bvisible/mcp-ssh-manager

MCP SSH Server: 37 tools for remote SSH management | Claude Code & OpenAI Codex | DevOps automation, backups, database operations, health monitoring

What it solves

It allows AI agents (like Claude Code and OpenAI Codex) to securely manage multiple remote servers via SSH. It bridges the gap between an AI's reasoning capabilities and the actual execution of DevOps tasks, file transfers, and database management on remote infrastructure without requiring the user to manually copy-paste commands.

How it works

The project implements a Model Context Protocol (MCP) server that acts as an intermediary. It provides a set of tools that the AI agent can call to execute shell commands, transfer files using rsync, manage databases, and monitor server health. To ensure security, it implements three distinct access modes per server: unrestricted (full access), readonly (blocks mutating tools and dangerous commands), and restricted (only allows commands matching specific regex patterns).

Who it’s for

It is designed for developers and DevOps engineers who want to automate server management, deployments, and infrastructure monitoring using AI assistants while maintaining strict security controls over what the AI can actually execute.

Highlights

  • Granular Security Modes: Per-server controls (readonly, restricted, unrestricted) to prevent AI-driven accidents or malicious commands.
  • Secure Sudo Handling: Sudo passwords are sent via stdin rather than the command line to prevent them from appearing in process logs.
  • Infrastructure Support: Supports ProxyJump/Bastion hosts, SSH agent forwarding, and Windows OpenSSH.
  • Database Integration: Includes specialized tools for database queries with enforced read-only SQL for certain modes.
  • Comprehensive Toolset: Provides 37 tools for tasks ranging from health checks and backups to file synchronization and process management.

Related

  • Project
  • Project
  • Project
  • Project
  • Project