ssh-mcp-pro
NPM · SSH-MCP-PRO · SCANNED SEP 20
Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security90
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects @opentelemetry/propagator-jaeger 2.8.0, reached via @opentelemetry/sdk-node > @opentelemetry/propagator-jaeger. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 48 of 180 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 83 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability79
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 2528 tokens (~47/item across 53 items; 46 tools + 7 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management90
- Stability observed for 27 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 5 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 47 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the ssh-mcp-pro server?
ssh-mcp-pro runs locally as an npm package, launched with npx -y ssh-mcp-pro. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · ssh-mcp-pro
claude mcp add oaslananka-ssh-mcp-pro -- npx -y ssh-mcp-pro
{
"mcpServers": {
"oaslananka-ssh-mcp-pro": {
"command": "npx",
"args": [
"-y",
"ssh-mcp-pro"
]
}
}
} {
"servers": {
"oaslananka-ssh-mcp-pro": {
"command": "npx",
"args": [
"-y",
"ssh-mcp-pro"
]
}
}
} codex mcp add oaslananka-ssh-mcp-pro -- npx -y ssh-mcp-pro
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"oaslananka-ssh-mcp-pro": {
"type": "local",
"command": [
"npx",
"-y",
"ssh-mcp-pro"
],
"enabled": true
}
}
} openclaw mcp add oaslananka-ssh-mcp-pro --command npx --arg -y --arg ssh-mcp-pro
mcp_servers:
oaslananka-ssh-mcp-pro:
command: "npx"
args: ["-y", "ssh-mcp-pro"] {
"McpServers": {
"oaslananka-ssh-mcp-pro": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"ssh-mcp-pro"
]
}
}
} assistant mcp add oaslananka-ssh-mcp-pro -t stdio -c npx -a -y ssh-mcp-pro
{
"mcpServers": {
"oaslananka-ssh-mcp-pro": {
"command": "npx",
"args": [
"-y",
"ssh-mcp-pro"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 −3
- Stability: pass → 0.80 functional
- 16 Sept 26 +1
- Stability: 0.97 → pass security
- 14 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 9 Sept 26 −3
- Stability: pass → 0.77 functional
- 8 Sept 26 +1
- Stability: 0.97 → pass security
- 6 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/ssh-mcp-pro@1.1.5
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-45rx-2jwx-cxfr | CVE-2026-59892 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 180 packages
| Packages resolved | 180 |
|---|---|
| Stale | 48 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
connector_status Connector Status ~34
Use this when ChatGPT or Claude needs to understand the remote connector profile, authentication mode, and credential broker readiness without exposing secrets.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| allowedOriginsConfigured | boolean | yes | – |
| authMode | string | yes | – |
| credentialBrokerConfigured | boolean | yes | – |
| credentialEntryInChat | boolean | yes | – |
| credentialProvider | string | yes | – |
| destructiveExecutionDefault | boolean | yes | – |
| hostAllowlistConfigured | boolean | yes | – |
| httpSessionIdleTtlMs | number | yes | – |
| maxHttpSessions | number | yes | – |
| nonLoopbackHttpRequiresAuthAndOrigins | boolean | yes | – |
| oauthConfigured | boolean | yes | – |
| privateKeysInChat | boolean | yes | – |
| publicUrlConfigured | boolean | yes | – |
| rawCommandExecutionDefault | boolean | yes | – |
| rawSudoExecutionDefault | boolean | yes | – |
| safeRemoteToolsOnly | boolean | yes | – |
| toolProfile | string | yes | – |
No examples provided.
cpu_usage CPU Usage ~30
Reports CPU load average and uptime on the remote system
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
disk_usage Disk Usage ~47
Reports disk usage for filesystems on the remote system
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | – | Optional path to check (default: all filesystems) |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
ensure_lines_in_file Ensure Lines In File ~77
Ensures specific lines are present or absent in a file
| Name | Type | Req | Description |
|---|---|---|---|
| createIfMissing | boolean | – | Create file if it does not exist |
| lines | array | yes | Lines to manage |
| path | string | yes | File path |
| sessionId | string | yes | SSH session ID |
| state | string | – | Desired state |
| Name | Type | Req | Description |
|---|---|---|---|
| added | number | yes | – |
| ok | boolean | yes | – |
No examples provided.
ensure_package Ensure Package State ~46
Ensures a package is installed or removed
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Package name |
| sessionId | string | yes | SSH session ID |
| state | string | – | Desired state |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| ok | boolean | yes | – |
| pm | string | yes | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
ensure_service Ensure Service State ~47
Ensures a service is in the desired state
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Service name |
| sessionId | string | yes | SSH session ID |
| state | string | yes | Desired state |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | – |
No examples provided.
