SSH Read-Only

Provides a secure MCP server that enables remote SSH read-only command execution with multicast discovery and full audit logging.

python

GitHub Stars

python

Language

7 months ago

First Indexed

3 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "kunwarmahen-ssh-mcp-server": {
      "command": "uv",
      "args": [
        "run",
        "ssh_readonly_fastmcp_mcast.py"
      ],
      "env": {
        "MCP_HOST": "0.0.0.0",
        "MCP_PORT": "3000",
        "MCP_TRANSPORT": "stdio",
        "MCP_SERVER_NAME": "SSH Read-Only MCP Server",
        "MCP_ENABLE_BROADCAST": "true",
        "MCP_BROADCAST_INTERVAL": "30"
      }
    }
  }
}

You set up a secure MCP server that lets you perform remote SSH read-only commands. It supports multiple simultaneous SSH connections, validates commands to prevent writes, and can announce itself on the network for easy discovery. Use this to safely delegate SSH access while avoiding unintended modifications.

How to use

To use the SSH Read-Only MCP Server, run it locally in stdio mode and connect with an MCP client that supports the read-only command flow. Start by launching the server, then establish an SSH connection to a remote host, execute safe read-only commands, and manage connections from your client.

Typical end-to-end usage pattern you can follow:

Spin up the local MCP server in stdio mode to listen for commands from your client
Open a client session and issue ssh_connect with the target host and credentials
Use ssh_execute to run read-only commands like listing directories or inspecting system information
Review ssh_get_allowed_commands to understand the supported read-only set
When done, call ssh_disconnect to close the connection and ssh_list_connections to verify active sessions

Available tools

ssh_connect

Establish an SSH connection to a remote machine with specified host, username, and authentication method.

ssh_execute

Execute a read-only command on the connected remote machine.

ssh_disconnect

Close an active SSH connection to a remote host.

ssh_list_connections

List all currently active SSH connections.

ssh_get_allowed_commands

Retrieve the list of commands explicitly allowed for read-only execution.

Built by

VeilStrat

AI signals for GTM teams