Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

bash-mcp

NPM · @NICKW8/BASH-MCP

Structured JSON wrappers for git, kubectl, terraform, helm, argocd, gh, glab and other CLIs.

Available components

74 Trust /100

Last scanned (17 hours ago)

Scores higher than 52% of npm servers

Category CI/CD and DevOps

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security81
  • No malware found by supply-chain analysis.Pass
  • CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
  • No install/post-install scripts declared.Pass
  • 30 of 93 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency97
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to nickw8/bash-mcp). View diagnostics → Pass
  • Clear OSI-approved license (Apache-2.0).Pass
  • Actively maintained (last published 0 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability69
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 8161 tokens (~125/item across 65 items; 65 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (98% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 65 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 66 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 24 Oct 26 +15
    • Malware scan: unverified → pass ▲ security
  • 23 Oct 26 59

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 24 Oct 2026 · Analysed npm/@nickw8/bash-mcp@5.0.1

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo nickw8/bash-mcp
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/nickw8/bash-mcp/.github/workflows/release.yml@refs/tags/v5.0.1
Rekor log index 3422176171
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:6cd030b2b6c113532443118174e90aeddd1050805ff29d897ccdc273244bfc27b372cce6813a3b72940e2eef262684fac94d5cc8b3a4b0606d3766dbd

Background: How many MCP packages publish verified provenance →

Vulnerabilities 1 finding
ID CVE Severity Vector Fix available
GHSA-mrhx-c7xc-m3w5 CVE-2023-54404 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes

Background: What a vulnerability scan can and cannot prove →

Dependencies 93 packages
Packages resolved 93
Stale 30
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 65 exposed · ~7,921 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
argo_app_detail ~33

Get detailed status for a single ArgoCD application including resource health.

NameTypeReqDescription
namestringyesApplication name
NameTypeReqDescription
conditionsarrayyes–
healthStatusstringyes–
messagestringyes–
namestringyes–
projectstringyes–
resourcesarrayyes–
retainedobject––
revisionstringyes–
syncStatusstringyes–

No examples provided.

argo_app_diff ~31

Show what's out of sync for an ArgoCD application.

NameTypeReqDescription
namestringyesApplication name
NameTypeReqDescription
diffstringyes–
hasDiffbooleanyes–
retainedobject––

No examples provided.

argo_app_health_summary ~52

Diagnose an ArgoCD application's health in one call: overall sync/health, likely causes, suggested next commands, and the unhealthy resources/conditions as evidence.

NameTypeReqDescription
namestringyesApplication name
NameTypeReqDescription
evidencearrayyes–
healthybooleanyes–
likelyCausesarrayyes–
namestringyes–
retainedobject––
statusstringyes–
suggestedNextCommandsarrayyes–
syncStatusstringyes–

No examples provided.

argo_apps ~49

List ArgoCD applications with sync/health status. Structured summary instead of table output.

NameTypeReqDescription
projectstring–Filter by ArgoCD project
selectorstring–Label selector
NameTypeReqDescription
appsarrayyes–
countnumberyes–
retainedobject––
summaryobjectyes–

No examples provided.

bash_lint ~132

Run shellcheck and return structured diagnostics with file, line, column, message, and SC rule code. Much more compact than raw shellcheck output. Use minSeverity to filter by severity level.

NameTypeReqDescription
detailLevelstring–Item preset: summary 20, normal 100, full (default; also skips the response budget)
files––Required. Shell script path(s) to lint; a string or array
maxItemsinteger–Item cap; overrides detailLevel
minSeveritystring–Minimum severity to include (e.g. 'error' drops warnings and info)
NameTypeReqDescription
errorCountnumberyes–
errorsarrayyes–
retainedobject––
totalnumber––
truncatedboolean––
warningCountnumberyes–

No examples provided.

bash_syntax_check ~116

Check shell scripts for syntax errors with `bash -n` and return structured diagnostics (file, line, message). Parses without executing, so it is safe on untrusted scripts. Reports valid:true when no errors are found.