file_download Download File ~53
Downloads a remote file to the local machine over SFTP
| Name | Type | Req | Description |
|---|---|---|---|
| localPath | string | yes | Local file path |
| remotePath | string | yes | Remote file path |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| averageSpeed | number | yes | – |
| durationMs | number | yes | – |
| filename | string | yes | – |
| sha256 | string | yes | – |
| size | number | yes | – |
| success | boolean | yes | – |
| verified | boolean | yes | – |
No examples provided.
file_upload Upload File ~54
Uploads a local file to the remote host over SFTP
| Name | Type | Req | Description |
|---|---|---|---|
| localPath | string | yes | Local file path |
| remotePath | string | yes | Remote file path |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| averageSpeed | number | yes | – |
| durationMs | number | yes | – |
| filename | string | yes | – |
| sha256 | string | yes | – |
| size | number | yes | – |
| success | boolean | yes | – |
| verified | boolean | yes | – |
No examples provided.
fs_list List Remote Directory ~61
Lists directory contents
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Maximum items per page (default: 100) |
| page | number | – | Page number for pagination |
| path | string | yes | Directory path to list |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| entries | array | yes | – |
| nextToken | string | – | – |
No examples provided.
fs_mkdirp Create Remote Directories ~36
Creates directories recursively
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Directory path to create |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | – |
No examples provided.
fs_read Read Remote File ~68
Reads a file from the remote system
| Name | Type | Req | Description |
|---|---|---|---|
| encoding | string | – | File encoding (default: utf8) |
| maxBytes | number | – | Optional per-request read size limit in bytes |
| path | string | yes | File path to read |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | – |
No examples provided.
fs_rename Rename Remote Path ~47
Renames or moves a file/directory
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | yes | Source path |
| sessionId | string | yes | SSH session ID |
| to | string | yes | Destination path |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | – |
No examples provided.
fs_rmrf Remove Remote Path Recursively ~36
Removes files or directories recursively
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Path to remove |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | – |
No examples provided.
fs_stat Stat Remote Path ~35
Gets file or directory statistics
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Path to stat |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| mode | number | yes | – |
| mtime | string | yes | – |
| size | number | yes | – |
| type | string | yes | – |
No examples provided.
fs_write Write Remote File ~62
Writes data to a file on the remote system
| Name | Type | Req | Description |
|---|---|---|---|
| data | string | yes | Data to write to file |
| mode | number | – | File permissions mode |
| path | string | yes | File path to write |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | – |
No examples provided.
get_metrics Get Runtime Metrics ~34
Returns server metrics including session counts, command statistics, and uptime
| Name | Type | Req | Description |
|---|---|---|---|
| format | string | – | Output format (default: json) |
Structured output declared, but exposes no named fields.
No examples provided.
log_tail Tail Log ~80
Tails the end of a log file or reads recent journal entries for a service
| Name | Type | Req | Description |
|---|---|---|---|
| lines | number | – | Number of lines to return (default: 50) |
| path | string | – | Absolute path to a log file |
| service | string | – | Systemd service name for journal logs |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
memory_info Memory Info ~27
Reports memory usage on the remote system
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
net_interfaces Network Interfaces ~31
Lists network interfaces and their IP addresses on the remote system
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
os_detect Detect Remote OS ~27
Detects operating system and environment information
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| arch | string | yes | – |
| defaultShell | string | – | – |
| distro | string | yes | – |
| init | string | yes | – |
| packageManager | string | yes | – |
| platform | string | yes | – |
| shell | string | yes | – |
| tempDir | string | – | – |
| version | string | yes | – |
No examples provided.
patch_apply Apply Patch ~51
Applies a patch to a file
| Name | Type | Req | Description |
|---|---|---|---|
| diff | string | yes | Patch content (unified diff format) |
| path | string | yes | File path to patch |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| changed | boolean | yes | – |
| ok | boolean | yes | – |
No examples provided.
port_check Port Check ~66
Checks which processes are listening on a specific port
| Name | Type | Req | Description |
|---|---|---|---|
| host | string | – | Host to check (default: 127.0.0.1) |
| port | number | yes | Port number to check (1-65535) |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
proc_exec Execute Remote Command ~76
Executes a non-interactive command on the remote system after policy and safety checks
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | Command to execute |
| cwd | string | – | Working directory |
| env | object | – | Environment variables |
| sessionId | string | yes | SSH session ID |
| timeoutMs | number | – | Command execution timeout in milliseconds |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
proc_exec_stream Execute Streaming Command ~70
Executes a command and returns streaming output chunks
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | Command to execute |
| cwd | string | – | Working directory |
| env | object | – | Environment variables |
| sessionId | string | yes | SSH session ID |
| timeoutMs | number | – | Streaming command timeout in milliseconds |
| Name | Type | Req | Description |
|---|---|---|---|
| chunks | array | yes | – |
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
| truncated | boolean | yes | – |
No examples provided.
