SSH — policy-gated remote access

local MCP server

Installation

Terminal

claude mcp add io-github-tufantunc-ssh-mcp -e SSH_MCP_PASSWORD=... -e SSH_MCP_KEY=... -e SSH_MCP_PASSPHRASE=... -e SSH_MCP_SUDO_PASSWORD=... -- npx -y ssh-mcp

Run in your project folder. Add --scope user to use it everywhere.

Claude Desktop, Cursor & other clients

Add to claude_desktop_config.json or .cursor/mcp.json.

{
  "mcpServers": {
    "io-github-tufantunc-ssh-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "ssh-mcp"
      ],
      "env": {
        "SSH_MCP_PASSWORD": "...",
        "SSH_MCP_KEY": "...",
        "SSH_MCP_PASSPHRASE": "...",
        "SSH_MCP_SUDO_PASSWORD": "..."
      }
    }
  }
}

Fill in the environment variables with your own credentials.

Summary

Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.

Questions

SSH — policy-gated remote access is a local MCP server distributed as the npm package ssh-mcp.

Run: claude mcp add io-github-tufantunc-ssh-mcp -e SSH_MCP_PASSWORD=... -e SSH_MCP_KEY=... -e SSH_MCP_PASSPHRASE=... -e SSH_MCP_SUDO_PASSWORD=... -- npx -y ssh-mcp

Run: codex mcp add io-github-tufantunc-ssh-mcp --env SSH_MCP_PASSWORD=... --env SSH_MCP_KEY=... --env SSH_MCP_PASSPHRASE=... --env SSH_MCP_SUDO_PASSWORD=... -- npx -y ssh-mcp

Similar MCP servers

NameStars

Ghostio.github.NORTHTEKDevs/ghost25
Aegis — AI Agent Governanceio.github.Acacian/aegis17
SysKnifeio.github.lacs-project/sysknife14
dashclawio.github.ucsandman/dashclaw308
Lobuio.github.lobu-ai/lobu223
applemusic-mcpio.github.epheterson/applemusic-mcp101
Vouchio.github.vouchdev/vouch82
ProofFlowio.github.Hyperion-GPU/proofflow49