ssh-mcp-pro
NPM · SSH-MCP-PRO · SCANNED AUG 3
Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security79
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects @opentelemetry/propagator-jaeger 2.8.0, reached via @opentelemetry/sdk-node > @opentelemetry/propagator-jaeger. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (178 of 183), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 35 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability79
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 2528 tokens (~47/item across 53 items; 46 tools + 7 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management23
- Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · ssh-mcp-pro
claude mcp add oaslananka-ssh-mcp-pro -- npx -y ssh-mcp-pro
codex mcp add oaslananka-ssh-mcp-pro -- npx -y ssh-mcp-pro
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"oaslananka-ssh-mcp-pro": {
"type": "local",
"command": [
"npx",
"-y",
"ssh-mcp-pro"
],
"enabled": true
}
}
} openclaw mcp add oaslananka-ssh-mcp-pro --command npx --arg -y --arg ssh-mcp-pro
mcp_servers:
oaslananka-ssh-mcp-pro:
command: "npx"
args: ["-y", "ssh-mcp-pro"] {
"mcpServers": {
"oaslananka-ssh-mcp-pro": {
"command": "npx",
"args": [
"-y",
"ssh-mcp-pro"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 +3
- Stability: unverified → 0.23 ▲ functional
- 2 Aug 26 +33
- CVE-2026-59892 affects this package: high ▼ security
- Provenance: unverified → fail ▼ security
- Known CVEs: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Schema quality: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: unverified → good ▲ functional
- Maintenance: unverified → pass ▲ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Licence: MIT functional
- 1 Aug 26 +5
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- MCP protocol: unverified → pass ▲ functional
- 31 Jul 26 +2
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 −2
- Dependency health: partial → unverified ▼ functional
- 28 Jul 26 +2
- Dependency health: unverified → partial ▲ functional
- 27 Jul 26 24
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/[email protected]
Provenance none
Ecosystem: npm · Outcome: none
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-45rx-2jwx-cxfr | CVE-2026-59892 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Dependencies 178 packages
178 packages in the resolved dependency tree · 174 deprecated · 46 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
connector_status Connector Status ~34
Use this when ChatGPT or Claude needs to understand the remote connector profile, authentication mode, and credential broker readiness without exposing secrets.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| allowedOriginsConfigured | boolean | yes | — |
| authMode | string | yes | — |
| credentialBrokerConfigured | boolean | yes | — |
| credentialEntryInChat | boolean | yes | — |
| credentialProvider | string | yes | — |
| destructiveExecutionDefault | boolean | yes | — |
| hostAllowlistConfigured | boolean | yes | — |
| httpSessionIdleTtlMs | number | yes | — |
| maxHttpSessions | number | yes | — |
| nonLoopbackHttpRequiresAuthAndOrigins | boolean | yes | — |
| oauthConfigured | boolean | yes | — |
| privateKeysInChat | boolean | yes | — |
| publicUrlConfigured | boolean | yes | — |
| rawCommandExecutionDefault | boolean | yes | — |
| rawSudoExecutionDefault | boolean | yes | — |
| safeRemoteToolsOnly | boolean | yes | — |
| toolProfile | string | yes | — |
No examples provided.
cpu_usage CPU Usage ~30
Reports CPU load average and uptime on the remote system
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
disk_usage Disk Usage ~47
Reports disk usage for filesystems on the remote system
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | — | Optional path to check (default: all filesystems) |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
ensure_lines_in_file Ensure Lines In File ~77
Ensures specific lines are present or absent in a file
| Name | Type | Req | Description |
|---|---|---|---|
| createIfMissing | boolean | — | Create file if it does not exist |
| lines | array | yes | Lines to manage |
| path | string | yes | File path |
| sessionId | string | yes | SSH session ID |
| state | string | — | Desired state |
| Name | Type | Req | Description |
|---|---|---|---|
| added | number | yes | — |
| ok | boolean | yes | — |
No examples provided.
ensure_package Ensure Package State ~46
Ensures a package is installed or removed
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Package name |
| sessionId | string | yes | SSH session ID |
| state | string | — | Desired state |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| ok | boolean | yes | — |
| pm | string | yes | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
ensure_service Ensure Service State ~47
Ensures a service is in the desired state
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Service name |
| sessionId | string | yes | SSH session ID |
| state | string | yes | Desired state |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | — |
No examples provided.
