Log inSubmit server
Ssh MCP Pro logo

Ssh MCP Pro

SSH automation over MCP with guarded commands, file operations, transfers, tunnels, sessions, and stdio or HTTP transport.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Ssh MCP Pro

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "ssh-mcp-pro": {
      "command": "npx",
      "args": [
        "-y",
        "ssh-mcp-pro"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Install not yet sandbox-tested— we haven't run this command through our automated sandbox yet. Not a red flag; we're working through the catalog.

Overview

The ssh-mcp-pro MCP server connects MCP clients to SSH-accessible hosts for controlled remote automation. It supports session management, host inspection, guarded command execution, filesystem operations, artifact transfers, tunnels, and idempotent package or service tasks. Policy settings can restrict hosts, commands, paths, credentials, tunnels, root access, and destructive actions, while limits cover sessions, timeouts, output, files, transfers, and request rates. Reach for it when an agent needs SSH-based administration with explicit controls over remote access and tool exposure.

Use cases

  • Discover SSH hosts and inspect their operating systems
  • Run policy-controlled remote commands
  • Read, write, upload, and download remote files
  • Create restricted SSH tunnels
  • Apply idempotent package or service changes

Key features

  • SSH session management with configurable TTLs
  • Guarded command execution and host inspection
  • Remote filesystem and artifact transfer operations
  • SSH tunnel creation with host and port controls
  • Stdio and streamable HTTP transports
  • Policy, rate-limit, and resource-size controls

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 2d ago

Recent health check succeeded.

7/7 checks healthy over the last 40d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 12d ago via OSV.dev · ssh-mcp-pro (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars2Stargazers on the source repository.
npm downloads666Package downloads in the last 30 days.
Last commit3d agoMost recent push to the default branch.

How Ssh MCP Pro works

What ssh-mcp-pro does

The ssh-mcp-pro MCP server exposes SSH automation through the Model Context Protocol. An MCP-capable client can discover configured hosts, create explicit SSH sessions, inspect remote systems, execute commands subject to policy, manage remote files, transfer artifacts, and create network tunnels. The server also supports idempotent package and service operations through dedicated ensure-style tools.

The project supports two transport modes. Clients can launch it as a stdio process, or an operator can run its streamable HTTP transport for remote connector profiles. Legacy SSE compatibility is available as an opt-in setting. The README demonstrates registration examples for generic stdio configuration, VS Code, and Claude Desktop.

How it works

A typical workflow begins with host discovery and policy inspection. The client then opens a session to a selected host, using a host-key policy such as strict, accept-new, or insecure, before calling inspection or execution tools. The default host-key mode is strict, with verification based on the configured known-hosts file.

Policy controls apply to both local and remote operations. Administrators can allow or deny hosts, command patterns, remote path prefixes, local transfer paths, tunnel destinations, and ports. Raw sudo and destructive command or filesystem operations are disabled by default. The policy can be loaded from a JSON file, and the server can either enforce decisions or explain them.

Resource and request limits are configurable. These include concurrent sessions, session lifetime, command timeouts, command output, file sizes, transfer sizes, streaming chunks, and global or per-session rate limits. Tool and connector profiles determine the exposed tool set, with full as the default profile.

Setup and configuration

Install the package globally with pnpm, or run it on demand with npx or pnpm dlx. The documented runtime prerequisites are Node.js version 22.22.2 or newer in the supported release lines, pnpm 11.0.9 or newer, and SSH access to target hosts. Docker is only required for local integration tests and container image builds. Release images are published for Linux amd64 and arm64.

A minimal stdio registration starts the ssh-mcp-pro command without arguments. HTTP deployments can set the bind host and port, allowed browser origins, request-body limit, session capacity, idle timeout, and optional bearer-token file. Non-loopback bearer deployments require a token file. A stable public HTTPS URL and proxy-trust setting are available for deployments behind a reverse proxy.

Important controls include SSH_MCP_HOST_KEY_POLICY, SSH_MCP_KNOWN_HOSTS_PATH, SSH_MCP_ALLOWED_HOSTS, SSH_MCP_POLICY_FILE, SSH_MCP_COMMAND_ALLOW, SSH_MCP_COMMAND_DENY, and the path and tunnel allowlists. The server also supports external connector credential providers using an SSH agent or a configured credential command. Review these settings before exposing the HTTP transport or enabling sensitive operations.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Ssh MCP Pro

ssh-mcp-pro is an MCP server that connects MCP-capable clients to SSH-accessible hosts. Its main tools open sessions, inspect systems, run policy-controlled commands, manage files, transfer artifacts, create tunnels, and perform idempotent package or service operations through stdio or streamable HTTP.

Install it globally with `pnpm add --global ssh-mcp-pro`, or run it without a global install using `npx ssh-mcp-pro` or `pnpm dlx ssh-mcp-pro`. Node.js and SSH access to the target hosts are required.

Yes, ssh-mcp-pro works with Claude Desktop through its stdio configuration. Register the command as `ssh-mcp-pro` under `mcpServers`, then use the client to discover hosts and create SSH sessions.

Yes, ssh-mcp-pro works with VS Code using the documented `mcp.servers` stdio configuration. Set the server type to `stdio`, the command to `ssh-mcp-pro`, and provide an empty argument list unless your deployment needs other settings.

Use the policy configuration to define allowed and denied command patterns, hosts, remote path prefixes, and local transfer paths. Destructive commands, destructive filesystem operations, and raw sudo are disabled by default, and policy mode can enforce or explain decisions.

Related MCP servers

All in Command Line All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewSsh MCP Pro AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/ssh-mcp-pro?style=directory)](https://allmcps.com/mcp/ssh-mcp-pro)
HTML Embed
<a href="https://allmcps.com/mcp/ssh-mcp-pro"><img src="https://allmcps.com/api/badge/ssh-mcp-pro?style=directory" alt="Ssh MCP Pro on AllMCPs" /></a>