Hex SSH

NPM · @LEVNIKOLAEVICH/HEX-SSH-MCP · SCANNED AUG 3

Token-efficient SSH MCP with hash-verified files and persistent tmux sessions. 14 tools.

Available components

+34 this week 76 76 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (104 of 108), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (104 of 108), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency97

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Cryptographically verified build provenance (signed, bound to levnikolaevich/claude-code-skills). View diagnostics → Pass
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 75 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability59

AI-judged instruction clarity (excellent).Pass
Context-footprint check failed: tool/resource definitions use about 3937 tokens (~281/item across 14 items; 14 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management23

Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass
Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @levnikolaevich/hex-ssh-mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add levnikolaevich-hex-ssh-mcp -- npx -y @levnikolaevich/hex-ssh-mcp

# add to Codex CLI

codex mcp add levnikolaevich-hex-ssh-mcp -- npx -y @levnikolaevich/hex-ssh-mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "levnikolaevich-hex-ssh-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@levnikolaevich/hex-ssh-mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add levnikolaevich-hex-ssh-mcp --command npx --arg -y --arg @levnikolaevich/hex-ssh-mcp

# ~/.hermes/config.yaml

mcp_servers:
  levnikolaevich-hex-ssh-mcp:
    command: "npx"
    args: ["-y", "@levnikolaevich/hex-ssh-mcp"]

// mcp.json

{
  "mcpServers": {
    "levnikolaevich-hex-ssh-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@levnikolaevich/hex-ssh-mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +4
- Stability: unverified → 0.23 ▲ functional
2 Aug 26 +50
- Provenance: unverified → pass ▲ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- The attested source repository moved: levnikolaevich/claude-code-skills security
- Capabilities: pass → unverified ▼ functional
- Maintenance: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- License: unverified → pass ▲ functional
- Schema quality: unverified → excellent ▲ functional
- Licence: MIT functional
1 Aug 26 −24
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
31 Jul 26 +20
- Malware scan: pass → unverified ▼ security
- Provenance: unverified → pass ▲ security
- Install scripts: unverified → pass ▲ security
- The attested source repository moved: levnikolaevich/claude-code-skills security
- Dependency health: partial → unverified ▼ functional
- Maintenance: unverified → pass ▲ functional
- License: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Licence: MIT functional
29 Jul 26 −16
- Tool coverage: 100 → unverified ▼ functional
- Dependency health: unverified → partial ▲ functional
- First check of Schema quality: unverified functional
27 Jul 26 42

First indexed and scored.

Show 3 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@levnikolaevich/[email protected]

Provenance verified

Ecosystem: npm · Outcome: verified

Reason: verified

Source repo:: levnikolaevich/claude-code-skills
Certificate issuer:: https://token.actions.githubusercontent.com
Certificate SAN:: https://github.com/levnikolaevich/claude-code-skills/.github/workflows/publish-hex-ssh.yml@refs/tags/hex-ssh-v1.9.2
Rekor log index:: 1573005893
Predicate type:: https://slsa.dev/provenance/v1
Subject digest:: sha512:d2daf3dd7050c18a2988bba18378c3d4958b4ae98c6e2cf1c1dcc6921ab5bdf90cb4595e7fadaa18df2555f835a1f9540c4dfcc6a1e1a324839daad71
Discovery method:: attestation_endpoint

Dependencies 104 packages

104 packages in the resolved dependency tree · 104 deprecated · 34 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 14 exposed · ~3,937 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

remote-ssh SSH Command ~240

Execute shell commands on remote servers. Disabled by default. Set REMOTE_SSH_MODE=safe or REMOTE_SSH_MODE=open to enable.