NameTypeReqDescription
detailLevelstring–Item preset: summary 20, normal 100, full (default; also skips the response budget)
files––Required. Shell script path(s) to check; a string or array
maxItemsinteger–Item cap; overrides detailLevel
NameTypeReqDescription
errorCountnumberyes–
errorsarrayyes–
retainedobject––
totalnumber––
truncatedboolean––
validbooleanyes–

No examples provided.

bash_test ~124

Run a shell test script — bats `.bats` files via `--tap`, or a plain `.sh` harness — and return structured results: per-case pass/fail plus a summary parsed from TAP or `N tests, M failures` output, falling back to exit-code-only when the format is unrecognized. Executes the script, so it is gated by BASH_MCP_MODE.

NameTypeReqDescription
cwdstring–Working directory
filestring–Required. Test script path (.bats or .sh)
timeoutnumber–Timeout in ms
NameTypeReqDescription
exitCodenumberyes–
failedarrayyes–
passedarrayyes–
retainedobject––
skippedarrayyes–
summary–yes–

No examples provided.

batch ~77

Run multiple commands in parallel and return all results. Each command is a binary plus an args array, executed without a shell (for a pipeline use command='sh', args=['-c', '...']). Use when you need to gather independent pieces of information in a single tool call instead of multiple sequential calls.

NameTypeReqDescription
commandsarray–Required.
NameTypeReqDescription
elapsednumberyes–
resultsarrayyes–
retainedobject––

No examples provided.

cat ~342

Read one or more files with line numbers and smart truncation. Returns structured output with metadata. Pass `path` for a single file, or `paths` to read several in one call (returns { files, count }) — collapsing what would otherwise be multiple round-trips. For large files, use startLine/endLine or maxLines to limit output. Use ref to read from a git branch/commit instead of disk (e.g. ref='main'). NOTE: reading with cat does NOT satisfy the built-in Edit/Write "must read first" guard (it tracks only the built-in Read tool) — run the built-in Read on a file immediately before editing it.

NameTypeReqDescription
endLinenumber–Stop reading at this line (inclusive)
lineNumbersboolean–Prepend line numbers to each line (useful when locating a line). Does not register the file as read for the built-in Edit — use the built-in Read right before editing.
maxLinesnumber–Max lines to return per file (default 200, use 0 for unlimited)
pathstring–Path to a single file
paths––Read multiple files in one call; a string or array. Returns { files, count }; a per-file failure is reported in that file's `error` and does not abort the others.
refstring–Git ref to read from (e.g. 'main', 'HEAD~1', a commit hash). When set, reads file content from git (git show ref:path) instead of disk.
startLinenumber–Start reading from this line (1-based)
NameTypeReqDescription
contentstring––
countnumber––
errorstring––
filesarray––
mtimenumber–File modification time (unix timestamp)
pathstring––
rangearray––
retainedobject––
sizenumber––
totalLinesnumber––
truncatedboolean––

No examples provided.

check_environment ~54

Report which CLIs are installed (and their versions) so you can pick the right tool before calling it. Probes are client-only and non-blocking — no server/auth calls. Includes kubectl's current context when available.

Input schema present but exposes no named parameters.

NameTypeReqDescription
installedCountnumberyes–
retainedobject––
toolsarrayyes–
totalnumberyes–

No examples provided.

dotnet_build ~180

Run dotnet build and return structured diagnostics with file, line, column, message, and error code. Much more compact than raw MSBuild output. Warnings are omitted by default; pass includeWarnings:true (or detailLevel:'full') to include them.

NameTypeReqDescription
configurationstring–Build configuration (e.g. Debug, Release)
cwdstring–Required. Project root directory
detailLevelstring–Item preset: summary 20, normal 100, full (default; also skips the response budget)
includeWarningsboolean–Include warnings in the response (default: errors only, even on a successful build)
maxItemsinteger–Item cap; overrides detailLevel
projectstring–Path to .csproj or .sln file (default: auto-detected in cwd)
NameTypeReqDescription
diagnosticsarrayyes–
errorCountnumberyes–
exitCodenumberyes–
retainedobject––
summarystringyes–
totalnumber––
truncatedboolean––
warningCountnumberyes–

No examples provided.

dotnet_test ~99

Run dotnet test and return structured results: pass/fail/skip counts, failure messages. Much more compact than raw test output. Only failures are listed.

NameTypeReqDescription
cwdstring–Required. Project root directory
filterstring–Test filter expression (e.g. 'FullyQualifiedName~MyTest')
projectstring–Path to .csproj or .sln file (default: auto-detected in cwd)
NameTypeReqDescription
exitCodenumberyes–
failednumberyes–
failuresarrayyes–
passednumberyes–
retainedobject––
skippednumberyes–
summarystringyes–
totalnumberyes–

No examples provided.

du ~63

Show disk usage for paths. Returns entries as [path, sizeBytes] pairs, in the order du emits them. Use maxDepth to control how deep the summary goes.

