Hex SSH MCP server
Token-efficient SSH MCP with hash-verified files and persistent tmux sessions. 14 tools.
565 stars63 downloads/wk
Reviews
Write oneNobody has reviewed Hex SSH yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Hex SSH tools (14, 5 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
remote-sshwrite actionExecute shell commands on remote servers. Disabled by default. Set REMOTE_SSH_MODE=safe or REMOTE_SSH_MODE=open to enable.
ssh-capabilitiesInspect POSIX remote session support, tmux availability, package managers, and basic shell tools.
ssh-downloadDownload a remote file to the local machine over SFTP. Supports text and binary files, rejects existing destinations by default, validates path boundaries, and stages to a verified local finalize path.
ssh-edit-blockEdit remote files using hash-verified anchors. Use ssh-read-lines first to get hash anchors and checksums.
ssh-read-linesRead remote file with hash-annotated lines. Use startLine/maxLines for large files. Returns range checksums for edit verification.
ssh-search-codeSearch remote files with grep. Returns hash-annotated matches with deduplication. Use for finding code before ssh-edit-block.
ssh-session-closeClose a trusted persistent tmux session and remove its remote session directory.
ssh-session-execwrite actionRun a command inside a persistent tmux session. Returns metadata first; read output with ssh-session-read.
ssh-session-gcwrite actionRemove expired trusted hex-ssh tmux sessions. Only sessions with valid hex-ssh metadata are touched.
ssh-session-openOpen a trusted persistent remote tmux session. Preserves cwd and environment across ssh-session-exec calls.
ssh-session-readRead a paginated stdout/stderr window from a persistent session command.
ssh-uploadwrite actionUpload a local file to a remote server over SFTP. Supports text and binary files, rejects existing destinations by default, validates path boundaries, and stages via the strongest available remote finalize path.
ssh-verifyCheck if range checksums still match remote file. Single-line response avoids full re-read. Use before editing after a pause.
ssh-write-chunkwrite actionWrite or append to remote files. Rewrite mode is atomic (temp file + rename). Append mode is non-atomic (direct >>). Auto-creates parent directories.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 11 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Hex SSH compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 90% of 48,273 servers
- Tools
- 14
- the typical server has 7
- Tools that change things
- 36%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 565
- more than 95% of 28,534 servers
- Downloads a week
- 63
- more than 52% of 11,915 servers with a package
What its tools let an agent do: 9 read · 5 change
Install Hex SSH in Claude Code, Cursor or VS Code
Runs npx -y @levnikolaevich/hex-ssh-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add hex-ssh-mcp -- npx -y @levnikolaevich/hex-ssh-mcp
What the publisher says
From the Hex SSH repository's README, as published. We do not edit it. Read it on GitHub
Claude-Codex Skills
Give your AI agent a clear finish line.
You ask for a fix and get a new abstraction. A review lists generic advice. The agent says “done,” but you still have to work out what it checked.
These skills give Claude Code and Codex a concrete way to finish the task: establish the intended outcome, work within scope, verify the result, and make remaining gaps explicit. Choose the skill for the problem in front of you.
Project page · Install · Full catalog
What changes in your workflow
- A clearer target. Turn an idea, bug report, or incident into an outcome the agent can check.
- Focused work. Reuse existing capabilities, fix the owning cause, and remove what the change makes obsolete.
- A result you can assess. See the evidence, failed or unavailable checks, and remaining risks behind the verdict.
- Control over consequential actions. Reviews report findings; implementation stays within the agreed scope; publication and deployment follow their authorization boundaries.
Choose a route
Start where you need help. Each skill works independently; a small fix does not require a full lifecycle or audit.
For a larger task, combine only the steps needed to resolve decisions and produce evidence. Supplied requirements, existing designs, and current tests are valid starting points. Implementation includes its own verification; a separate test-building or review skill is optional.
Install
For a feature or fix, start with implementation-suite. Replace it with another plugin from Choose a route for a different task.
Claude Code:
/plugin marketplace add levnikolaevich/claude-code-skills
/plugin install implementation-suite@levnikolaevich-skills-marketplace
/reload-pluginsCodex:
codex plugin marketplace add levnikolaevich/claude-code-skills
codex plugin add implementation-suite@levnikolaevich-skills-marketplaceInvoke a skill by its full name: /implementation-suite:ln-41-surgical-change-implementer in Claude Code or $ln-41-surgical-change-implementer in Codex, followed by your task. For example: “Fix the total calculation when an item has a discount. Preserve the current rounding rules.”
Lifecycle and plugins
Standalone skills for Claude Code and Codex, grouped by the work you need to do. Browse the outcomes below to find the right skill for your task.
1 Product discovery → 2 Architecture → 3 Delivery planning
→ 4 Implementation → 5 Quality assurance → 6 Delivery → 7 Operations
↑ Product feedback / architecture changes / operational remediation ↵
8 Skill maintenance supports the collection itself.Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Hex SSH: common questions
- Is Hex SSH MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Hex SSH safety report
- How do I install Hex SSH?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Hex SSH need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Hex SSH maintained?
- The last commit was 47 days ago (2026-09-16). The latest release is v1.9.2.
- What can I use instead of Hex SSH?
- Servers from other publishers that do the same job: Computer MCP server, SSH Manager MCP server and Token Optimizer MCP server. Compare all Hex SSH alternatives.
- How does Hex SSH compare with other MCP servers?
- safety score 92/100 (higher than 90% of 48,273 servers); tools 14 (the typical server has 7); tools that change things 36% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Hex SSH
Same job from other publishers: the closest match first, then the best rated.
- ComputerA private persistent computer: files and a bash shell that survive between runs.not reviewedEstablishedA
- SSH ManagerSSH for AI agents: commands, files, backups and health, with approval, a vault and an audit trailnot reviewedEstablishedA
- Token OptimizerContext-window optimization: caching, compression & smart file tools that cut tokens 60-90%.not reviewedEstablishedC