Input Output Examples

Name	Type	Req	Description
command	string	yes	Shell command to execute
connectTimeoutMs	number	—	SSH handshake timeout in ms (default: 20000). Per-call override. Different values spawn separate pooled connections.
execTimeoutMs	number	—	Per-command execution timeout in ms (default: 120000). Used by remote-ssh and hash-verified file tools.
host	string	yes	SSH host - alias from ~/.ssh/config or hostname/IP
keepaliveIntervalMs	number	—	SSH keepalive interval in ms (default: 30000). Per-call override. Different values spawn separate pooled connections.
port	number	—	SSH port (default: 22)
privateKeyPath	string	—	Path to SSH private key (optional)
remotePlatform	string	—	Remote path platform. Use "windows" for paths like C:\\repo\\file.txt. Default: auto
user	string	—	SSH username (optional if set in ~/.ssh/config)

Name	Type	Req	Description
bytes_transferred	number	—	—
bytes_written	number	—	—
capabilities	object	—	—
checksum	string	—	—
code	string	—	—
command	string	—	—
content	string	—	—
deleted	array	—	—
duration_ms	number	—	—
error	object	—	—
exit_code	number	—	—
failure_class	string	—	—
has_more	boolean	—	—
host	string	—	—
limit	number	—	—
local_path	string	—	—
next_action	string	—	—
next_commands	object	—	—
offset	number	—	—
path	string	—	—
rc	number	—	—
recovery	string	—	—
remote_path	string	—	—
revision	string	—	—
seq	number	—	—
session	string	—	—
sid	string	—	—
status	string	yes	—
stderr	string	—	—
stderr_lines	number	—	—
stdout	string	—	—
stdout_lines	number	—	—
stream	string	—	—
summary	string	—	—
tmux_name	string	—	—
total_lines	number	—	—
verify	—	—	—

No examples provided.

ssh-capabilities SSH Capabilities ~219

Inspect POSIX remote session support, tmux availability, package managers, and basic shell tools.

Input Output Examples

Name	Type	Req	Description
connectTimeoutMs	number	—	SSH handshake timeout in ms (default: 20000). Per-call override. Different values spawn separate pooled connections.
execTimeoutMs	number	—	Per-command execution timeout in ms (default: 120000). Used by remote-ssh and hash-verified file tools.
host	string	yes	SSH host - alias from ~/.ssh/config or hostname/IP
keepaliveIntervalMs	number	—	SSH keepalive interval in ms (default: 30000). Per-call override. Different values spawn separate pooled connections.
port	number	—	SSH port (default: 22)
privateKeyPath	string	—	Path to SSH private key (optional)
remotePlatform	string	—	Remote path platform. Use "windows" for paths like C:\\repo\\file.txt. Default: auto
user	string	—	SSH username (optional if set in ~/.ssh/config)

Name	Type	Req	Description
bytes_transferred	number	—	—
bytes_written	number	—	—
capabilities	object	—	—
checksum	string	—	—
code	string	—	—
command	string	—	—
content	string	—	—
deleted	array	—	—
duration_ms	number	—	—
error	object	—	—
exit_code	number	—	—
failure_class	string	—	—
has_more	boolean	—	—
host	string	—	—
limit	number	—	—
local_path	string	—	—
next_action	string	—	—
next_commands	object	—	—
offset	number	—	—
path	string	—	—
rc	number	—	—
recovery	string	—	—
remote_path	string	—	—
revision	string	—	—
seq	number	—	—
session	string	—	—
sid	string	—	—
status	string	yes	—
stderr	string	—	—
stderr_lines	number	—	—
stdout	string	—	—
stdout_lines	number	—	—
stream	string	—	—
summary	string	—	—
tmux_name	string	—	—
total_lines	number	—	—
verify	—	—	—

No examples provided.

ssh-download SSH Download File ~300

Download a remote file to the local machine over SFTP. Supports text and binary files, rejects existing destinations by default, validates path boundaries, and stages to a verified local finalize path.

Input Output Examples

Name	Type	Req	Description
connectTimeoutMs	number	—	SSH handshake timeout in ms (default: 20000). Per-call override. Different values spawn separate pooled connections.
host	string	yes	SSH host - alias from ~/.ssh/config or hostname/IP
keepaliveIntervalMs	number	—	SSH keepalive interval in ms (default: 30000). Per-call override. Different values spawn separate pooled connections.
localPath	string	yes	Absolute local destination path or ~/path
overwrite	boolean	—	Replace existing destination when true. Default: false
port	number	—	SSH port (default: 22)
privateKeyPath	string	—	Path to SSH private key (optional)
remotePath	string	yes	Absolute file path on remote server
remotePlatform	string	—	Remote path platform. Use "windows" for paths like C:\\repo\\file.txt. Default: auto
transferTimeoutMs	number	—	SFTP inactivity timeout in ms (default: 120000; env TRANSFER_TIMEOUT_MS overrides default). Used by ssh-upload/ssh-download.
user	string	—	SSH username (optional if set in ~/.ssh/config)
verify	string	—	Post-transfer verification mode. Default: stat