file_download Download File ~53
Downloads a remote file to the local machine over SFTP
| Name | Type | Req | Description |
|---|---|---|---|
| localPath | string | yes | Local file path |
| remotePath | string | yes | Remote file path |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| averageSpeed | number | yes | — |
| durationMs | number | yes | — |
| filename | string | yes | — |
| sha256 | string | yes | — |
| size | number | yes | — |
| success | boolean | yes | — |
| verified | boolean | yes | — |
No examples provided.
file_upload Upload File ~54
Uploads a local file to the remote host over SFTP
| Name | Type | Req | Description |
|---|---|---|---|
| localPath | string | yes | Local file path |
| remotePath | string | yes | Remote file path |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| averageSpeed | number | yes | — |
| durationMs | number | yes | — |
| filename | string | yes | — |
| sha256 | string | yes | — |
| size | number | yes | — |
| success | boolean | yes | — |
| verified | boolean | yes | — |
No examples provided.
fs_list List Remote Directory ~61
Lists directory contents
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | — | Maximum items per page (default: 100) |
| page | number | — | Page number for pagination |
| path | string | yes | Directory path to list |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| entries | array | yes | — |
| nextToken | string | — | — |
No examples provided.
fs_mkdirp Create Remote Directories ~36
Creates directories recursively
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Directory path to create |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | — |
No examples provided.
fs_read Read Remote File ~68
Reads a file from the remote system
| Name | Type | Req | Description |
|---|---|---|---|
| encoding | string | — | File encoding (default: utf8) |
| maxBytes | number | — | Optional per-request read size limit in bytes |
| path | string | yes | File path to read |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | — |
No examples provided.
fs_rename Rename Remote Path ~47
Renames or moves a file/directory
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | yes | Source path |
| sessionId | string | yes | SSH session ID |
| to | string | yes | Destination path |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | — |
No examples provided.
fs_rmrf Remove Remote Path Recursively ~36
Removes files or directories recursively
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Path to remove |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | — |
No examples provided.
fs_stat Stat Remote Path ~35
Gets file or directory statistics
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Path to stat |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| mode | number | yes | — |
| mtime | string | yes | — |
| size | number | yes | — |
| type | string | yes | — |
No examples provided.
fs_write Write Remote File ~62
Writes data to a file on the remote system
| Name | Type | Req | Description |
|---|---|---|---|
| data | string | yes | Data to write to file |
| mode | number | — | File permissions mode |
| path | string | yes | File path to write |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | — |
No examples provided.
get_metrics Get Runtime Metrics ~34
Returns server metrics including session counts, command statistics, and uptime
| Name | Type | Req | Description |
|---|---|---|---|
| format | string | — | Output format (default: json) |
Structured output declared, but exposes no named fields.
No examples provided.
log_tail Tail Log ~80
Tails the end of a log file or reads recent journal entries for a service
| Name | Type | Req | Description |
|---|---|---|---|
| lines | number | — | Number of lines to return (default: 50) |
| path | string | — | Absolute path to a log file |
| service | string | — | Systemd service name for journal logs |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
memory_info Memory Info ~27
Reports memory usage on the remote system
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
net_interfaces Network Interfaces ~31
Lists network interfaces and their IP addresses on the remote system
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
os_detect Detect Remote OS ~27
Detects operating system and environment information
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| arch | string | yes | — |
| defaultShell | string | — | — |
| distro | string | yes | — |
| init | string | yes | — |
| packageManager | string | yes | — |
| platform | string | yes | — |
| shell | string | yes | — |
| tempDir | string | — | — |
| version | string | yes | — |
No examples provided.
patch_apply Apply Patch ~51
Applies a patch to a file
| Name | Type | Req | Description |
|---|---|---|---|
| diff | string | yes | Patch content (unified diff format) |
| path | string | yes | File path to patch |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| changed | boolean | yes | — |
| ok | boolean | yes | — |
No examples provided.
port_check Port Check ~66
Checks which processes are listening on a specific port
| Name | Type | Req | Description |
|---|---|---|---|
| host | string | — | Host to check (default: 127.0.0.1) |
| port | number | yes | Port number to check (1-65535) |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
proc_exec Execute Remote Command ~76
Executes a non-interactive command on the remote system after policy and safety checks
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | Command to execute |
| cwd | string | — | Working directory |
| env | object | — | Environment variables |
| sessionId | string | yes | SSH session ID |
| timeoutMs | number | — | Command execution timeout in milliseconds |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
proc_exec_stream Execute Streaming Command ~70
Executes a command and returns streaming output chunks
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | Command to execute |
| cwd | string | — | Working directory |
| env | object | — | Environment variables |
| sessionId | string | yes | SSH session ID |
| timeoutMs | number | — | Streaming command timeout in milliseconds |
| Name | Type | Req | Description |
|---|---|---|---|
| chunks | array | yes | — |
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
| truncated | boolean | yes | — |
No examples provided.
