ssh MCPRemotify MCP logoRemotify MCP
CategoryCommand LineCommand Line
Quality signal60/100 · Good65/100 · Great
Install commandConfirmedConfirmed
TransportLocal subprocess (stdio)Local subprocess (stdio)
AuthNot declaredNot declared
PricingNot declaredFree
Required env varsNone listedDOMAINSCHEMEPUBLIC_PORTNGINX_MODESESSION_TTLLONGPOLL_MSMAX_BODY_SIZECERTBOT_EMAIL
Verified ownerCommunity listingCommunity listing
GitHub stars13
Directory activity 1 views 0 installs 0 upvotes 4 views 0 installs 0 upvotes
Tools73

Tools & capabilities

Remote Ssh MCP tools 7

  • ssh_hostsList allowed OpenSSH Host aliases discovered from the local ssh_config (and explicit allowlist). Returns only safe connection metadata: alias, hostname, user, port, proxy_jump. Never returns private keys, IdentityFile paths, agent sockets, or ProxyCommand. Pass reload=true after editing ~/.ssh/config to re-parse without restarting the MCP server. Use an alias from this list with ssh_open.
  • ssh_openOpen a new persistent remote bash shell for an allowed ssh_config Host alias from ssh_hosts. Each call creates a clean session with a new id. Credentials come only from local OpenSSH configuration/agent; passwords and private keys are never accepted as arguments and must not be read from disk by the model.
  • ssh_runStart a non-interactive command in the same persistent shell identified by id. cwd and environment changes persist. The call waits at most wait_sec (default 10 seconds); if the command is still active it returns status=running without stopping it. Commands have no automatic execution timeout by default. Only an explicitly provided timeout_sec sends Ctrl-C at that deadline. Never retry a running command: poll with ssh_peek(wait_sec=...) so the MCP call blocks until idle or the wait expires; do not spam peeks with wait_sec=0. Call ssh_interrupt to stop it, or open another session for concurrent work. Only one foreground command may run per id. Do not use vim, top, password prompts, or other interactive TUI/input flows.
  • ssh_peekObserve the current foreground command and its latest output without starting another command. When status=running, optional wait_sec (default 0) long-polls this MCP call until the command finishes or the wait expires—prefer a positive wait_sec over busy-looping. wait_sec never stops the remote command. Returns the newest lines in chronological order, limited independently for stdout and stderr; lines defaults to 50 and is capped to protect model context. Use after ssh_run returns status=running. When idle, returns immediately with cwd, last exit code, and the latest lines from the completed command.
  • ssh_interruptSend Ctrl-C to the current foreground process group and wait for the shell protocol to recover. The session is kept only when recovery is confirmed. Returns nothing_to_interrupt when idle.
  • ssh_listList all live sessions with host, cwd, state, last exit code, idle time, idle-reap countdown, and connection capacity. Use this to recover valid ids; never invent one.
  • ssh_closeClose the remote shell and SSH connection, clean its private temporary directory, and invalidate the id. Close a dirty session and call ssh_open for a clean environment.

