Commands MCP server
io.github.g0t4/mcp-server-commands·v0.8.2·237 starsModel Context Protocol server to run commands (tool: `runProcess`)
237 stars488 downloads/wk
Reviews
Write oneNobody has reviewed Commands yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Commands tools (1, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
run_processwrite actionRun a process on this
Public scan report
scanner v0.1.10 · 2026-10-25 · same rubric, same numbers if you re-run it
- Code scan9 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 3 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Commands compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 90% of 4,460 AI and agents servers
- Tools
- 1
- the typical AI and agents server has 6
- Tools that change things
- 100%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 237
- more than 95% of 2,711 AI and agents servers
- Downloads a week
- 488
- more than 86% of 1,538 AI and agents servers with a package
What its tools let an agent do: 1 run or deploy
Install Commands in Claude Code, Cursor or VS Code
Runs npx -y mcp-server-commands on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp-server-commands -- npx -y mcp-server-commands
What the publisher says
From the Commands repository's README, as published. We do not edit it. Read it on GitHub
runProcess tool
The runProcess tool runs processes on the host machine. There are two mutually exclusive ways to invoke it:
- commandline** (string) — Executed via the system's default shell (just like typing into bash/fish/pwsh/etc). Shell features like pipes, redirects, and variable expansion all work.
- argv (string array) — Direct executable invocation. argv[0] is the executable, the rest are arguments. No shell interpretation.
You cannot pass both. The tool infers whether to use a shell from which parameter you provide.
If you want your model to use specific shell(s) on a system, I would list them in your system prompt. Or, maybe in your tool instructions, though models tend to pay better attention to examples in a system prompt.
Let me know if you encounter problems!
Tools
Tools are for LLMs to request. Claude Sonnet 3.5 intelligently uses run_process. And, initial testing shows promising results with Groq Desktop with MCP and llama4 models.
Currently, just one command to rule them all!
- run_process - run a command, i.e. hostname or ls -al or echo "hello world" etc
- Returns STDOUT and STDERR as text
- Optional stdin parameter means your LLM can
- pass scripts over STDIN to commands like fish, bash, zsh, python
- create files with cat >> foo/bar.txt from the text in stdin
[!WARNING]
Be careful what you ask this server to run!
In Claude Desktop app, use Approve Once (not Allow for This Chat) so you can review each command, use Deny if you don't trust the command.
Permissions are dictated by the user that runs the server.
DO NOT run with sudo.
Video walkthrough
Prompts
Prompts are for users to include in chat history, i.e. via Zed's slash commands (in its AI Chat panel)
- run_process - generate a prompt message with the command output
- FYI this was mostly a learning exercise... I see this as a user requested tool call. That's a fancy way to say, it's a template for running a command and passing the outputs to the model!
Development
Install dependencies:
npm installBuild the server:
npm run buildFor development with auto-rebuild:
npm run watchInstallation
To use with Claude Desktop, add the server config:
On MacOS: ~/Library/Application Support/Claude/claudedesktopconfig.json On Windows: %APPDATA%/Claude/claudedesktopconfig.json
Groq Desktop (beta, macOS) uses ~/Library/Application Support/groq-desktop-app/settings.json
Use the published npm package
Published to npm as mcp-server-commands using this workflow
{
"mcpServers": {
"mcp-server-commands": {
"command": "npx",
"args": ["mcp-server-commands"]
}
}
}Use a local build (repo checkout)
Make sure to run npm run build
{
"mcpServers": {
"mcp-server-commands": {
// works b/c of shebang in index.js
"command": "/path/to/mcp-server-commands/build/index.js"
}
}
}Local Models
- Most models are trained such that they don't think they can run commands for you.
- Sometimes, they use tools w/o hesitation... other times, I have to coax them.
- Use a system prompt or prompt template to instruct that they should follow user requests. Including to use run_processs without double checking.
- Ollama is a great way to run a model locally (w/ Open-WebUI)
# NOTE: make sure to review variants and sizes, so the model fits in your VRAM to perform well!Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Commands: common questions
- Is Commands MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Commands safety report
- How do I install Commands?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Commands need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Commands maintained?
- The last commit was 13 days ago (2026-10-22). The latest release is v0.8.2.
- What can I use instead of Commands?
- Servers from other publishers that do the same job: Shellward MCP server.
- How does Commands compare with other AI and agents MCP servers?
- safety score 92/100 (higher than 90% of 4,460 AI and agents servers); tools 1 (the typical AI and agents server has 6); tools that change things 100% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Commands
Same job from other publishers: the closest match first, then the best rated.
- ShellwardAI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.not reviewedEstablishedA