NameTypeReqDescription
maxDepthnumber–Depth to summarize
pathstringyesPath to measure
NameTypeReqDescription
entriesarrayyes–
retainedobject––

No examples provided.

find_files ~200

Find files by name pattern, type, or modification time. Returns structured list of paths. Use names for multiple glob patterns (OR logic), modifiedWithin for recent files (e.g. '7d', '1h').

NameTypeReqDescription
maxDepthnumber–Max search depth
modifiedWithinstring–Modified within timespan (e.g. '7d', '1h')
namestring–Filename glob pattern (e.g. '*.ts')
namesarray–Multiple filename glob patterns (e.g. ['*.ts', '*.py', '*.sh']). Combined with OR logic.
pathstring–Root directory to search (default: '.')
patternstring–Alias for name — filename glob pattern (e.g. '*.ts')
typestring–Filter by type
withMetadataboolean–Include size (bytes) and mtime (unix timestamp) for each file
NameTypeReqDescription
countnumberyes–
filesarrayyes–
metadataarray––
retainedobject––

No examples provided.

gh_pr_checks ~104

Report a pull request's CI checks as counts per state plus the failing and pending checks. Defaults to the current branch's PR; passing checks are counted, not listed, unless all=true.

NameTypeReqDescription
allboolean–List passing and skipped checks too (default: only the rest)
cwdstring–Repository path (default: the server's working directory)
prstring–PR number, URL or branch (default: the current branch's PR)
NameTypeReqDescription
checksarrayyes–
countsobjectyes–
retainedobject––

No examples provided.

gh_run_failure_summary ~108

Diagnose a GitHub Actions run in one call: status, the failed jobs and steps, and the ##[error] lines from the failed log as evidence. Defaults to the latest run on the current branch.

NameTypeReqDescription
branchstring–Branch whose latest run to read (default: the current branch)
cwdstring–Repository path (default: the server's working directory)
runstring|number–Run ID (default: the latest run on `branch`)
NameTypeReqDescription
branchstringyes–
evidencearrayyes–
failedJobsarrayyes–
likelyCausesarrayyes–
retainedobject––
runnumberyes–
statusstringyes–
suggestedNextCommandsarrayyes–
urlstringyes–
workflowstringyes–

No examples provided.

git_branches ~55

List git branches. Returns the current branch and [name, lastCommit] pairs; a remote branch's name starts with remotes/.

NameTypeReqDescription
cwdstring–Repository path
remoteboolean–Include remote branches
NameTypeReqDescription
branchesarrayyes–
currentstringyes–
retainedobject––

No examples provided.

git_diff ~143

Structured git diff: files changed with insertions/deletions counts. Use base+ref for two-ref comparison (e.g. base='main', ref='feature'). Use path to scope to one or more files or directories.

NameTypeReqDescription
basestring–Base ref for two-ref comparison. When both ref and base are set, runs git diff <base> <ref>
cwdstring–Repository path
path––Limit diff to one or more files or directories (string or array)
refstring–Ref to diff against (e.g. 'main', 'HEAD~3')
stagedboolean–Show staged changes
NameTypeReqDescription
fileCountnumberyes–
filesarrayyes–
retainedobject––
totalDeletionsnumberyes–
totalInsertionsnumberyes–

No examples provided.

git_diff_content ~196

Show git diff with structured patch content. Returns parsed hunks per file instead of raw unified diff text. Use this when you need to see actual code changes, not just file-level stats. Use base+ref for two-ref comparison (e.g. base='main', ref='feature'). Use path to scope to one or more files or directories.

NameTypeReqDescription
basestring–Base ref for two-ref comparison. When both ref and base are set, runs git diff <base> <ref>
contextnumber–Number of context lines around changes (passed as -U<n>)
cwdstring–Working directory (git repo)
path––Limit diff to one or more files or directories (string or array)
refstring–Diff against this ref (e.g. 'HEAD~1', 'main', a commit hash)
stagedboolean–Show staged changes (--cached)
NameTypeReqDescription
filesarrayyes–
retainedobject––
summaryobjectyes–

No examples provided.

git_log ~181

Structured git log: commit hash, author, date, message. Compact and parseable. Use range for ref comparisons (e.g. 'main..feature'). Use exclude to filter out commits matching a pattern (e.g. 'ci:').

