MCP.Market

SSH Manager MCP server

by bvisible·io.github.bvisible/mcp-ssh-manager·v4.0.3·528 stars
No reviews yet

SSH for AI agents: commands, files, backups and health, with approval, a vault and an audit trail

A92/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A92/100

not scanned yet

Adoption
Established

528 stars3.0k downloads/wk

Reviews

Write one

Nobody has reviewed SSH Manager yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

SSH Manager tools

No tool declarations could be read from the package source. They show once the server is installed.

Not scanned yet. New listings are scanned within a day or two of arriving.

How SSH Manager compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 93% of 48,243 servers
GitHub stars
528
more than 95% of 28,706 servers
Downloads a week
2,979
more than 95% of 12,306 servers with a package

Release history: 5 versions in the registry since 2026-08-28, latest 2026-11-05, typically one every 6 days.

Install SSH Manager in Claude Code, Cursor or VS Code

Runs npx -y mcp-ssh-manager on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-ssh-manager -- npx -y mcp-ssh-manager
Add to Cursor

What the publisher says

From the SSH Manager repository's README, as published. We do not edit it. Read it on GitHub

MCP SSH Manager - SSH Remote Server Management via Model Context Protocol 🚀

A Model Context Protocol (MCP) server that enables Claude Code and OpenAI Codex to manage multiple SSH connections. Execute commands, transfer files, manage databases, create backups, monitor health, and automate DevOps tasks across your servers — directly from your AI assistant.

🎉 What's New in v3.8.5

🔒 Security release — three command-injection advisories fixed, one of which defeated readonly mode (Released: August 28, 2026)

Upgrade if you use sshbackup, sshdbdump, sshservicestatus or sshtail — and especially if you rely on the readonly / restricted security modes.**

  • 🔴 RCE bypassing readonly / restricted (GHSA-m793-whw6-f537) — sshservicestatus and ssh_tail are read-only, so they stay enabled on servers you locked down, and neither quoted its arguments nor consulted the policy layer. A service name like nginx; id > /tmp/pwned executed. This defeated the exact control those modes exist to provide.
  • 🔴 RCE through sshdbdump (GHSA-796j-h5q5-jx6p) — the stat command run after the dump interpolated the output path raw. The v3.6.7 patch had stopped one line short.
  • 🟠 RCE through every sshbackup tool (GHSA-qwwm-vrm9-4mw8) — backup-manager.js had zero shell escaping across its 9 builders, while database-manager.js had 95. The v3.6.7 fix was never extended to it.

The quoting helper now lives in one module (src/shell-quote.js) so "did this builder quote its inputs?" has a single answer, and a new test drives 340 builder × argument × payload combinations through a real shell to prove none of them execute.

Read full changelog →

🔐 Giving an agent SSH access, safely

An MCP SSH server is the most dangerous tool you can hand an AI agent: a shell on machines that matter. This one is built so you decide how far the agent can go — per server, not globally.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Grade history

  • 2026-10-30restoreB → Ascore 92

SSH Manager: common questions

Is SSH Manager MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the SSH Manager safety report
How do I install SSH Manager?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does SSH Manager need an API key?
No secret keys are declared. It reads 2 settings from the environment.
Is SSH Manager maintained?
The last commit was 10 days ago (2026-10-26). The latest release is v4.0.3.
What can I use instead of SSH Manager?
Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server, Desktop Commander MCP server and Tradememory Protocol MCP server. Compare all SSH Manager alternatives.
How does SSH Manager compare with other MCP servers?
safety score 92/100 (higher than 93% of 48,243 servers); github stars 528 (more than 95% of 28,706 servers); downloads a week 2,979 (more than 95% of 12,306 servers with a package). Full comparison.

Alternatives to SSH Manager

Same job from other publishers: the closest match first, then the best rated.

All SSH Manager alternatives →
  • SSH — policy-gated remote access
    Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.
    B
  • Desktop Commander
    MCP server for terminal commands, file operations, and process management
    C
  • Tradememory Protocol
    Tamper-evident decision audit trail and outcome-weighted memory for AI trading agents.
    B