NestDaddy
All servers NestDaddy MCP Blog Sign inTry it free
Cloud and DevOps

SSH — policy-gated remote access

io.github.tufantunc/ssh-mcp · v2.26.0

Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.

Website Source code Set it up

Connect Runs on your machine

Terminal
claude mcp add ssh-mcp -e SSH_MCP_PASSWORD=<SSH_MCP_PASSWORD> -e SSH_MCP_KEY=<SSH_MCP_KEY> -e SSH_MCP_PASSPHRASE=<SSH_MCP_PASSPHRASE> -e SSH_MCP_SUDO_PASSWORD=<SSH_MCP_SUDO_PASSWORD> -- npx -y [email protected]
claude_desktop_config.json
{
  "mcpServers": {
    "ssh-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "SSH_MCP_PASSWORD": "<SSH_MCP_PASSWORD>",
        "SSH_MCP_KEY": "<SSH_MCP_KEY>",
        "SSH_MCP_PASSPHRASE": "<SSH_MCP_PASSPHRASE>",
        "SSH_MCP_SUDO_PASSWORD": "<SSH_MCP_SUDO_PASSWORD>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "ssh-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "SSH_MCP_PASSWORD": "<SSH_MCP_PASSWORD>",
        "SSH_MCP_KEY": "<SSH_MCP_KEY>",
        "SSH_MCP_PASSPHRASE": "<SSH_MCP_PASSPHRASE>",
        "SSH_MCP_SUDO_PASSWORD": "<SSH_MCP_SUDO_PASSWORD>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "ssh-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "SSH_MCP_PASSWORD": "<SSH_MCP_PASSWORD>",
        "SSH_MCP_KEY": "<SSH_MCP_KEY>",
        "SSH_MCP_PASSPHRASE": "<SSH_MCP_PASSPHRASE>",
        "SSH_MCP_SUDO_PASSWORD": "<SSH_MCP_SUDO_PASSWORD>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
SSH_MCP_PASSWORD
Optional, secret		Password for the configured profile; a per-profile SSH_MCP_<PROFILE>_PASSWORD takes precedence. Credentials are never accepted as CLI arguments.
SSH_MCP_KEY
Optional		Path to the private key file to authenticate with — the path, not the key material. A per-profile SSH_MCP_<PROFILE>_KEY takes precedence.
SSH_MCP_PASSPHRASE
Optional, secret		Passphrase for an encrypted private key.
SSH_MCP_SUDO_PASSWORD
Optional, secret		Password the sudo tool escalates with, when the policy in force allows the privileged class.

Details

Package[email protected] (NPM, stdio)
First published12 Nov 2026
Last updated12 Nov 2026
Registry nameio.github.tufantunc/ssh-mcp

More cloud and devops servers See all

  • OxyPages

    Deploy HTML pages and built web apps (React, Vue, Vite) to a live HTTPS link from your AI agent.

  • Privi Call

    One number per AI agent: route MCP calls to any agent, every call sealed in an on-chain log.

  • OldWeb Diagnostics

    Public DNS, HTTPS and deployment checks, plus offline email header and delivery-log tracing.

  • OldWeb Logs

    Offline log parsing, CI failures, HTTP capture analysis and bounded JSON configuration validation.

  • TrainRec

    Your AI assistant logs your meals and workouts, then plans your week from what you did.

  • ZeroPhase

    BUD/S prep training: read today's workout, log tasks and PST results from your agent.

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.