Name	Type	Req	Description
bytes_transferred	number	—	—
bytes_written	number	—	—
capabilities	object	—	—
checksum	string	—	—
code	string	—	—
command	string	—	—
content	string	—	—
deleted	array	—	—
duration_ms	number	—	—
error	object	—	—
exit_code	number	—	—
failure_class	string	—	—
has_more	boolean	—	—
host	string	—	—
limit	number	—	—
local_path	string	—	—
next_action	string	—	—
next_commands	object	—	—
offset	number	—	—
path	string	—	—
rc	number	—	—
recovery	string	—	—
remote_path	string	—	—
revision	string	—	—
seq	number	—	—
session	string	—	—
sid	string	—	—
status	string	yes	—
stderr	string	—	—
stderr_lines	number	—	—
stdout	string	—	—
stdout_lines	number	—	—
stream	string	—	—
summary	string	—	—
tmux_name	string	—	—
total_lines	number	—	—
verify	—	—	—

No examples provided.

ssh-edit-block SSH Edit File ~371

Edit remote files using hash-verified anchors. Use ssh-read-lines first to get hash anchors and checksums.

Input Output Examples

Name	Type	Req	Description
anchor	string	—	Hash anchor 'ab.42' to set single line (from ssh-read-lines)
checksum	string	—	Range checksum from ssh-read-lines (e.g. '1-50:f7e2a1b0'). If provided, verifies file unchanged before edit.
connectTimeoutMs	number	—	SSH handshake timeout in ms (default: 20000). Per-call override. Different values spawn separate pooled connections.
endAnchor	string	—	End hash anchor 'cd.45' for range replace
execTimeoutMs	number	—	Per-command execution timeout in ms (default: 120000). Used by remote-ssh and hash-verified file tools.
filePath	string	yes	Path to file on remote server
host	string	yes	SSH host - alias from ~/.ssh/config or hostname/IP
insertAfter	string	—	Hash anchor 'ab.42' to insert after
keepaliveIntervalMs	number	—	SSH keepalive interval in ms (default: 30000). Per-call override. Different values spawn separate pooled connections.
newText	string	—	Replacement text (for anchor/range/insert edits)
port	number	—	SSH port (default: 22)
privateKeyPath	string	—	Path to SSH private key (optional)
remotePlatform	string	—	Remote path platform. Use "windows" for paths like C:\\repo\\file.txt. Default: auto
startAnchor	string	—	Start hash anchor 'ab.42' for range replace
user	string	—	SSH username (optional if set in ~/.ssh/config)

Name	Type	Req	Description
bytes_transferred	number	—	—
bytes_written	number	—	—
capabilities	object	—	—
checksum	string	—	—
code	string	—	—
command	string	—	—
content	string	—	—
deleted	array	—	—
duration_ms	number	—	—
error	object	—	—
exit_code	number	—	—
failure_class	string	—	—
has_more	boolean	—	—
host	string	—	—
limit	number	—	—
local_path	string	—	—
next_action	string	—	—
next_commands	object	—	—
offset	number	—	—
path	string	—	—
rc	number	—	—
recovery	string	—	—
remote_path	string	—	—
revision	string	—	—
seq	number	—	—
session	string	—	—
sid	string	—	—
status	string	yes	—
stderr	string	—	—
stderr_lines	number	—	—
stdout	string	—	—
stdout_lines	number	—	—
stream	string	—	—
summary	string	—	—
tmux_name	string	—	—
total_lines	number	—	—
verify	—	—	—

No examples provided.

ssh-read-lines SSH Read File ~310

Read remote file with hash-annotated lines. Use startLine/maxLines for large files. Returns range checksums for edit verification.