proc_kill Signal Process ~56
Sends a signal to a running process by PID
| Name | Type | Req | Description |
|---|---|---|---|
| pid | number | yes | Process ID to signal |
| sessionId | string | yes | SSH session ID |
| signal | string | – | Signal to send (default: SIGTERM) |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
proc_list List Processes ~31
Lists running processes on the remote system sorted by CPU usage
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
proc_sudo Execute Sudo Command ~70
Executes a command with sudo privileges only when allowRawSudo policy permits it
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | Command to execute with sudo |
| cwd | string | – | Working directory |
| sessionId | string | yes | SSH session ID |
| timeoutMs | number | – | Command execution timeout in milliseconds |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
service_list List Services ~29
Lists all systemd services and their current state
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
service_logs Service Logs ~56
Reads recent journal logs for a systemd service
| Name | Type | Req | Description |
|---|---|---|---|
| lines | number | – | Number of log lines to return (default: 50) |
| name | string | yes | Service name |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
service_restart Restart Service ~35
Restarts a systemd service
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Service name |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
service_status Service Status ~45
Gets the status of a systemd service
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Service name (e.g. nginx or nginx.service) |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
service_stop Stop Service ~34
Stops a systemd service
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Service name |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| code | number | yes | – |
| durationMs | number | yes | – |
| safetyWarning | string | – | – |
| stderr | string | yes | – |
| stdout | string | yes | – |
No examples provided.
ssh_close_session Close SSH Session ~27
Closes an SSH session
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | Session ID to close |
| Name | Type | Req | Description |
|---|---|---|---|
| closed | boolean | yes | – |
No examples provided.
ssh_host_inspect Inspect SSH Host ~75
Use this when ChatGPT or Claude needs read-only host inspection through the server-side credential broker. The user supplies only a configured host alias and selected checks; no secret material or login details are accepted.
| Name | Type | Req | Description |
|---|---|---|---|
| checks | array | – | Read-only checks to run |
| hostAlias | string | yes | Configured SSH host alias |
| Name | Type | Req | Description |
|---|---|---|---|
| checks | array | yes | – |
| credentialsFromChat | boolean | yes | – |
| host | string | yes | – |
| hostAlias | string | yes | – |
| inspection | object | yes | – |
| strictHostKeyVerification | boolean | yes | – |
No examples provided.
ssh_hosts_list List Safe SSH Host Aliases ~39
Use this when ChatGPT or Claude needs a safe list of SSH host aliases that may be inspected through the remote connector. Sensitive login material is omitted.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | – |
| hostAllowlistConfigured | boolean | yes | – |
| hostAllowlistRequired | boolean | yes | – |
| hosts | array | yes | – |
| redactedFields | array | yes | – |
No examples provided.
ssh_list_configured_hosts List Configured Hosts ~20
Lists all hosts configured in ~/.ssh/config
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | – |
| hosts | array | yes | – |
No examples provided.
ssh_list_sessions List SSH Sessions ~18
Lists all active SSH sessions with their details
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | – |
| sessions | array | yes | – |
No examples provided.
ssh_mutation_plan Plan SSH Mutation ~88
Use this when ChatGPT or Claude needs a non-executing plan for a remote SSH change. It never runs commands, writes files, uploads data, starts tunnels, or escalates privileges.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Change category used for policy explanation |
| goal | string | yes | Desired change to plan without executing |
| hostAlias | string | yes | Configured SSH host alias |
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | yes | – |
| disallowedInRemoteConnectorProfile | array | yes | – |
| executed | boolean | yes | – |
| goal | string | yes | – |
| hostAlias | string | yes | – |
| policyDecision | object | yes | – |
| requiredBeforeExecution | array | yes | – |
No examples provided.
ssh_open_session Open SSH Session ~259
Opens a new SSH session with authentication
| Name | Type | Req | Description |
|---|---|---|---|
| auth | string | – | Authentication method (default: auto) |
| expectedHostKeySha256 | string | – | Pinned SHA-256 host key fingerprint, with or without SHA256: prefix |
| host | string | yes | SSH server hostname or IP |
| hostKeyPolicy | string | – | SSH host key verification policy (default: strict) |
| knownHostsPath | string | – | Path to known_hosts file |
| passphrase | string | – | Passphrase for encrypted private key |
| password | string | – | Password for authentication |
| policyMode | string | – | Use explain to return the planned connection without opening SSH |
| port | number | – | SSH port (default: 22) |
| privateKey | string | – | Inline private key content |
| privateKeyPath | string | – | Path to private key file |
| readyTimeoutMs | number | – | Connection timeout in milliseconds (default: 20000) |
| strictHostKeyChecking | boolean | – | Deprecated alias. Prefer hostKeyPolicy. |
| ttlMs | number | – | Session TTL in milliseconds (default: 900000) |
| useAgent | boolean | – | Use SSH agent for authentication |
| username | string | yes | SSH username |
| Name | Type | Req | Description |
|---|---|---|---|
| expiresInMs | number | yes | – |
| host | string | yes | – |
| hostKeyPolicy | string | yes | – |
| policyMode | string | yes | – |
| sessionId | string | yes | – |
| sftpAvailable | boolean | yes | – |
| username | string | yes | – |
| wouldConnect | boolean | – | – |
No examples provided.