NameTypeReqDescription
authorstring–Filter by author
countnumber–Number of commits (default 20)
cwdstring–Repository path
excludestring–Exclude commits matching this grep pattern (uses --invert-grep)
pathstring–Filter by file path
rangestring–Git ref range (e.g. 'main..feature', 'HEAD~5..HEAD')
sincestring–Since date (e.g. '2024-01-01')
withFilesboolean–Include list of files changed per commit
NameTypeReqDescription
commitsarrayyes–
countnumberyes–
retainedobject––

No examples provided.

git_pr_context ~84

Collect the commits and file changes of a branch vs a base ref (for writing a PR description): commit list, changed files with status, and a diffstat over base...head.

NameTypeReqDescription
basestring–Base ref to compare against (default 'main')
cwdstring–Repository path
headstring–Head ref (default 'HEAD')
NameTypeReqDescription
basestringyes–
changesobjectyes–
commitsarrayyes–
filesarrayyes–
headstringyes–
retainedobject––

No examples provided.

git_status ~39

Structured git status: branch, staged/unstaged/untracked files. Replaces parsing raw git status output.

NameTypeReqDescription
cwdstring–Repository path
NameTypeReqDescription
aheadnumberyes–
behindnumberyes–
branchstringyes–
cleanbooleanyes–
retainedobject––
stagedarrayyes–
unstagedarrayyes–
untrackedarrayyes–

No examples provided.

glab_ci_status ~174

Report a GitLab pipeline's jobs as counts per status plus the failed, running and pending jobs. Defaults to the current branch's latest pipeline; pass mr for a merge request's head pipeline. Passing, skipped and manual jobs are counted, not listed, unless all=true.

NameTypeReqDescription
allboolean–List passing, skipped and manual jobs too
branchstring–Branch whose latest pipeline to read (default: current branch)
cwdstring–Repository path (default: the server's working directory)
mrstring|number–Merge request IID: read its head pipeline instead
pipelinestring|number–Pipeline ID (default: the latest pipeline on `branch`)
repostring–GROUP/REPO or URL (default: the repo at `cwd`)
NameTypeReqDescription
countsobjectyes–
jobsarrayyes–
pipelinenumberyes–
retainedobject––
statusstringyes–
urlstringyes–

No examples provided.

glab_pipeline_failure_summary ~164

Diagnose a GitLab pipeline in one call: status, the failed jobs and why GitLab says they failed, and the last script lines of each failed job's trace as evidence. Allowed-to-fail jobs are noted, not counted as the failure. Defaults to the current branch's latest pipeline.

NameTypeReqDescription
branchstring–Branch whose latest pipeline to read (default: current branch)
cwdstring–Repository path (default: the server's working directory)
mrstring|number–Merge request IID: read its head pipeline instead
pipelinestring|number–Pipeline ID (default: the latest pipeline on `branch`)
repostring–GROUP/REPO or URL (default: the repo at `cwd`)
NameTypeReqDescription
branchstringyes–
evidencearrayyes–
failedJobsarrayyes–
likelyCausesarrayyes–
pipelinenumberyes–
retainedobject––
statusstringyes–
suggestedNextCommandsarrayyes–
urlstringyes–

No examples provided.

glob ~50

Find files matching a glob pattern. Returns a compact list of paths.

NameTypeReqDescription
cwdstring–Working directory for the glob
patternstringyesGlob pattern (e.g. 'src/**/*.ts')
NameTypeReqDescription
countnumberyes–
filesarrayyes–
retainedobject––

No examples provided.

helm_list ~72

List Helm releases with status, chart, and app version. Structured output.

NameTypeReqDescription
allNamespacesboolean–Search all namespaces (overrides namespace)
contextstring–Kube context
filterstring–Filter by release name regex
namespacestring–Namespace (omit for all)
NameTypeReqDescription
countnumberyes–
releasesarrayyes–
retainedobject––

No examples provided.

helm_release_triage ~70

Diagnose a Helm release's health in one call: combines helm status + helm history into current status, likely causes, suggested next commands, and recent-revision evidence.

