ssh-mcp
access level: configurable✔ Source-reviewed Oct 2026
We read this project's source code and tool definitions (Oct 2026). This is a code review, not a live test against real systems. Re-check after upgrades.
| Repository | https://github.com/tufantunc/ssh-mcp |
|---|---|
| Category | Linux/SSH |
| Systems touched | Any host reachable over SSH (shell, sudo, SFTP) |
| Access (as described) | configurable |
| License / price | MIT / free |
| GitHub stars | 819 |
| Read tools | read-command (allowlisted ls/cat/grep etc.), session listing |
| Write / delete / exec tools | run-command (arbitrary shell), privileged-command (sudo), SFTP upload/download, close-session |
| Read-only mode | Partial: every call refused until configured; approvalMode ask-destructive; transfer tools off until transferRoot is set |
| Safety notes | This is a shell for your agent. Keep approvalPolicy off "auto" in prod, use a non-root SSH user, and lock the config file ACL (the server refuses writable configs). |
| Verified | yes (README review 2026-10-24) |
| Notes | 14 tools. Added 2026-10-24. |
📬 SysAdmin Agents
The SysAdmin Agents newsletter: new MCP servers, agent skills and safety notes for sysadmins. One email a week.