# io.github.NikolaNddTesla/sshmcp (npm · @nl4ever/sshmcp)

SSH server management with zero-token SFTP file transfer and SOCKS proxy support

- Trust score: 67/100 (medium)
- Change this week: +24
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@nl4ever/sshmcp`: 67/100 (this document), [markdown](https://verifymcp.io/servers/nikolanddtesla-sshmcp/nl4ever-sshmcp.md), [page](https://verifymcp.io/servers/nikolanddtesla-sshmcp/nl4ever-sshmcp)

## Channel facts

- Registry: `npm`
- Package: `@nl4ever/sshmcp`
- Version: `1.2.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (105 of 109), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (105 of 109), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 68 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 77/100
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 833 tokens (~52/item across 16 items; 16 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 75/100
  - 63% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add nikolanddtesla-sshmcp -- npx -y @nl4ever/sshmcp
```

### Codex

```bash
codex mcp add nikolanddtesla-sshmcp -- npx -y @nl4ever/sshmcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "nikolanddtesla-sshmcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@nl4ever/sshmcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add nikolanddtesla-sshmcp --command npx --arg -y --arg @nl4ever/sshmcp
```

### Hermes

```yaml
mcp_servers:
  nikolanddtesla-sshmcp:
    command: "npx"
    args: ["-y", "@nl4ever/sshmcp"]
```

### Other

```json
{
  "mcpServers": {
    "nikolanddtesla-sshmcp": {
      "command": "npx",
      "args": [
        "-y",
        "@nl4ever/sshmcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 67, +4)

- [functional improvement] Stability: unverified → 0.27

### 2026-08-02 (score 63, +58)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Tool coverage: unverified → 63
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Schema quality: unverified → excellent
- [functional] Licence: MIT

### 2026-08-01 (score 5, −14)

- [functional regression] Tool coverage: 63 → unverified
- [functional] First check of Schema quality: unverified

### 2026-07-31 (score 19, −24)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-27 (score 43)

First indexed and scored.

## MCP tools (16)

### `list_servers` (~17 tokens)

列出所有已配置的服务器

### `get_server` (~27 tokens)

查看单台服务器的配置详情

Input parameters:

- `server_id` (string, required): 服务器ID

### `connect` (~26 tokens)

连接到已配置的服务器

Input parameters:

- `server_id` (string, required): 服务器ID

### `quick_connect` (~80 tokens)

临时连接服务器（不保存配置，用完即走）

Input parameters:

- `host` (string, required): IP 地址或域名
- `password` (string): SSH 密码
- `port` (integer): SSH 端口，默认 22
- `private_key` (string): 私钥文件路径
- `username` (string, required): SSH 用户名

### `disconnect` (~13 tokens)

断开当前连接

### `test_connection` (~32 tokens)

测试服务器连通性（不影响当前连接）

Input parameters:

- `server_id` (string, required): 服务器ID

### `execute` (~44 tokens)

在远程服务器执行 shell 命令

Input parameters:

- `command` (string, required): 要执行的命令
- `timeout` (integer): 超时秒数，默认 30

### `write_file` (~46 tokens)

将内容写入远程文件（覆盖写入）

Input parameters:

- `content` (string, required): 要写入的文本内容
- `remote_path` (string, required): 远程文件路径

### `upload_file` (~51 tokens)

上传本地文件到远程服务器（路径直传，不占 Token）

Input parameters:

- `local_path` (string, required): 本地文件绝对路径
- `remote_path` (string, required): 远程目标路径

### `upload_directory` (~59 tokens)

上传本地目录到远程服务器（自动压缩传输再解压，高效传输大量文件）

Input parameters:

- `local_path` (string, required): 本地目录绝对路径
- `remote_path` (string, required): 远程目标路径

### `download_file` (~51 tokens)

从远程服务器下载文件到本地

Input parameters:

- `local_path` (string): 本地保存路径，留空则保存到当前目录
- `remote_path` (string, required): 远程文件路径

### `add_server` (~208 tokens)

添加或更新服务器配置

Input parameters:

- `host` (string, required): IP 地址或域名
- `jump_host` (string): 跳板机服务器ID（ProxyJump）
- `keyboard_interactive` (boolean): 启用键盘交互式认证（OTP/2FA）
- `name` (string, required): 服务器名称
- `passphrase` (string): 私钥密码短语
- `password` (string): SSH 密码
- `port` (integer): SSH 端口，默认 22
- `private_key` (string): 私钥文件路径（文件必须存在）
- `private_key_content` (string): 私钥内容字符串（优先于 private_key）
- `proxy` (string): SOCKS5/4 代理预设ID，留空直连
- `server_id` (string, required): 服务器ID（唯一标识）
- `use_agent` (boolean): 使用系统 ssh-agent
- `username` (string, required): SSH 用户名

### `delete_server` (~23 tokens)

删除服务器配置

Input parameters:

- `server_id` (string, required): 服务器ID

### `list_proxies` (~21 tokens)

列出所有已配置的 SOCKS 代理

### `add_proxy` (~111 tokens)

添加或更新 SOCKS 代理预设

Input parameters:

- `host` (string, required): 代理服务器地址
- `name` (string, required): 代理名称
- `password` (string): 认证密码（可选）
- `port` (integer, required): 代理端口
- `proxy_id` (string, required): 代理ID（唯一标识）
- `type` (string): SOCKS 版本，4 或 5，默认 5
- `username` (string): 认证用户名（可选）

### `delete_proxy` (~24 tokens)

删除代理预设

Input parameters:

- `proxy_id` (string, required): 代理ID

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/nikolanddtesla-sshmcp/nl4ever-sshmcp#diagnostics

## Score history

- 2026-08-03: 67
- 2026-08-02: 63
- 2026-08-01: 5
- 2026-07-31: 19
- 2026-07-30: 43
- 2026-07-28: 43
- 2026-07-27: 43

## Links

- npm package: https://www.npmjs.com/package/@nl4ever/sshmcp
- Socket report: https://socket.dev/npm/package/@nl4ever/sshmcp
- Repository: https://github.com/NikolaNddTesla/ssh-mcp-server
- Changelog RSS feed: https://verifymcp.io/servers/nikolanddtesla-sshmcp/nl4ever-sshmcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/nikolanddtesla-sshmcp/nl4ever-sshmcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/nikolanddtesla-sshmcp/nl4ever-sshmcp