SSH — policy-gated remote access MCP Server

by tufantunc Your server? Claim it

local only

SSH — policy-gated remote access runs on your own machine — the client starts it, so there is no endpoint to ping. 14 123 installs a week from npm. Last commit 31 Aug 2026.

Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.

Installs per day peak 15 914 · avg 4 190 · -4% w/w

a month agotoday

14 123

Installs / week

npm · ssh-mcp

677

Stars

1 open issues

31 Aug 2026

Last commit

0 releases in 90 days

MIT

License

TypeScript

Nothing serious here today

Today is the operative word: we check SSH — policy-gated remote access every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add ssh-mcp -- npx -y ssh-mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "ssh-mcp": {
      "args": [
        "-y",
        "ssh-mcp"
      ],
      "command": "npx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.ssh-mcp]
command = "npx"
args = ["-y", "ssh-mcp"]

.cursor/mcp.json

{
  "mcpServers": {
    "ssh-mcp": {
      "args": [
        "-y",
        "ssh-mcp"
      ],
      "command": "npx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "ssh-mcp": {
      "args": [
        "-y",
        "ssh-mcp"
      ],
      "command": "npx"
    }
  }
}

Alternatives to SSH — policy-gated remote access

same job, measured the same way

Cordon for MCP

by marras0914

Cordon for MCP. Security gateway with policy enforcement, audit log, and HITL approvals.

120 installs/wk local only

ssh-mcp

by gelse

MCP gateway for controlled SSH access with per-client auth, command policies, and audit logging.

local only

Aegis — AI Agent Governance

by acacian

Policy-based governance for AI agent tool calls. YAML policy, approval gates, audit logging.

343 installs/wk local only

ThornGuard

by qwady-thorns

Remote MCP security gateway for auth, redaction, policy enforcement, and audit logging.

local only

Mailbuttons (mbag.ai)

by mailbuttons

Governed email for AI agents (Mailbuttons / mbag.ai): sandbox inboxes, policy gate, audit log.

73 installs/wk answering

MiniURL

by addychang

OAuth 2.1 short-link tools for AI agents with scoped tokens, approvals, audit logs, and revocation.

24 tools answering

QueryBear

by spencerpauly

Safe, read-only Postgres and MySQL access for AI agents. Audit log + column-level controls.

answering

Marchward

by marchward

Runtime authority for AI agents: credential mediation, spend cap, approval gates, audit log.

66 installs/wk local only

SSH — policy-gated remote access — questions

Answers built from our own checks of this server.

Why is there no uptime for SSH — policy-gated remote access?

SSH — policy-gated remote access runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package ssh-mcp was installed 14 123 times last week.

How do I connect SSH — policy-gated remote access?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls ssh-mcp straight from npm; nothing to host, nothing to sign up for.

How many people use SSH — policy-gated remote access?

The npm package ssh-mcp was installed 14 123 times in the last week. Week over week that is -4%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is SSH — policy-gated remote access open source?

Yes — it is published under the MIT licence, written in TypeScript, 677 stars on GitHub and 1 open issue. The source link is on this page, so you can read exactly what it does with your data before you connect it.