Search / io.github.inhuman/mcp-ssh-fleet
SSH Fleet
L0· runs locallyCurated ssh_probe diagnostics and single-host ssh_exec over an allowlisted SSH fleet.
v0.1.5 · active · repository · descriptor JSON · versions
Search / io.github.inhuman/mcp-ssh-fleet
L0· runs locallyCurated ssh_probe diagnostics and single-host ssh_exec over an allowlisted SSH fleet.
v0.1.5 · active · repository · descriptor JSON · versions
{
"mcpServers": {
"mcp-ssh-fleet": {
"command": "docker",
"args": [
"-v",
"${inventory_path}:/etc/ssh-fleet/inventory.yaml:ro",
"-v",
"${key_path}:/etc/ssh-fleet/id_ed25519:ro",
"-e",
"SSH_FLEET_TRANSPORT",
"-e",
"SSH_FLEET_CMD_TIMEOUT_SECONDS",
"-e",
"SSH_FLEET_OUTPUT_CAP_BYTES",
"-e",
"SSH_FLEET_PROBE_CONCURRENCY",
"-e",
"SSH_FLEET_PROBE_MAX_HOSTS",
"-e",
"SSH_FLEET_AUTH_TOKEN",
"ghcr.io/inhuman/mcp-ssh-fleet:0.1.5"
],
"env": {
"SSH_FLEET_TRANSPORT": "stdio",
"SSH_FLEET_CMD_TIMEOUT_SECONDS": "20",
"SSH_FLEET_OUTPUT_CAP_BYTES": "8192",
"SSH_FLEET_PROBE_CONCURRENCY": "8",
"SSH_FLEET_PROBE_MAX_HOSTS": "50",
"SSH_FLEET_AUTH_TOKEN": "${SSH_FLEET_AUTH_TOKEN}"
}
}
}
}claude mcp add mcp-ssh-fleet -e "SSH_FLEET_TRANSPORT=stdio" -e "SSH_FLEET_CMD_TIMEOUT_SECONDS=20" -e "SSH_FLEET_OUTPUT_CAP_BYTES=8192" -e "SSH_FLEET_PROBE_CONCURRENCY=8" -e "SSH_FLEET_PROBE_MAX_HOSTS=50" -e "SSH_FLEET_AUTH_TOKEN=${SSH_FLEET_AUTH_TOKEN}" -- docker -v "${inventory_path}:/etc/ssh-fleet/inventory.yaml:ro" -v "${key_path}:/etc/ssh-fleet/id_ed25519:ro" -e SSH_FLEET_TRANSPORT -e SSH_FLEET_CMD_TIMEOUT_SECONDS -e SSH_FLEET_OUTPUT_CAP_BYTES -e SSH_FLEET_PROBE_CONCURRENCY -e SSH_FLEET_PROBE_MAX_HOSTS -e SSH_FLEET_AUTH_TOKEN ghcr.io/inhuman/mcp-ssh-fleet:0.1.5[mcp_servers.mcp-ssh-fleet]
command = "docker"
args = ["-v", "${inventory_path}:/etc/ssh-fleet/inventory.yaml:ro", "-v", "${key_path}:/etc/ssh-fleet/id_ed25519:ro", "-e", "SSH_FLEET_TRANSPORT", "-e", "SSH_FLEET_CMD_TIMEOUT_SECONDS", "-e", "SSH_FLEET_OUTPUT_CAP_BYTES", "-e", "SSH_FLEET_PROBE_CONCURRENCY", "-e", "SSH_FLEET_PROBE_MAX_HOSTS", "-e", "SSH_FLEET_AUTH_TOKEN", "ghcr.io/inhuman/mcp-ssh-fleet:0.1.5"]
env = { "SSH_FLEET_TRANSPORT" = "stdio", "SSH_FLEET_CMD_TIMEOUT_SECONDS" = "20", "SSH_FLEET_OUTPUT_CAP_BYTES" = "8192", "SSH_FLEET_PROBE_CONCURRENCY" = "8", "SSH_FLEET_PROBE_MAX_HOSTS" = "50", "SSH_FLEET_AUTH_TOKEN" = "${SSH_FLEET_AUTH_TOKEN}" }
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"mcp-ssh-fleet": {
"type": "local",
