SSH — policy-gated remote access

Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.

Connector by tufantunc · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)★ 820

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/tufantunc-ssh-mcp

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.

Use cases: cloud-management, identity-access

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools: 6 read · 0 write · 8 delete · 1 not yet classified
Secrets: 4 (API keys, tokens or passwords)
Install scripts: None found
Runs as: Node.js package

Tools by what they do 15

Read from the source code; the running server may list different tools.

Read 6 · Look things up without changing anything.

list-connections
list-sessions
read-command
read-session-output
sftp-download
sftp-list

Delete 8 · Delete, drop, revoke or wipe things.

close-session
privileged-command
reload-config
run-command
sftp-download-file
sftp-upload
sftp-upload-file
signal-process

Not yet classified 1 · We could not tell from the name and description.

open-session

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

SSH_MCP_KEY
SSH_MCP_PASSPHRASE
SSH_MCP_PASSWORD
SSH_MCP_SUDO_PASSWORD

Tools (15)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

close-sessioncan change or delete data
Description is built at runtime.
list-connectionsread-only
Description is built at runtime.
list-sessionsread-only
Description is built at runtime.
open-session
privileged-commandcan change or delete data
Description is built at runtime.
read-commandread-only
Description is built at runtime.
read-session-outputread-only
Description is built at runtime.
reload-configcan change or delete data
Description is built at runtime.
run-commandcan change or delete data
Description is built at runtime.
sftp-downloadread-only
Description is built at runtime.
sftp-download-filecan change or delete data
Description is built at runtime.
sftp-listread-only
Description is built at runtime.
sftp-uploadcan change or delete data
Description is built at runtime.
sftp-upload-filecan change or delete data
Description is built at runtime.
signal-processcan change or delete data
Description is built at runtime.

Compare and alternatives

Featured in

Best MCP servers for SSH

Signals

Stars: 820
Forks: 129
Open issues: 2
Last commit: Oct 23, 2026 (5 days ago)
Last release: Oct 26, 2026 (3 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name: io.github.tufantunc/ssh-mcp
Version: 2.22.0
Auth: API key
Packages: npm ssh-mcp
License: MIT
Repository: github.com/tufantunc/ssh-mcp
Website: github.com/tufantunc/ssh-mcp#readme
First seen: Oct 24, 2026
Last checked: Oct 26, 2026
Source: Official MCP Registry github-graphql