MCP.Market

Commands MCP server

by g0t4·io.github.g0t4/mcp-server-commands·v0.8.2·237 stars

Model Context Protocol server to run commands (tool: `runProcess`)

A92/100grade A
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Established

237 stars488 downloads/wk

Reviews

Write one

Nobody has reviewed Commands yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Commands tools (1, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • run_processwrite action

    Run a process on this

Public scan report

scanner v0.1.10 · 2026-10-25 · same rubric, same numbers if you re-run it

no findings
  • Code scan9 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 3 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Commands compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 90% of 4,460 AI and agents servers
Tools
1
the typical AI and agents server has 6
Tools that change things
100%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
237
more than 95% of 2,711 AI and agents servers
Downloads a week
488
more than 86% of 1,538 AI and agents servers with a package

What its tools let an agent do: 1 run or deploy

Install Commands in Claude Code, Cursor or VS Code

Runs npx -y mcp-server-commands on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-server-commands -- npx -y mcp-server-commands
Add to Cursor

What the publisher says

From the Commands repository's README, as published. We do not edit it. Read it on GitHub

runProcess tool

The runProcess tool runs processes on the host machine. There are two mutually exclusive ways to invoke it:

  1. commandline** (string) — Executed via the system's default shell (just like typing into bash/fish/pwsh/etc). Shell features like pipes, redirects, and variable expansion all work.
  2. argv (string array) — Direct executable invocation. argv[0] is the executable, the rest are arguments. No shell interpretation.

You cannot pass both. The tool infers whether to use a shell from which parameter you provide.

If you want your model to use specific shell(s) on a system, I would list them in your system prompt. Or, maybe in your tool instructions, though models tend to pay better attention to examples in a system prompt.

Let me know if you encounter problems!

Tools

Tools are for LLMs to request. Claude Sonnet 3.5 intelligently uses run_process. And, initial testing shows promising results with Groq Desktop with MCP and llama4 models.

Currently, just one command to rule them all!

  • run_process - run a command, i.e. hostname or ls -al or echo "hello world" etc
  • Returns STDOUT and STDERR as text
  • Optional stdin parameter means your LLM can
  • pass scripts over STDIN to commands like fish, bash, zsh, python
  • create files with cat >> foo/bar.txt from the text in stdin

[!WARNING]

Be careful what you ask this server to run!

In Claude Desktop app, use Approve Once (not Allow for This Chat) so you can review each command, use Deny if you don't trust the command.

Permissions are dictated by the user that runs the server.

DO NOT run with sudo.

Video walkthrough

Prompts

Prompts are for users to include in chat history, i.e. via Zed's slash commands (in its AI Chat panel)

  • run_process - generate a prompt message with the command output
  • FYI this was mostly a learning exercise... I see this as a user requested tool call. That's a fancy way to say, it's a template for running a command and passing the outputs to the model!

Development

Install dependencies:

npm install

Build the server:

npm run build

For development with auto-rebuild:

npm run watch

Installation

To use with Claude Desktop, add the server config:

On MacOS: ~/Library/Application Support/Claude/claudedesktopconfig.json On Windows: %APPDATA%/Claude/claudedesktopconfig.json

Groq Desktop (beta, macOS) uses ~/Library/Application Support/groq-desktop-app/settings.json

Use the published npm package

Published to npm as mcp-server-commands using this workflow

{
  "mcpServers": {
    "mcp-server-commands": {
      "command": "npx",
      "args": ["mcp-server-commands"]
    }
  }
}

Use a local build (repo checkout)

Make sure to run npm run build

{
  "mcpServers": {
    "mcp-server-commands": {
      // works b/c of shebang in index.js
      "command": "/path/to/mcp-server-commands/build/index.js"
    }
  }
}

Local Models

  • Most models are trained such that they don't think they can run commands for you.
  • Sometimes, they use tools w/o hesitation... other times, I have to coax them.
  • Use a system prompt or prompt template to instruct that they should follow user requests. Including to use run_processs without double checking.
  • Ollama is a great way to run a model locally (w/ Open-WebUI)
# NOTE: make sure to review variants and sizes, so the model fits in your VRAM to perform well!

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Commands: common questions

Is Commands MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the Commands safety report
How do I install Commands?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Commands need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Commands maintained?
The last commit was 13 days ago (2026-10-22). The latest release is v0.8.2.
What can I use instead of Commands?
Servers from other publishers that do the same job: Shellward MCP server.
How does Commands compare with other AI and agents MCP servers?
safety score 92/100 (higher than 90% of 4,460 AI and agents servers); tools 1 (the typical AI and agents server has 6); tools that change things 100% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Commands

Same job from other publishers: the closest match first, then the best rated.

  • Shellward
    AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.
    A