Input Output Examples

Name	Type	Req	Description
connectTimeoutMs	number	—	SSH handshake timeout in ms (default: 20000). Per-call override. Different values spawn separate pooled connections.
endLine	number	—	End line (optional, reads to limit if not set)
execTimeoutMs	number	—	Per-command execution timeout in ms (default: 120000). Used by remote-ssh and hash-verified file tools.
filePath	string	yes	Path to file on remote server
host	string	yes	SSH host - alias from ~/.ssh/config or hostname/IP
keepaliveIntervalMs	number	—	SSH keepalive interval in ms (default: 30000). Per-call override. Different values spawn separate pooled connections.
maxLines	number	—	Max lines to read (default: 200)
plain	boolean	—	Omit hashes (lineNum\|content)
port	number	—	SSH port (default: 22)
privateKeyPath	string	—	Path to SSH private key (optional)
remotePlatform	string	—	Remote path platform. Use "windows" for paths like C:\\repo\\file.txt. Default: auto
startLine	number	—	Start line (1-based, default: 1)
user	string	—	SSH username (optional if set in ~/.ssh/config)

Name	Type	Req	Description
bytes_transferred	number	—	—
bytes_written	number	—	—
capabilities	object	—	—
checksum	string	—	—
code	string	—	—
command	string	—	—
content	string	—	—
deleted	array	—	—
duration_ms	number	—	—
error	object	—	—
exit_code	number	—	—
failure_class	string	—	—
has_more	boolean	—	—
host	string	—	—
limit	number	—	—
local_path	string	—	—
next_action	string	—	—
next_commands	object	—	—
offset	number	—	—
path	string	—	—
rc	number	—	—
recovery	string	—	—
remote_path	string	—	—
revision	string	—	—
seq	number	—	—
session	string	—	—
sid	string	—	—
status	string	yes	—
stderr	string	—	—
stderr_lines	number	—	—
stdout	string	—	—
stdout_lines	number	—	—
stream	string	—	—
summary	string	—	—
tmux_name	string	—	—
total_lines	number	—	—
verify	—	—	—

No examples provided.

ssh-search-code SSH Search ~320

Search remote files with grep. Returns hash-annotated matches with deduplication. Use for finding code before ssh-edit-block.

Input Output Examples

Name	Type	Req	Description
connectTimeoutMs	number	—	SSH handshake timeout in ms (default: 20000). Per-call override. Different values spawn separate pooled connections.
contextLines	number	—	Context lines around matches (default: 0)
execTimeoutMs	number	—	Per-command execution timeout in ms (default: 120000). Used by remote-ssh and hash-verified file tools.
filePattern	string	—	Glob filter (e.g. ".js", ".py")
host	string	yes	SSH host - alias from ~/.ssh/config or hostname/IP
ignoreCase	boolean	—	Case-insensitive search (default: false)
keepaliveIntervalMs	number	—	SSH keepalive interval in ms (default: 30000). Per-call override. Different values spawn separate pooled connections.
maxResults	number	—	Max result lines (default: 50)
path	string	yes	Directory to search on remote server
pattern	string	yes	Text/regex pattern to search
port	number	—	SSH port (default: 22)
privateKeyPath	string	—	Path to SSH private key (optional)
remotePlatform	string	—	Remote path platform. Use "windows" for paths like C:\\repo\\file.txt. Default: auto
user	string	—	SSH username (optional if set in ~/.ssh/config)

Name	Type	Req	Description
bytes_transferred	number	—	—
bytes_written	number	—	—
capabilities	object	—	—
checksum	string	—	—
code	string	—	—
command	string	—	—
content	string	—	—
deleted	array	—	—
duration_ms	number	—	—
error	object	—	—
exit_code	number	—	—
failure_class	string	—	—
has_more	boolean	—	—
host	string	—	—
limit	number	—	—
local_path	string	—	—
next_action	string	—	—
next_commands	object	—	—
offset	number	—	—
path	string	—	—
rc	number	—	—
recovery	string	—	—
remote_path	string	—	—
revision	string	—	—
seq	number	—	—
session	string	—	—
sid	string	—	—
status	string	yes	—
stderr	string	—	—
stderr_lines	number	—	—
stdout	string	—	—
stdout_lines	number	—	—
stream	string	—	—
summary	string	—	—
tmux_name	string	—	—
total_lines	number	—	—
verify	—	—	—

No examples provided.

ssh-session-close SSH Session Close ~228

Close a trusted persistent tmux session and remove its remote session directory.