NameTypeReqDescription
contextstring–Kube context
namespacestring–Namespace
releasestringyesRelease name
NameTypeReqDescription
evidencearrayyes–
healthybooleanyes–
likelyCausesarrayyes–
retainedobject––
revisionnumberyes–
revisionsnumberyes–
statusstringyes–
suggestedNextCommandsarrayyes–

No examples provided.

helm_status ~43

Get detailed status of a Helm release.

NameTypeReqDescription
contextstring–Kube context
namespacestring–Namespace
releasestringyesRelease name
NameTypeReqDescription
descriptionstringyes–
lastDeployedstringyes–
namestringyes–
namespacestringyes–
notesstringyes–
retainedobject––
revisionnumberyes–
statusstringyes–

No examples provided.

helm_values ~65

Get the computed values for a Helm release as structured data.

NameTypeReqDescription
allValuesboolean–Include chart defaults (not just user-supplied)
contextstring–Kube context
namespacestring–Namespace
releasestringyesRelease name
NameTypeReqDescription
retainedobject––
valuesobjectyes–

No examples provided.

jq ~162

Query and transform JSON using jq expressions. Accepts a file path or raw JSON string. Returns parsed, structured output — far more compact than reading a full JSON file. The filter is passed directly to jq (no shell), so shell-style escaping such as backslash-escaped quotes is neither needed nor supported — write the filter exactly as jq expects it.

NameTypeReqDescription
compactboolean–Compact output (-c)
filestring–Path to a JSON file
filterstring–jq filter expression (default: '.')
inputstring–Raw JSON string to process (alternative to file)
rawOutputboolean–Output raw strings without JSON encoding (-r)
slurpboolean–Read entire input into array (-s)
NameTypeReqDescription
multilinebooleanyes–
result–yes–
retainedobject––

No examples provided.

kube_contexts ~19

List available kubectl contexts with current context marked.

Input schema present but exposes no named parameters.

NameTypeReqDescription
contextsarrayyes–
currentstringyes–
retainedobject––

No examples provided.

kube_deployment_status ~56

Report a deployment's rollout health (ready/desired replicas, conditions) as a structured diagnosis.

NameTypeReqDescription
contextstring–Kube context
namestringyesDeployment name
namespacestring–Namespace
NameTypeReqDescription
evidencearrayyes–
likelyCausesarrayyes–
retainedobject––
statusstringyes–
suggestedNextCommandsarrayyes–

No examples provided.

kube_diagnose_pod ~81

Diagnose why a pod is unhealthy in one call. Returns status, likely causes, suggested next commands, and evidence (CrashLoopBackOff/ImagePullBackOff/OOMKilled/Unschedulable/restarts).

NameTypeReqDescription
contextstring–Kube context
namespacestring–Namespace
podstringyesPod name
NameTypeReqDescription
evidencearrayyes–
likelyCausesarrayyes–
retainedobject––
statusstringyes–
suggestedNextCommandsarrayyes–

No examples provided.

kube_events_summary ~124

Summarize Warning events in a namespace (grouped by reason, ordered by count) instead of scrolling raw kubectl get events.

NameTypeReqDescription
allNamespacesboolean–Search all namespaces (overrides namespace)
contextstring–Kube context
detailLevelstring–Item preset: summary 20, normal 100, full (default; also skips the response budget)
includeRawboolean–Include raw/verbose fields
maxItemsinteger–Item cap; overrides detailLevel
namespacestring–Namespace
NameTypeReqDescription
evidencearrayyes–
likelyCausesarrayyes–
retainedobject––
statusstringyes–
suggestedNextCommandsarrayyes–
totalnumber––
truncatedboolean––

No examples provided.

kube_get ~282

Get Kubernetes resources as structured data. Wraps kubectl get -o json and returns a compact summary by default. Use the jq param to extract specific fields from the raw JSON (e.g. '.spec.template.spec.containers[].env') instead of the summary.

NameTypeReqDescription
allNamespacesboolean–Search all namespaces (overrides namespace)
contextstring–Kube context
detailLevelstring–Item preset: summary 20, normal 100, full (default; also skips the response budget)
includeLabelsboolean–Include each resource's labels (default false — labels are verbose and mostly hashes; use selector to filter or jq to read specific ones)
includeRawboolean–Include raw/verbose fields
jqstring–jq filter applied to raw kubectl JSON. Skips the default summary and returns the jq result instead. Example: '.spec.template.spec.containers[].env'
maxItemsinteger–Item cap; overrides detailLevel
namestring–Specific resource name
namespacestring–Namespace (omit for all-namespaces or cluster-scoped)
resourcestring–Required. Resource type (e.g. pods, deployments, services, nodes)
selectorstring–Label selector (e.g. 'app=nginx')

No output schema declared.

