Mmcp.market

SSH Manager MCP server

by bvisible·io.github.bvisible/mcp-ssh-manager·v3.8.5
No reviews yet

SSH server management for agents, with per-server read-only and allowlist security modes

B74/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B74/100

full report

Adoption
Established

484 stars617 downloads/wk

Reviews

Write one

Nobody has reviewed SSH Manager yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

SSH Manager tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-21 · same rubric, same numbers if you re-run it

1 high
  • Code scan46 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 8 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • highShell command built from a string (injection risk)exec.shell-concat
    src/ssh-key-manager.js: …/ Use ssh-keygen to remove the host execSync(`ssh-keygen -R "${hostEntry}"`, { stdio: 'ignore' }); …
Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the SSH Manager repository's README, as published. We do not edit it. Read it on GitHub

MCP SSH Manager - SSH Remote Server Management via Model Context Protocol 🚀

A Model Context Protocol (MCP) server that enables Claude Code and OpenAI Codex to manage multiple SSH connections. Execute commands, transfer files, manage databases, create backups, monitor health, and automate DevOps tasks across your servers — directly from your AI assistant.

🎉 What's New in v3.8.5

🔒 Security release — three command-injection advisories fixed, one of which defeated readonly mode (Released: August 28, 2026)

Upgrade if you use sshbackup, sshdbdump, sshservicestatus or sshtail — and especially if you rely on the readonly / restricted security modes.**

  • 🔴 RCE bypassing readonly / restricted (GHSA-m793-whw6-f537) — sshservicestatus and ssh_tail are read-only, so they stay enabled on servers you locked down, and neither quoted its arguments nor consulted the policy layer. A service name like nginx; id > /tmp/pwned executed. This defeated the exact control those modes exist to provide.
  • 🔴 RCE through sshdbdump (GHSA-796j-h5q5-jx6p) — the stat command run after the dump interpolated the output path raw. The v3.6.7 patch had stopped one line short.
  • 🟠 RCE through every sshbackup tool (GHSA-qwwm-vrm9-4mw8) — backup-manager.js had zero shell escaping across its 9 builders, while database-manager.js had 95. The v3.6.7 fix was never extended to it.

The quoting helper now lives in one module (src/shell-quote.js) so "did this builder quote its inputs?" has a single answer, and a new test drives 340 builder × argument × payload combinations through a real shell to prove none of them execute.

Read full changelog →

🔐 Giving an agent SSH access, safely

An MCP SSH server is the most dangerous tool you can hand an AI agent: a shell on machines that matter. This one is built so you decide how far the agent can go — per server, not globally.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

Runs npx -y mcp-ssh-manager on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-ssh-manager -- npx -y mcp-ssh-manager
Add to Cursor

SSH Manager: common questions

Is SSH Manager MCP server safe?
Mostly: it is graded B (74/100). Read the SSH Manager safety report
How do I install SSH Manager?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does SSH Manager need an API key?
No secret keys are declared. It reads 2 settings from the environment.
Is SSH Manager maintained?
The last commit was 8 days ago (2026-09-13). The latest release is v3.8.5.
What can I use instead of SSH Manager?
Servers from other publishers that do the same job: ssh-mcp server, Avanan MSP (Legacy SmartAPI) MCP server and CrowdStrike Falcon MCP Server. Compare all SSH Manager alternatives.

Alternatives to SSH Manager

Same job from other publishers: the closest match first, then the best rated.

All SSH Manager alternatives →
  • ssh-mcp
    MCP gateway for controlled SSH access with per-client auth, command policies, and audit logging.
    B
  • Avanan MSP (Legacy SmartAPI)
    MCP server for the legacy Avanan SmartAPI: MSP tenant management plus per-tenant security tools.
    More from WYRE-AI →
    B
  • CrowdStrike Falcon MCP Server
    Connects AI agents with CrowdStrike Falcon for security analysis and automation.
    A
  • Reversecore MCP
    Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
    B
  • Notebooklm Secure
    Security-hardened NotebookLM MCP with post-quantum encryption
    A
SSH Manager vs ssh-mcpSSH Manager vs Avanan MSP (Legacy SmartAPI)SSH Manager vs CrowdStrike Falcon MCP Server

More from bvisible →