Input Output Examples

Name	Type	Req	Description
connectTimeoutMs	number	—	SSH handshake timeout in ms (default: 20000). Per-call override. Different values spawn separate pooled connections.
execTimeoutMs	number	—	Per-command execution timeout in ms (default: 120000). Used by remote-ssh and hash-verified file tools.
host	string	yes	SSH host - alias from ~/.ssh/config or hostname/IP
keepaliveIntervalMs	number	—	SSH keepalive interval in ms (default: 30000). Per-call override. Different values spawn separate pooled connections.
port	number	—	SSH port (default: 22)
privateKeyPath	string	—	Path to SSH private key (optional)
remotePlatform	string	—	Remote path platform. Use "windows" for paths like C:\\repo\\file.txt. Default: auto
sid	string	yes	Session id returned by ssh-session-open
user	string	—	SSH username (optional if set in ~/.ssh/config)

Name	Type	Req	Description
bytes_transferred	number	—	—
bytes_written	number	—	—
capabilities	object	—	—
checksum	string	—	—
code	string	—	—
command	string	—	—
content	string	—	—
deleted	array	—	—
duration_ms	number	—	—
error	object	—	—
exit_code	number	—	—
failure_class	string	—	—
has_more	boolean	—	—
host	string	—	—
limit	number	—	—
local_path	string	—	—
next_action	string	—	—
next_commands	object	—	—
offset	number	—	—
path	string	—	—
rc	number	—	—
recovery	string	—	—
remote_path	string	—	—
revision	string	—	—
seq	number	—	—
session	string	—	—
sid	string	—	—
status	string	yes	—
stderr	string	—	—
stderr_lines	number	—	—
stdout	string	—	—
stdout_lines	number	—	—
stream	string	—	—
summary	string	—	—
tmux_name	string	—	—
total_lines	number	—	—
verify	—	—	—

No examples provided.

ssh-session-exec SSH Session Exec ~270

Run a command inside a persistent tmux session. Returns metadata first; read output with ssh-session-read.

Input Output Examples

Name	Type	Req	Description
command	string	yes	Shell command to execute in the persistent session
connectTimeoutMs	number	—	SSH handshake timeout in ms (default: 20000). Per-call override. Different values spawn separate pooled connections.
execTimeoutMs	number	—	Per-command execution timeout in ms (default: 120000). Used by remote-ssh and hash-verified file tools.
host	string	yes	SSH host - alias from ~/.ssh/config or hostname/IP
keepaliveIntervalMs	number	—	SSH keepalive interval in ms (default: 30000). Per-call override. Different values spawn separate pooled connections.
port	number	—	SSH port (default: 22)
privateKeyPath	string	—	Path to SSH private key (optional)
remotePlatform	string	—	Remote path platform. Use "windows" for paths like C:\\repo\\file.txt. Default: auto
sid	string	yes	Session id returned by ssh-session-open
user	string	—	SSH username (optional if set in ~/.ssh/config)
waitSeconds	number	—	Seconds to wait for command completion. Default: 300

Name	Type	Req	Description
bytes_transferred	number	—	—
bytes_written	number	—	—
capabilities	object	—	—
checksum	string	—	—
code	string	—	—
command	string	—	—
content	string	—	—
deleted	array	—	—
duration_ms	number	—	—
error	object	—	—
exit_code	number	—	—
failure_class	string	—	—
has_more	boolean	—	—
host	string	—	—
limit	number	—	—
local_path	string	—	—
next_action	string	—	—
next_commands	object	—	—
offset	number	—	—
path	string	—	—
rc	number	—	—
recovery	string	—	—
remote_path	string	—	—
revision	string	—	—
seq	number	—	—
session	string	—	—
sid	string	—	—
status	string	yes	—
stderr	string	—	—
stderr_lines	number	—	—
stdout	string	—	—
stdout_lines	number	—	—
stream	string	—	—
summary	string	—	—
tmux_name	string	—	—
total_lines	number	—	—
verify	—	—	—

No examples provided.

ssh-session-gc SSH Session GC ~246

Remove expired trusted hex-ssh tmux sessions. Only sessions with valid hex-ssh metadata are touched.