No examples provided.

kube_logs ~252

Get pod logs. lines are as kubectl prints them, '<timestamp> <message>', oldest first; consecutive repeats of a message merge into the first, marked ' [×N]', and a budget cut keeps the newest. Use grep to filter lines by regex pattern (e.g. 'ERROR|WARN') instead of piping through shell commands.

NameTypeReqDescription
containerstring–Container name
contextstring–Kube context
detailLevelstring–Item preset: summary 20, normal 100, full (default; also skips the response budget)
grepstring–Regex pattern to filter log lines (e.g. 'ERROR|WARN', 'timeout'). Only matching lines are returned.
ignoreCaseboolean–Case-insensitive grep matching (default: false)
includeRawboolean–Include raw/verbose fields
maxItemsinteger–Item cap; overrides detailLevel
namespacestring–Namespace
podstring–Required. Pod name (or deployment/xxx)
sincestring–Duration like '1h', '30m'
tailnumber–Number of lines (default 100)
NameTypeReqDescription
linesarrayyes–
retainedobject––
totalnumber––
truncatedboolean––

No examples provided.

kube_pod_failure_summary ~122

List unhealthy pods in a namespace with their failure reason and evidence — one call instead of get + describe per pod.

NameTypeReqDescription
allNamespacesboolean–Search all namespaces (overrides namespace)
contextstring–Kube context
detailLevelstring–Item preset: summary 20, normal 100, full (default; also skips the response budget)
includeRawboolean–Include raw/verbose fields
maxItemsinteger–Item cap; overrides detailLevel
namespacestring–Namespace
NameTypeReqDescription
evidencearrayyes–
likelyCausesarrayyes–
podsarrayyes–
retainedobject––
statusstringyes–
suggestedNextCommandsarrayyes–
totalnumber––
truncatedboolean––

No examples provided.

liquibase_status ~178

List Liquibase changesets not yet applied to the target database, as structured JSON. Reports up-to-date vs a pending list. liquibase is on PATH — no mise/wrapper needed.

NameTypeReqDescription
changelogFilestring–Changelog path (--changelog-file); usually set in the defaults file instead.
contextsstring–Context expression to filter changesets (--contexts).
cwdstring–Directory to run liquibase in (where the defaults file / changelog live).
defaultsFilestring–Path to the Liquibase defaults file (--defaults-file), e.g. db-dev.properties. Usually carries the JDBC URL, credentials, and changelog path.
extraArgsarray–Additional raw arguments appended to the liquibase invocation.
labelsstring–Label expression to filter changesets (--labels).
NameTypeReqDescription
pendingarrayyes–
pendingCountnumberyes–
retainedobject––
upToDatebooleanyes–

No examples provided.

liquibase_update_sql ~314

Render the SQL Liquibase would run for pending changesets (updateSQL) as structured per-changeset summaries with a SQL-Server batch lint. Does NOT apply changes. SQL bodies are omitted unless includeRaw or changesetId is set. liquibase is on PATH — no mise/wrapper needed.

NameTypeReqDescription
batchLintboolean–Lint each changeset for the SQL-Server 'routine DDL must lead its GO-batch' rule (default true).
changelogFilestring–Changelog path (--changelog-file); usually set in the defaults file instead.
changesetIdstring–Return only this changeset's full rendered SQL (matches the changeset id).
contextsstring–Context expression to filter changesets (--contexts).
cwdstring–Directory to run liquibase in (where the defaults file / changelog live).
defaultsFilestring–Path to the Liquibase defaults file (--defaults-file), e.g. db-dev.properties. Usually carries the JDBC URL, credentials, and changelog path.
detailLevelstring–Item preset: summary 20, normal 100, full (default; also skips the response budget)
extraArgsarray–Additional raw arguments appended to the liquibase invocation.
includeRawboolean–Include raw/verbose fields
labelsstring–Label expression to filter changesets (--labels).
maxItemsinteger–Item cap; overrides detailLevel
NameTypeReqDescription
changesetCountnumberyes–
changesetsarrayyes–
retainedobject––
totalnumber––
truncatedboolean––

No examples provided.

liquibase_validate ~186

Validate a Liquibase changelog and return a structured pass/fail result with per-changeset errors (duplicate ids, checksum drift). Much more compact than raw output. liquibase is on PATH — no mise/wrapper needed.