ssh_ping Ping SSH Session ~32
Checks if an SSH session is still alive and responsive
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | yes | SSH session ID to check |
| Name | Type | Req | Description |
|---|---|---|---|
| alive | boolean | yes | – |
| error | string | – | – |
| host | string | – | – |
| latencyMs | number | – | – |
| remainingMs | number | – | – |
| sessionId | string | – | – |
No examples provided.
ssh_policy_explain Explain SSH Policy ~101
Use this when ChatGPT or Claude needs to explain whether a requested SSH inspection or mutation would be allowed. This is explain-only and does not execute commands or open tunnels.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | – | Requested action class to evaluate without executing it |
| command | string | – | Optional command to evaluate in explain mode |
| hostAlias | string | – | Configured SSH host alias |
| path | string | – | Optional remote path to evaluate in explain mode |
| Name | Type | Req | Description |
|---|---|---|---|
| decision | object | yes | – |
| executed | boolean | yes | – |
| requiresExplicitUserConfirmation | boolean | yes | – |
| toolProfile | string | yes | – |
No examples provided.
ssh_resolve_host Resolve SSH Host ~36
Resolves a host alias from ~/.ssh/config to connection parameters
| Name | Type | Req | Description |
|---|---|---|---|
| hostAlias | string | yes | Host alias from SSH config |
| Name | Type | Req | Description |
|---|---|---|---|
| host | string | yes | – |
| port | number | – | – |
| privateKeyPath | string | – | – |
| proxyJump | string | – | – |
| username | string | – | – |
No examples provided.
tunnel_close Close SSH Tunnel ~24
Closes an active tunnel
| Name | Type | Req | Description |
|---|---|---|---|
| tunnelId | string | yes | Tunnel identifier |
| Name | Type | Req | Description |
|---|---|---|---|
| closed | boolean | yes | – |
No examples provided.
tunnel_list List SSH Tunnels ~30
Lists active tunnels, optionally filtered by session
| Name | Type | Req | Description |
|---|---|---|---|
| sessionId | string | – | Optional SSH session ID filter |
| Name | Type | Req | Description |
|---|---|---|---|
| count | number | yes | – |
| tunnels | array | yes | – |
No examples provided.
tunnel_local_forward Create Local SSH Tunnel ~59
Creates a local SSH port forward
| Name | Type | Req | Description |
|---|---|---|---|
| localPort | number | yes | Local TCP port |
| remoteHost | string | yes | Remote host |
| remotePort | number | yes | Remote TCP port |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| active | boolean | yes | – |
| createdAt | number | yes | – |
| id | string | yes | – |
| localHost | string | yes | – |
| localPort | number | yes | – |
| remoteHost | string | yes | – |
| remotePort | number | yes | – |
| sessionId | string | yes | – |
| type | string | yes | – |
No examples provided.
tunnel_remote_forward Create Remote SSH Tunnel ~59
Creates a remote SSH port forward
| Name | Type | Req | Description |
|---|---|---|---|
| localHost | string | yes | Local host |
| localPort | number | yes | Local TCP port |
| remotePort | number | yes | Remote TCP port |
| sessionId | string | yes | SSH session ID |
| Name | Type | Req | Description |
|---|---|---|---|
| active | boolean | yes | – |
| createdAt | number | yes | – |
| id | string | yes | – |
| localHost | string | yes | – |
| localPort | number | yes | – |
| remoteHost | string | yes | – |
| remotePort | number | yes | – |
| sessionId | string | yes | – |
| type | string | yes | – |
No examples provided.
What is the ssh-mcp-pro server?
ssh-mcp-pro is listed in the public MCP registry as io.github.oaslananka/ssh-mcp-pro. Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP. This page covers its npm package (ssh-mcp-pro).
Is the ssh-mcp-pro server safe to use?
ssh-mcp-pro scores 81 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the ssh-mcp-pro server expose?
ssh-mcp-pro exposes 46 tools: connector_status, ssh_hosts_list, ssh_policy_explain, ssh_host_inspect, ssh_mutation_plan, and 41 more. Their descriptions and schemas cost roughly 2,418 tokens of context every time the server is loaded.
Is the ssh-mcp-pro server still maintained?
ssh-mcp-pro is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the ssh-mcp-pro server under?
ssh-mcp-pro declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.