Input Output Examples

Name	Type	Req	Description
connectTimeoutMs	number	—	SSH handshake timeout in ms (default: 20000). Per-call override. Different values spawn separate pooled connections.
execTimeoutMs	number	—	Per-command execution timeout in ms (default: 120000). Used by remote-ssh and hash-verified file tools.
host	string	yes	SSH host - alias from ~/.ssh/config or hostname/IP
keepaliveIntervalMs	number	—	SSH keepalive interval in ms (default: 30000). Per-call override. Different values spawn separate pooled connections.
olderThanSeconds	number	—	Delete trusted sessions older than this many seconds. Default: delete expired sessions only
port	number	—	SSH port (default: 22)
privateKeyPath	string	—	Path to SSH private key (optional)
remotePlatform	string	—	Remote path platform. Use "windows" for paths like C:\\repo\\file.txt. Default: auto
user	string	—	SSH username (optional if set in ~/.ssh/config)

Name	Type	Req	Description
bytes_transferred	number	—	—
bytes_written	number	—	—
capabilities	object	—	—
checksum	string	—	—
code	string	—	—
command	string	—	—
content	string	—	—
deleted	array	—	—
duration_ms	number	—	—
error	object	—	—
exit_code	number	—	—
failure_class	string	—	—
has_more	boolean	—	—
host	string	—	—
limit	number	—	—
local_path	string	—	—
next_action	string	—	—
next_commands	object	—	—
offset	number	—	—
path	string	—	—
rc	number	—	—
recovery	string	—	—
remote_path	string	—	—
revision	string	—	—
seq	number	—	—
session	string	—	—
sid	string	—	—
status	string	yes	—
stderr	string	—	—
stderr_lines	number	—	—
stdout	string	—	—
stdout_lines	number	—	—
stream	string	—	—
summary	string	—	—
tmux_name	string	—	—
total_lines	number	—	—
verify	—	—	—

No examples provided.

ssh-session-open SSH Session Open ~256

Open a trusted persistent remote tmux session. Preserves cwd and environment across ssh-session-exec calls.

Input Output Examples

Name	Type	Req	Description
connectTimeoutMs	number	—	SSH handshake timeout in ms (default: 20000). Per-call override. Different values spawn separate pooled connections.
execTimeoutMs	number	—	Per-command execution timeout in ms (default: 120000). Used by remote-ssh and hash-verified file tools.
host	string	yes	SSH host - alias from ~/.ssh/config or hostname/IP
keepaliveIntervalMs	number	—	SSH keepalive interval in ms (default: 30000). Per-call override. Different values spawn separate pooled connections.
name	string	—	Optional session label. Default: empty
port	number	—	SSH port (default: 22)
privateKeyPath	string	—	Path to SSH private key (optional)
remotePlatform	string	—	Remote path platform. Use "windows" for paths like C:\\repo\\file.txt. Default: auto
ttlSeconds	number	—	Session TTL in seconds. Default: 43200 (12h)
user	string	—	SSH username (optional if set in ~/.ssh/config)

Name	Type	Req	Description
bytes_transferred	number	—	—
bytes_written	number	—	—
capabilities	object	—	—
checksum	string	—	—
code	string	—	—
command	string	—	—
content	string	—	—
deleted	array	—	—
duration_ms	number	—	—
error	object	—	—
exit_code	number	—	—
failure_class	string	—	—
has_more	boolean	—	—
host	string	—	—
limit	number	—	—
local_path	string	—	—
next_action	string	—	—
next_commands	object	—	—
offset	number	—	—
path	string	—	—
rc	number	—	—
recovery	string	—	—
remote_path	string	—	—
revision	string	—	—
seq	number	—	—
session	string	—	—
sid	string	—	—
status	string	yes	—
stderr	string	—	—
stderr_lines	number	—	—
stdout	string	—	—
stdout_lines	number	—	—
stream	string	—	—
summary	string	—	—
tmux_name	string	—	—
total_lines	number	—	—
verify	—	—	—

No examples provided.

ssh-session-read SSH Session Read ~304

Read a paginated stdout/stderr window from a persistent session command.

