Search / io.github.gelse/ssh-mcp
ssh-mcp
L0· runs locallyMCP gateway for controlled SSH access with per-client auth, command policies, and audit logging.
v0.3.0 · active · repository · website · descriptor JSON · versions
Search / io.github.gelse/ssh-mcp
L0· runs locallyMCP gateway for controlled SSH access with per-client auth, command policies, and audit logging.
v0.3.0 · active · repository · website · descriptor JSON · versions
{
"mcpServers": {
"ssh-mcp": {
"command": "docker",
"args": [
"-p",
"8080:8080",
"-v",
"${config_dir}:/config",
"-v",
"${ssh_key}:/app/ssh_key:ro",
"-v",
"${logs_dir}:/logs",
"-e",
"CONFIG_DIR",
"-e",
"LOG_DIR",
"-e",
"CONFIG_API_ENABLED",
"-e",
"CONFIG_API_TOKEN",
"ghcr.io/gelse/ssh-mcp:0.3.0"
],
"env": {
"CONFIG_DIR": "/config",
"LOG_DIR": "/logs",
"CONFIG_API_ENABLED": "false",
"CONFIG_API_TOKEN": "${CONFIG_API_TOKEN}"
}
}
}
}claude mcp add ssh-mcp -e "CONFIG_DIR=/config" -e "LOG_DIR=/logs" -e "CONFIG_API_ENABLED=false" -e "CONFIG_API_TOKEN=${CONFIG_API_TOKEN}" -- docker -p 8080:8080 -v "${config_dir}:/config" -v "${ssh_key}:/app/ssh_key:ro" -v "${logs_dir}:/logs" -e CONFIG_DIR -e LOG_DIR -e CONFIG_API_ENABLED -e CONFIG_API_TOKEN ghcr.io/gelse/ssh-mcp:0.3.0[mcp_servers.ssh-mcp]
command = "docker"
args = ["-p", "8080:8080", "-v", "${config_dir}:/config", "-v", "${ssh_key}:/app/ssh_key:ro", "-v", "${logs_dir}:/logs", "-e", "CONFIG_DIR", "-e", "LOG_DIR", "-e", "CONFIG_API_ENABLED", "-e", "CONFIG_API_TOKEN", "ghcr.io/gelse/ssh-mcp:0.3.0"]
env = { "CONFIG_DIR" = "/config", "LOG_DIR" = "/logs", "CONFIG_API_ENABLED" = "false", "CONFIG_API_TOKEN" = "${CONFIG_API_TOKEN}" }
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"ssh-mcp": {
"type": "local",
"command": [
"docker",
"-p",
"8080:8080",
"-v",
"{env:config_dir}:/config",
"-v",
"{env:ssh_key}:/app/ssh_key:ro",
"-v",
"{env:logs_dir}:/logs",
"-e",
"CONFIG_DIR",
"-e",
"LOG_DIR",
"-e",
"CONFIG_API_ENABLED",
"-e",
"CONFIG_API_TOKEN",
"ghcr.io/gelse/ssh-mcp:0.3.0"
],
"enabled": true,
"environment": {
"CONFIG_DIR": "/config",
"LOG_DIR": "/logs",
"CONFIG_API_ENABLED": "false",
"CONFIG_API_TOKEN": "{env:CONFIG_API_TOKEN}"
}
}
}
}{
"mcpServers": {
"ssh-mcp": {
"command": "docker",
"args": [
"-p",
"8080:8080",
"-v",
"${config_dir}:/config",
"-v",
"${ssh_key}:/app/ssh_key:ro",
"-v",
"${logs_dir}:/logs",
"-e",
"CONFIG_DIR",
"-e",
"LOG_DIR",
"-e",
"CONFIG_API_ENABLED",
"-e",
"CONFIG_API_TOKEN",
"ghcr.io/gelse/ssh-mcp:0.3.0"
],
"env": {
"CONFIG_DIR": "/config",
"LOG_DIR": "/logs",
"CONFIG_API_ENABLED": "false",
"CONFIG_API_TOKEN": "${CONFIG_API_TOKEN}"
}
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=ssh-mcp&config=eyJjb21tYW5kIjoiZG9ja2VyIiwiYXJncyI6WyItcCIsIjgwODA6ODA4MCIsIi12IiwiJHtjb25maWdfZGlyfTovY29uZmlnIiwiLXYiLCIke3NzaF9rZXl9Oi9hcHAvc3NoX2tleTpybyIsIi12IiwiJHtsb2dzX2Rpcn06L2xvZ3MiLCItZSIsIkNPTkZJR19ESVIiLCItZSIsIkxPR19ESVIiLCItZSIsIkNPTkZJR19BUElfRU5BQkxFRCIsIi1lIiwiQ09ORklHX0FQSV9UT0tFTiIsImdoY3IuaW8vZ2Vsc2Uvc3NoLW1jcDowLjMuMCJdLCJlbnYiOnsiQ09ORklHX0RJUiI6Ii9jb25maWciLCJMT0dfRElSIjoiL2xvZ3MiLCJDT05GSUdfQVBJX0VOQUJMRUQiOiJmYWxzZSIsIkNPTkZJR19BUElfVE9LRU4iOiIke0NPTkZJR19BUElfVE9LRU59In19"
}{
"servers": {
"ssh-mcp": {
"type": "stdio",
"command": "docker",
"args": [
"-p",
"8080:8080",
"-v",
"${config_dir}:/config",
"-v",
"${ssh_key}:/app/ssh_key:ro",
"-v",
"${logs_dir}:/logs",
"-e",
"CONFIG_DIR",
"-e",
"LOG_DIR",
"-e",
"CONFIG_API_ENABLED",
"-e",
"CONFIG_API_TOKEN",
"ghcr.io/gelse/ssh-mcp:0.3.0"
],
"env": {
"CONFIG_DIR": "/config",
"LOG_DIR": "/logs",
"CONFIG_API_ENABLED": "false",
"CONFIG_API_TOKEN": "${CONFIG_API_TOKEN}"
}
}
}
}{
"mcpServers": {
"ssh-mcp": {
"command": "docker",
"args": [
"-p",
"8080:8080",
"-v",
"${config_dir}:/config",
"-v",
"${ssh_key}:/app/ssh_key:ro",
"-v",
"${logs_dir}:/logs",
"-e",
"CONFIG_DIR",
"-e",
"LOG_DIR",
"-e",
"CONFIG_API_ENABLED",
"-e",
"CONFIG_API_TOKEN",
"ghcr.io/gelse/ssh-mcp:0.3.0"
],
"env": {
"CONFIG_DIR": "/config",
"LOG_DIR": "/logs",
"CONFIG_API_ENABLED": "false",
"CONFIG_API_TOKEN": "${CONFIG_API_TOKEN}"
}
}
}
}extensions:
"ssh-mcp":
enabled: true
name: "ssh-mcp"
type: stdio
cmd: "docker"
args:
- "-p"
- "8080:8080"
- "-v"
- "${config_dir}:/config"
- "-v"
- "${ssh_key}:/app/ssh_key:ro"
- "-v"
- "${logs_dir}:/logs"
- "-e"
- "CONFIG_DIR"
- "-e"
- "LOG_DIR"
- "-e"
- "CONFIG_API_ENABLED"
- "-e"
- "CONFIG_API_TOKEN"
- "ghcr.io/gelse/ssh-mcp:0.3.0"
envs:
"CONFIG_DIR": "/config"
"LOG_DIR": "/logs"
"CONFIG_API_ENABLED": "false"
"CONFIG_API_TOKEN": "${CONFIG_API_TOKEN}"
timeout: 300
Placeholders to fill from your own secret store: ${CONFIG_API_TOKEN}. The registry never accepts secret values.
This is a local package: the command runs on your machine.
Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)stability.changes, stability.rug_pulltool list unknowndeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +website ~liveness-unmeasured ~updated-36d-ago -unpinned-packages(1)
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
ghcr.io/gelse/ssh-mcp:0.3.0 | oci | unpinned | docker | CONFIG_API_TOKEN |
No tools observed. Local packages are never executed by the registry.
Schemas: list_tools.
{
"name": "io.github.gelse/ssh-mcp",
"title": "ssh-mcp",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.3.0",
"packages": [
{
"transport": {
"url": "http://localhost:8080/mcp",
"type": "streamable-http"
},
"identifier": "ghcr.io/gelse/ssh-mcp:0.3.0",
"runtimeHint": "docker",
"registryType": "oci",
"runtimeArguments": [
{
"name": "-p",
"type": "named",
"value": "8080:8080",
"description": "Map the MCP HTTP port"
},
{
"name": "-v",
"type": "named",
"value": "{config_dir}:/config",
"variables": {
"config_dir": {
"isRequired": true,
"description": "Path to the local config directory containing ssh-mcp-config.json"
}
},
"description": "Mount the configuration directory"
},
{
"name": "-v",
"type": "named",
"value": "{ssh_key}:/app/ssh_key:ro",
"variables": {
"ssh_key": {
"isRequired": true,
"description": "Path to the SSH private key file"
}
},
"description": "Mount the SSH private key read-only"
},
{
"name": "-v",
"type": "named",
"value": "{logs_dir}:/logs",
"variables": {
"logs_dir": {
"description": "Path to the local logs directory"
}
},
"description": "Mount the logs directory"
}
],
"environmentVariables": [
{
"name": "CONFIG_DIR",
"default": "/config",
"description": "Directory containing ssh-mcp-config.json"
},
{
"name": "LOG_DIR",
"default": "/logs",
"description": "Directory for JSONL audit logs"
},
{
"name": "CONFIG_API_ENABLED",
"choices": [
"true",
"false"
],
"default": "false",
"description": "Enable the configuration REST API and web dashboard"
},
{
"name": "CONFIG_API_TOKEN",
"isSecret": true,
"description": "Bearer token for the configuration API"
}
]
}
],
"repository": {
"url": "https://github.com/gelse/ssh-mcp",
"source": "github"
},
"websiteUrl": "https://github.com/gelse/ssh-mcp#readme",
"description": "MCP gateway for controlled SSH access with per-client auth, command policies, and audit logging."
}