SSH — policy-gated remote access

SSH — policy-gated remote access is a local MCP server: Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log. Install it from npm as ssh-mcp.

Claude CodeCodexAntigravity

commandprompt

Terminal

claude mcp add io-github-tufantunc-ssh-mcp -e SSH_MCP_PASSWORD=... -e SSH_MCP_KEY=... -e SSH_MCP_PASSPHRASE=... -e SSH_MCP_SUDO_PASSWORD=... -- npx -y ssh-mcp

Run in your project folder. Add --scope user to use it everywhere.

Add to claude_desktop_config.json or .cursor/mcp.json.

{
  "mcpServers": {
    "io-github-tufantunc-ssh-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "ssh-mcp"
      ],
      "env": {
        "SSH_MCP_PASSWORD": "...",
        "SSH_MCP_KEY": "...",
        "SSH_MCP_PASSPHRASE": "...",
        "SSH_MCP_SUDO_PASSWORD": "..."
      }
    }
  }
}

Fill in the environment variables with your own credentials.

• Runtime: Node.js 18+ (runs with npx).
• MCP client: Claude Code, Codex, Antigravity, Claude Desktop, Cursor or any other client that speaks MCP over stdio.
• Environment variables: SSH_MCP_PASSWORD, SSH_MCP_KEY, SSH_MCP_PASSPHRASE, SSH_MCP_SUDO_PASSWORD