Input Output Examples

Name	Type	Req	Description
connectTimeoutMs	number	—	SSH handshake timeout in ms (default: 20000). Per-call override. Different values spawn separate pooled connections.
execTimeoutMs	number	—	Per-command execution timeout in ms (default: 120000). Used by remote-ssh and hash-verified file tools.
host	string	yes	SSH host - alias from ~/.ssh/config or hostname/IP
keepaliveIntervalMs	number	—	SSH keepalive interval in ms (default: 30000). Per-call override. Different values spawn separate pooled connections.
limit	number	—	Line limit. Default: 50
offset	number	—	Zero-based line offset. Default: 0
port	number	—	SSH port (default: 22)
privateKeyPath	string	—	Path to SSH private key (optional)
raw	boolean	—	When true, return only the output content field
remotePlatform	string	—	Remote path platform. Use "windows" for paths like C:\\repo\\file.txt. Default: auto
seq	—	yes	Command sequence returned by ssh-session-exec
sid	string	yes	Session id returned by ssh-session-open
stream	string	—	Output stream: stdout or stderr. Default: stdout
user	string	—	SSH username (optional if set in ~/.ssh/config)

Name	Type	Req	Description
bytes_transferred	number	—	—
bytes_written	number	—	—
capabilities	object	—	—
checksum	string	—	—
code	string	—	—
command	string	—	—
content	string	—	—
deleted	array	—	—
duration_ms	number	—	—
error	object	—	—
exit_code	number	—	—
failure_class	string	—	—
has_more	boolean	—	—
host	string	—	—
limit	number	—	—
local_path	string	—	—
next_action	string	—	—
next_commands	object	—	—
offset	number	—	—
path	string	—	—
rc	number	—	—
recovery	string	—	—
remote_path	string	—	—
revision	string	—	—
seq	number	—	—
session	string	—	—
sid	string	—	—
status	string	yes	—
stderr	string	—	—
stderr_lines	number	—	—
stdout	string	—	—
stdout_lines	number	—	—
stream	string	—	—
summary	string	—	—
tmux_name	string	—	—
total_lines	number	—	—
verify	—	—	—

No examples provided.

ssh-upload SSH Upload File ~325

Upload a local file to a remote server over SFTP. Supports text and binary files, rejects existing destinations by default, validates path boundaries, and stages via the strongest available remote finalize path.

Input Output Examples

Name	Type	Req	Description
connectTimeoutMs	number	—	SSH handshake timeout in ms (default: 20000). Per-call override. Different values spawn separate pooled connections.
host	string	yes	SSH host - alias from ~/.ssh/config or hostname/IP
keepaliveIntervalMs	number	—	SSH keepalive interval in ms (default: 30000). Per-call override. Different values spawn separate pooled connections.
localPath	string	yes	Absolute local file path or ~/path to upload
overwrite	boolean	—	Replace existing destination when true. Default: false
permissions	string	—	Optional octal file mode for uploaded file, e.g. 0644
port	number	—	SSH port (default: 22)
privateKeyPath	string	—	Path to SSH private key (optional)
remotePath	string	yes	Absolute destination path on remote server
remotePlatform	string	—	Remote path platform. Use "windows" for paths like C:\\repo\\file.txt. Default: auto
transferTimeoutMs	number	—	SFTP inactivity timeout in ms (default: 120000; env TRANSFER_TIMEOUT_MS overrides default). Used by ssh-upload/ssh-download.
user	string	—	SSH username (optional if set in ~/.ssh/config)
verify	string	—	Post-transfer verification mode. Default: stat

Name	Type	Req	Description
bytes_transferred	number	—	—
bytes_written	number	—	—
capabilities	object	—	—
checksum	string	—	—
code	string	—	—
command	string	—	—
content	string	—	—
deleted	array	—	—
duration_ms	number	—	—
error	object	—	—
exit_code	number	—	—
failure_class	string	—	—
has_more	boolean	—	—
host	string	—	—
limit	number	—	—
local_path	string	—	—
next_action	string	—	—
next_commands	object	—	—
offset	number	—	—
path	string	—	—
rc	number	—	—
recovery	string	—	—
remote_path	string	—	—
revision	string	—	—
seq	number	—	—
session	string	—	—
sid	string	—	—
status	string	yes	—
stderr	string	—	—
stderr_lines	number	—	—
stdout	string	—	—
stdout_lines	number	—	—
stream	string	—	—
summary	string	—	—
tmux_name	string	—	—
total_lines	number	—	—
verify	—	—	—

No examples provided.

ssh-verify SSH Verify Checksums ~277

Check if range checksums still match remote file. Single-line response avoids full re-read. Use before editing after a pause.