Remotify MCP tools 3

  • remote_execExecute a shell command on the PROJECT'S REMOTE SERVER via the remotify relay (the deployed/production/staging box, NOT the developer's local machine). Examples: 'check disk usage', 'restart the service', 'tail the app log', 'query the prod DB', 'is port 443 open in prod', 'what version is running in staging'. Chain this tool freely for iterative work - log analysis with grep/awk/sed/head/tail, narrowing a search, cross-checking outputs, diagnosing slow services with ps/vmstat/netstat/iostat. Each call saves a manual copy-paste roundtrip; only surface the meaningful result or synthesis to the user. In supervised mode the operator approves each command on the remote via y/N prompt, so no extra confirmation is needed from the assistant. Returns combined stdout+stderr as plain text on success. HARD RULE: the user connects the remote by pasting a listener one-liner; that is the ONLY execution path. NEVER fall back to ssh, scp, or any other transport, and NEVER try to start the listener yourself. The user chose remotify precisely so that no agent gets shell access. Pending handling: the response text may start with one of these markers. '[pending]' WITH paste one-liners = no remote listener is connected; nothing can run until the user pastes one. STOP: end your turn immediately with a short message that shows BOTH one-liners (supervised and auto) verbatim in a fenced code block. Do not call any tool after that message: hosts collapse text written between tool calls, so the one-liners only reach the user as the final message of the turn. The command stays queued; when the user replies that the listener is running, call remote_exec again with the EXACT SAME arguments to collect the output. It will not execute twice. '[pending]' WITHOUT one-liners = the listener is online but the relay cannot confirm pickup yet. Call remote_exec again with the EXACT SAME arguments; loop silently, do not ask the user anything, and give up only after about 10 consecutive [pending] responses. '[in-flight]' = the command IS already being executed on the remote (cmd was picked up, no output yet). In that case: 1. Do NOT give up. Long operations (mongodump, restic, rsync, big installs, slow restarts) routinely take many minutes. 2. Call remote_exec again with the EXACT SAME arguments; the relay will return the output the moment the command finishes. 3. Do NOT tell the user the listener disconnected; do NOT ask them to re-paste the listener; do NOT switch to a different command. 4. There is no LLM-side retry cap on '[in-flight]'; keep waiting until the result lands or the relay returns something else. '[busy]' = you tried to issue a NEW command while a previous one is still executing on the remote. Each session is single-flight (one command at a time). In that case: 1. If you know the previous command, call remote_exec with ITS exact arguments first to drain its result, then issue the new one. 2. If you do NOT know it (e.g. it was issued by an earlier session), keep calling remote_exec with the NEW command's arguments: stale state left by a dead session is cleared automatically (see '[recovered]'). 3. If the [busy] response contains paste one-liners, the listener is disconnected and the wedge can ONLY clear once the user reconnects it: end your turn with BOTH one-liners verbatim, exactly as for a no-listener [pending]. '[recovered]' = wedged state left by a dead session/listener was cleared automatically. Read the rest of the message: either the command already proceeded, or you are asked to call remote_exec again with the EXACT SAME arguments. '[resumed]' = the returned output was already waiting on the relay and belongs to the most recent run (e.g. you re-issued a command after an interruption). Use it if it matches what you expected; if not, issue the command again. '[unknown-result]' = the session expired while the command was already running on the remote. Its output was lost and it may or may not have completed. A new session was minted; end your turn with BOTH reconnect one-liners verbatim, then decide whether re-running is safe once the user is back. The server will NOT silently re-run it. '[session-renewed]' = the session key changed; the one-liners that follow are for the NEW key. Treat it like a no-listener [pending]: end your turn with both lines verbatim.
  • remote_session_infoReturn the current relay session: key, URLs, and the exact one-liners to paste on the remote machine to start the listener (remote_quickstart = supervised, y/N per command; remote_quickstart_auto = unattended). When you show them to the user, show BOTH verbatim in a fenced code block and make them the final message of your turn.
  • remote_session_resetRecover a wedged remotify session. Default (no arguments): clear stuck relay state in place - drops any queued command/result and the in-flight marker; the session key and a connected listener keep working. With {"rotate": true}: abandon the current session and mint a brand-new key - the old key dies, the remote listener disconnects, and the user must paste the NEW runner one-liner (returned by this tool) on the remote. Normally NOT needed: remote_exec auto-recovers from stale state by itself. Use it only when remote_exec stays wedged (repeated [busy] for a command you never issued) despite same-args retries, or when the user explicitly asks to reset or rotate the session.

Ready-to-paste client configs

Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.

Remote Ssh MCP

mcpServers (Claude Desktop / Cursor)
{
  "mcpServers": {
    "remote-ssh-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@zyluo/remote-ssh-mcp"
      ]
    }
  }
}

Remotify MCP

mcpServers (Claude Desktop / Cursor)
{
  "mcpServers": {
    "remotify-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "remotify-mcp@latest"
      ],
      "env": {
        "DOMAIN": "YOUR_DOMAIN_HERE",
        "SCHEME": "YOUR_SCHEME_HERE",
        "PUBLIC_PORT": "YOUR_PUBLIC_PORT_HERE",
        "NGINX_MODE": "YOUR_NGINX_MODE_HERE",
        "SESSION_TTL": "YOUR_SESSION_TTL_HERE",
        "LONGPOLL_MS": "YOUR_LONGPOLL_MS_HERE",
        "MAX_BODY_SIZE": "YOUR_MAX_BODY_SIZE_HERE",
        "CERTBOT_EMAIL": "YOUR_CERTBOT_EMAIL_HERE"
      }
    }
  }
}

Frequently asked questions

Remote Ssh MCP is categorized under Command Line and uses a local stdio subprocess. Remotify MCP belongs to Command Line and uses a local stdio subprocess. Pick Remote Ssh MCP for command line work and Remotify MCP for command line.

Copy the mcpServers block from the config section on this page into your client's config (for example claude_desktop_config.json or ~/.cursor/mcp.json), then fully restart the client.

Remote Ssh MCP has no declared pricing — check the project's own site. Remotify MCP is listed as free. If a server needs environment variables such as API keys, define them under the env key in your client's MCP config.

Yes. MCP clients support multiple servers: add remote-ssh-mcp and remotify-mcp as separate keys in the same mcpServers object, and your assistant will call tools from either one.

On AllMCPs, Remote Ssh MCP has a quality signal of 60/100 (Good) with 1 views, 0 installs and 1 GitHub stars. Remotify MCP has 65/100 (Great) with 4 views, 0 installs and 3 GitHub stars.