proc_kill Signal Process ~56
Sends a signal to a running process by PID
| Name | Type | Req | Description |
|---|---|---|---|
| pid | number | yes | Process ID to signal |
| sessionId | string | yes | SSH session ID |
| signal | string | — | Signal to send (default: SIGTERM) |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
proc_list List Processes ~31
Lists running processes on the remote system sorted by CPU usage
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
proc_sudo Execute Sudo Command ~70
Executes a command with sudo privileges only when allowRawSudo policy permits it
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | Command to execute with sudo |
| cwd | string | — | Working directory |
| sessionId | string | yes | SSH session ID |
| timeoutMs | number | — | Command execution timeout in milliseconds |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
service_list List Services ~29
Lists all systemd services and their current state
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
service_logs Service Logs ~56
Reads recent journal logs for a systemd service
| Name | Type | Req | Description |
|---|---|---|---|
| lines | number | — | Number of log lines to return (default: 50) |
| name | string | yes | Service name |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
service_restart Restart Service ~35
Restarts a systemd service
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Service name |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
service_status Service Status ~45
Gets the status of a systemd service
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Service name (e.g. nginx or nginx.service) |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
service_stop Stop Service ~34
Stops a systemd service
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Service name |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | — |
| durationMs | number | yes | — |
| safetyWarning | string | — | — |
| stderr | string | yes | — |
| stdout | string | yes | — |
No examples provided.
ssh_close_session Close SSH Session ~27
Closes an SSH session
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | Session ID to close |
| Name | Type | Req | Description |
|---|---|---|---|
| closed | boolean | yes | — |
No examples provided.
ssh_host_inspect Inspect SSH Host ~75
Use this when ChatGPT or Claude needs read-only host inspection through the server-side credential broker. The user supplies only a configured host alias and selected checks; no secret material or login details are accepted.
| Name | Type | Req | Description |
|---|---|---|---|
| checks | array | — | Read-only checks to run |
| hostAlias | string | yes | Configured SSH host alias |
| Name | Type | Req | Description |
|---|---|---|---|
| checks | array | yes | — |
| credentialsFromChat | boolean | yes | — |
| host | string | yes | — |
| hostAlias | string | yes | — |
| inspection | object | yes | — |
| strictHostKeyVerification | boolean | yes | — |
No examples provided.
ssh_hosts_list List Safe SSH Host Aliases ~39
Use this when ChatGPT or Claude needs a safe list of SSH host aliases that may be inspected through the remote connector. Sensitive login material is omitted.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | — |
| hostAllowlistConfigured | boolean | yes | — |
| hostAllowlistRequired | boolean | yes | — |
| hosts | array | yes | — |
| redactedFields | array | yes | — |
No examples provided.
ssh_list_configured_hosts List Configured Hosts ~20
Lists all hosts configured in ~/.ssh/config
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | — |
| hosts | array | yes | — |
No examples provided.
ssh_list_sessions List SSH Sessions ~18
Lists all active SSH sessions with their details
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | — |
| sessions | array | yes | — |
No examples provided.
ssh_mutation_plan Plan SSH Mutation ~88
Use this when ChatGPT or Claude needs a non-executing plan for a remote SSH change. It never runs commands, writes files, uploads data, starts tunnels, or escalates privileges.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | — | Change category used for policy explanation |
| goal | string | yes | Desired change to plan without executing |
| hostAlias | string | yes | Configured SSH host alias |
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | yes | — |
| disallowedInRemoteConnectorProfile | array | yes | — |
| executed | boolean | yes | — |
| goal | string | yes | — |
| hostAlias | string | yes | — |
| policyDecision | object | yes | — |
| requiredBeforeExecution | array | yes | — |
No examples provided.
ssh_open_session Open SSH Session ~259
Opens a new SSH session with authentication
| Name | Type | Req | Description |
|---|---|---|---|
| auth | string | — | Authentication method (default: auto) |
| expectedHostKeySha256 | string | — | Pinned SHA-256 host key fingerprint, with or without SHA256: prefix |
| host | string | yes | SSH server hostname or IP |
| hostKeyPolicy | string | — | SSH host key verification policy (default: strict) |
| knownHostsPath | string | — | Path to known_hosts file |
| passphrase | string | — | Passphrase for encrypted private key |
| password | string | — | Password for authentication |
| policyMode | string | — | Use explain to return the planned connection without opening SSH |
| port | number | — | SSH port (default: 22) |
| privateKey | string | — | Inline private key content |
| privateKeyPath | string | — | Path to private key file |
| readyTimeoutMs | number | — | Connection timeout in milliseconds (default: 20000) |
| strictHostKeyChecking | boolean | — | Deprecated alias. Prefer hostKeyPolicy. |
| ttlMs | number | — | Session TTL in milliseconds (default: 900000) |
| useAgent | boolean | — | Use SSH agent for authentication |
| username | string | yes | SSH username |
| Name | Type | Req | Description |
|---|---|---|---|
| expiresInMs | number | yes | — |
| host | string | yes | — |
| hostKeyPolicy | string | yes | — |
| policyMode | string | yes | — |
| sessionId | string | yes | — |
| sftpAvailable | boolean | yes | — |
| username | string | yes | — |
| wouldConnect | boolean | — | — |
No examples provided.
ssh_ping Ping SSH Session ~32
Checks if an SSH session is still alive and responsive
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | SSH session ID to check |
| Name | Type | Req | Description |
|---|---|---|---|
| alive | boolean | yes | — |
| error | string | — | — |
| host | string | — | — |
| latencyMs | number | — | — |
| remainingMs | number | — | — |
| sessionId | string | — | — |
No examples provided.
ssh_policy_explain Explain SSH Policy ~101
Use this when ChatGPT or Claude needs to explain whether a requested SSH inspection or mutation would be allowed. This is explain-only and does not execute commands or open tunnels.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | — | Requested action class to evaluate without executing it |
| command | string | — | Optional command to evaluate in explain mode |
| hostAlias | string | — | Configured SSH host alias |
| path | string | — | Optional remote path to evaluate in explain mode |
| Name | Type | Req | Description |
|---|---|---|---|
| decision | object | yes | — |
| executed | boolean | yes | — |
| requiresExplicitUserConfirmation | boolean | yes | — |
| toolProfile | string | yes | — |
No examples provided.
ssh_resolve_host Resolve SSH Host ~36
Resolves a host alias from ~/.ssh/config to connection parameters
| Name | Type | Req | Description |
|---|---|---|---|
| hostAlias | string | yes | Host alias from SSH config |
| Name | Type | Req | Description |
|---|---|---|---|
| host | string | yes | — |
| port | number | — | — |
| privateKeyPath | string | — | — |
| proxyJump | string | — | — |
| username | string | — | — |
No examples provided.
tunnel_close Close SSH Tunnel ~24
Closes an active tunnel
| Name | Type | Req | Description |
|---|---|---|---|
| tunnelId | string | yes | Tunnel identifier |
| Name | Type | Req | Description |
|---|---|---|---|
| closed | boolean | yes | — |
No examples provided.
tunnel_list List SSH Tunnels ~30
Lists active tunnels, optionally filtered by session
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | — | Optional SSH session ID filter |
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | — |
| tunnels | array | yes | — |
No examples provided.
tunnel_local_forward Create Local SSH Tunnel ~59
Creates a local SSH port forward
| Name | Type | Req | Description |
|---|---|---|---|
| localPort | number | yes | Local TCP port |
| remoteHost | string | yes | Remote host |
| remotePort | number | yes | Remote TCP port |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| active | boolean | yes | — |
| createdAt | number | yes | — |
| id | string | yes | — |
| localHost | string | yes | — |
| localPort | number | yes | — |
| remoteHost | string | yes | — |
| remotePort | number | yes | — |
| sessionId | string | yes | — |
| type | string | yes | — |
No examples provided.
tunnel_remote_forward Create Remote SSH Tunnel ~59
Creates a remote SSH port forward
| Name | Type | Req | Description |
|---|---|---|---|
| localHost | string | yes | Local host |
| localPort | number | yes | Local TCP port |
| remotePort | number | yes | Remote TCP port |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| active | boolean | yes | — |
| createdAt | number | yes | — |
| id | string | yes | — |
| localHost | string | yes | — |
| localPort | number | yes | — |
| remoteHost | string | yes | — |
| remotePort | number | yes | — |
| sessionId | string | yes | — |
| type | string | yes | — |
No examples provided.