Input Output Examples

Name	Type	Req	Description
checksums	string	yes	JSON array of checksum strings, e.g. ["1-50:f7e2a1b0", "51-100:abcd1234"]
connectTimeoutMs	number	—	SSH handshake timeout in ms (default: 20000). Per-call override. Different values spawn separate pooled connections.
execTimeoutMs	number	—	Per-command execution timeout in ms (default: 120000). Used by remote-ssh and hash-verified file tools.
filePath	string	yes	Path to file on remote server
host	string	yes	SSH host - alias from ~/.ssh/config or hostname/IP
keepaliveIntervalMs	number	—	SSH keepalive interval in ms (default: 30000). Per-call override. Different values spawn separate pooled connections.
port	number	—	SSH port (default: 22)
privateKeyPath	string	—	Path to SSH private key (optional)
remotePlatform	string	—	Remote path platform. Use "windows" for paths like C:\\repo\\file.txt. Default: auto
user	string	—	SSH username (optional if set in ~/.ssh/config)

Name	Type	Req	Description
bytes_transferred	number	—	—
bytes_written	number	—	—
capabilities	object	—	—
checksum	string	—	—
code	string	—	—
command	string	—	—
content	string	—	—
deleted	array	—	—
duration_ms	number	—	—
error	object	—	—
exit_code	number	—	—
failure_class	string	—	—
has_more	boolean	—	—
host	string	—	—
limit	number	—	—
local_path	string	—	—
next_action	string	—	—
next_commands	object	—	—
offset	number	—	—
path	string	—	—
rc	number	—	—
recovery	string	—	—
remote_path	string	—	—
revision	string	—	—
seq	number	—	—
session	string	—	—
sid	string	—	—
status	string	yes	—
stderr	string	—	—
stderr_lines	number	—	—
stdout	string	—	—
stdout_lines	number	—	—
stream	string	—	—
summary	string	—	—
tmux_name	string	—	—
total_lines	number	—	—
verify	—	—	—

No examples provided.

ssh-write-chunk SSH Write File ~271

Write or append to remote files. Rewrite mode is atomic (temp file + rename). Append mode is non-atomic (direct >>). Auto-creates parent directories.

Input Output Examples

Name	Type	Req	Description
connectTimeoutMs	number	—	SSH handshake timeout in ms (default: 20000). Per-call override. Different values spawn separate pooled connections.
content	string	yes	Content to write
execTimeoutMs	number	—	Per-command execution timeout in ms (default: 120000). Used by remote-ssh and hash-verified file tools.
filePath	string	yes	Path to file on remote server
host	string	yes	SSH host - alias from ~/.ssh/config or hostname/IP
keepaliveIntervalMs	number	—	SSH keepalive interval in ms (default: 30000). Per-call override. Different values spawn separate pooled connections.
mode	string	—	Write mode (default: rewrite)
port	number	—	SSH port (default: 22)
privateKeyPath	string	—	Path to SSH private key (optional)
remotePlatform	string	—	Remote path platform. Use "windows" for paths like C:\\repo\\file.txt. Default: auto
user	string	—	SSH username (optional if set in ~/.ssh/config)

Name	Type	Req	Description
bytes_transferred	number	—	—
bytes_written	number	—	—
capabilities	object	—	—
checksum	string	—	—
code	string	—	—
command	string	—	—
content	string	—	—
deleted	array	—	—
duration_ms	number	—	—
error	object	—	—
exit_code	number	—	—
failure_class	string	—	—
has_more	boolean	—	—
host	string	—	—
limit	number	—	—
local_path	string	—	—
next_action	string	—	—
next_commands	object	—	—
offset	number	—	—
path	string	—	—
rc	number	—	—
recovery	string	—	—
remote_path	string	—	—
revision	string	—	—
seq	number	—	—
session	string	—	—
sid	string	—	—
status	string	yes	—
stderr	string	—	—
stderr_lines	number	—	—
stdout	string	—	—
stdout_lines	number	—	—
stream	string	—	—
summary	string	—	—
tmux_name	string	—	—
total_lines	number	—	—
verify	—	—	—

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug