ssh-mcp-pro runs on your own machine — the client starts it, so there is no endpoint to ping. 140 installs a week from npm. Last commit 2 Nov 2026.
Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP.
What the code does
We read the source, 21 h ago · rules 995398eba69f
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
const child = spawn(command, config.credentialCommandArgs, {
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
const child = spawn(command, config.credentialCommandArgs, {
await rename(temporaryPath, path.join(anchor, leaf));
const keyFiles = ["id_ed25519", "id_ecdsa", "id_ed25519_sk", "id_ecdsa_sk", "id_rsa"];
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
A tool parameter here reaches a dangerous call
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add ssh-mcp-pro -- npx -y ssh-mcp-pro{
"mcpServers": {
"ssh-mcp-pro": {
"command": "npx",
"args": [
"-y",
"ssh-mcp-pro"
]
}
}
}[mcp_servers.ssh-mcp-pro]
command = "npx"
args = ["-y", "ssh-mcp-pro"]{
"mcpServers": {
"ssh-mcp-pro": {
"command": "npx",
"args": [
"-y",
"ssh-mcp-pro"
]
}
}
}{
"servers": {
"ssh-mcp-pro": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"ssh-mcp-pro"
]
}
}
}Optional settings from the registry entry, left out of the block above:
SSH_MCP_HTTP_ALLOWED_ORIGINS (Comma-separated allowed browser origins for Streamable HTTP clients. Keep this restricted when not using loopback), SSH_MCP_HTTP_BEARER_TOKEN_FILE (Path to a bearer token file. Required for non-loopback HTTP bindings), SSH_MCP_HTTP_PUBLIC_URL (Stable HTTPS public /mcp URL. Required for non-loopback HTTP bindings), SSH_MCP_HTTP_TRUST_PROXY (Set to true only behind a trusted reverse proxy that controls forwarded headers).
Alternatives to ssh-mcp-pro
same job, measured the same waySecure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP.
AI-native HTTP security testing MCP server — 17 tools with raw HTTP/1.1 + HTTP/2 control
Security proxy that automatically wraps MCP servers with real-time monitoring and policy enforcement
Connects AI agents with CrowdStrike Falcon for security analysis and automation.
Control Shopify Admin tasks with agents or via prompt. Ultra slim integration, fast and secure.
Security-first MySQL MCP server with AST validation, table whitelist, schema resources, and audit.
Secure MCP server for Obsidian with OWASP Top 10 controls and full audit logging.
An MCP server that provides access to FedRAMP 20x security requirements and controls.
ssh-mcp-pro — questions
Answers built from our own checks of this server.