NameTypeReqDescription
changelogFilestring–Changelog path (--changelog-file); usually set in the defaults file instead.
contextsstring–Context expression to filter changesets (--contexts).
cwdstring–Directory to run liquibase in (where the defaults file / changelog live).
defaultsFilestring–Path to the Liquibase defaults file (--defaults-file), e.g. db-dev.properties. Usually carries the JDBC URL, credentials, and changelog path.
extraArgsarray–Additional raw arguments appended to the liquibase invocation.
labelsstring–Label expression to filter changesets (--labels).
NameTypeReqDescription
errorCountnumberyes–
errorsarrayyes–
retainedobject––
validbooleanyes–

No examples provided.

list_guidance ~105

Return an intent → preferred-tool index so you can pick the right bash-mcp tool for a goal. Each entry names the tool to prefer, raw-command anti-patterns to avoid, and why. Filter with `intent` (substring) or `category` to narrow the list.

NameTypeReqDescription
categorystring–Exact category filter, e.g. 'kubernetes', 'git', 'terraform'.
intentstring–Case-insensitive substring filter on the intent text.
NameTypeReqDescription
intentsarrayyes–
retainedobject––
totalnumberyes–

No examples provided.

ls ~108

List files in a directory. Returns entries as [name, size, permissions, modified] — directories end with '/' and links with '@'. Use nameOnly for names alone, recursive for one level of subdirectories, all to include hidden files.

NameTypeReqDescription
allboolean–Include hidden files
nameOnlyboolean–Entries are [name] alone
pathstring–Required. Directory path to list
recursiveboolean–Recurse into subdirectories (1 level)
NameTypeReqDescription
entriesarrayyes–
retainedobject––

No examples provided.

npm_lint ~161

Run biome check and return structured diagnostics with file, line, column, message, and rule. Far more compact and parseable than raw lint output. Use minSeverity to filter by severity level.

NameTypeReqDescription
cwdstring–Required. Project root directory
detailLevelstring–Item preset: summary 20, normal 100, full (default; also skips the response budget)
fixboolean–Auto-fix safe issues (default: false)
maxItemsinteger–Item cap; overrides detailLevel
minSeveritystring–Minimum severity to include (e.g. 'error' drops warnings and info)
paths––Specific path(s) to lint; a string or array (default: '.')
NameTypeReqDescription
errorCountnumberyes–
errorsarrayyes–
fixedCountnumberyes–
retainedobject––
totalnumber––
truncatedboolean––
warningCountnumberyes–

No examples provided.

npm_test ~108

Run vitest or jest (picked from package.json) and return structured test results: suites, pass/fail counts, failure messages. Much more compact than raw test output. Only failures are listed by default; use verbose=true for all tests.

NameTypeReqDescription
coverageboolean–Enable coverage reporting
cwdstring–Required. Project root directory
patternstring–Filter tests by filename pattern
verboseboolean–Include all tests in output (default: only failures)
NameTypeReqDescription
retainedobject––
suitesarrayyes–
summaryobjectyes–

No examples provided.

Install

How do I install the bash-mcp server?

bash-mcp runs locally as an npm package, launched with npx -y @nickw8/bash-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @nickw8/bash-mcp

# add to Claude Code
claude mcp add nickw8-bash-mcp -- npx -y @nickw8/bash-mcp
Common questions

What is the bash-mcp server?

bash-mcp is listed in the public MCP registry as io.github.nickw8/bash-mcp. Structured JSON wrappers for git, kubectl, terraform, helm, argocd, gh, glab and other CLIs. This page covers its npm package (@nickw8/bash-mcp).

Is the bash-mcp server safe to use?

bash-mcp scores 74 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 24 October 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the bash-mcp server expose?

bash-mcp exposes 65 tools: ls, tree, du, find_files, rg, and 60 more. Their descriptions and schemas cost roughly 7,921 tokens of context every time the server is loaded.

Is the bash-mcp server still maintained?

bash-mcp is still listed as active in the MCP registry. We last reached this channel on 24 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the bash-mcp server under?

bash-mcp declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.