"command": [
"docker",
"-v",
"{env:inventory_path}:/etc/ssh-fleet/inventory.yaml:ro",
"-v",
"{env:key_path}:/etc/ssh-fleet/id_ed25519:ro",
"-e",
"SSH_FLEET_TRANSPORT",
"-e",
"SSH_FLEET_CMD_TIMEOUT_SECONDS",
"-e",
"SSH_FLEET_OUTPUT_CAP_BYTES",
"-e",
"SSH_FLEET_PROBE_CONCURRENCY",
"-e",
"SSH_FLEET_PROBE_MAX_HOSTS",
"-e",
"SSH_FLEET_AUTH_TOKEN",
"ghcr.io/inhuman/mcp-ssh-fleet:0.1.5"
],
"enabled": true,
"environment": {
"SSH_FLEET_TRANSPORT": "stdio",
"SSH_FLEET_CMD_TIMEOUT_SECONDS": "20",
"SSH_FLEET_OUTPUT_CAP_BYTES": "8192",
"SSH_FLEET_PROBE_CONCURRENCY": "8",
"SSH_FLEET_PROBE_MAX_HOSTS": "50",
"SSH_FLEET_AUTH_TOKEN": "{env:SSH_FLEET_AUTH_TOKEN}"
}
}
}
}{
"mcpServers": {
"mcp-ssh-fleet": {
"command": "docker",
"args": [
"-v",
"${inventory_path}:/etc/ssh-fleet/inventory.yaml:ro",
"-v",
"${key_path}:/etc/ssh-fleet/id_ed25519:ro",
"-e",
"SSH_FLEET_TRANSPORT",
"-e",
"SSH_FLEET_CMD_TIMEOUT_SECONDS",
"-e",
"SSH_FLEET_OUTPUT_CAP_BYTES",
"-e",
"SSH_FLEET_PROBE_CONCURRENCY",
"-e",
"SSH_FLEET_PROBE_MAX_HOSTS",
"-e",
"SSH_FLEET_AUTH_TOKEN",
"ghcr.io/inhuman/mcp-ssh-fleet:0.1.5"
],
"env": {
"SSH_FLEET_TRANSPORT": "stdio",
"SSH_FLEET_CMD_TIMEOUT_SECONDS": "20",
"SSH_FLEET_OUTPUT_CAP_BYTES": "8192",
"SSH_FLEET_PROBE_CONCURRENCY": "8",
"SSH_FLEET_PROBE_MAX_HOSTS": "50",
"SSH_FLEET_AUTH_TOKEN": "${SSH_FLEET_AUTH_TOKEN}"
}
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=mcp-ssh-fleet&config=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"
}{
"servers": {
"mcp-ssh-fleet": {
"type": "stdio",
"command": "docker",
"args": [
"-v",
"${inventory_path}:/etc/ssh-fleet/inventory.yaml:ro",
"-v",
"${key_path}:/etc/ssh-fleet/id_ed25519:ro",
"-e",
"SSH_FLEET_TRANSPORT",
"-e",
"SSH_FLEET_CMD_TIMEOUT_SECONDS",
"-e",
"SSH_FLEET_OUTPUT_CAP_BYTES",
"-e",
"SSH_FLEET_PROBE_CONCURRENCY",
"-e",
"SSH_FLEET_PROBE_MAX_HOSTS",
"-e",
"SSH_FLEET_AUTH_TOKEN",
"ghcr.io/inhuman/mcp-ssh-fleet:0.1.5"
],
"env": {
"SSH_FLEET_TRANSPORT": "stdio",
"SSH_FLEET_CMD_TIMEOUT_SECONDS": "20",
"SSH_FLEET_OUTPUT_CAP_BYTES": "8192",
"SSH_FLEET_PROBE_CONCURRENCY": "8",
"SSH_FLEET_PROBE_MAX_HOSTS": "50",
"SSH_FLEET_AUTH_TOKEN": "${SSH_FLEET_AUTH_TOKEN}"
}
}
}
}{
"mcpServers": {
"mcp-ssh-fleet": {
"command": "docker",
"args": [
"-v",
"${inventory_path}:/etc/ssh-fleet/inventory.yaml:ro",
"-v",
"${key_path}:/etc/ssh-fleet/id_ed25519:ro",
"-e",
"SSH_FLEET_TRANSPORT",
"-e",
"SSH_FLEET_CMD_TIMEOUT_SECONDS",
"-e",
"SSH_FLEET_OUTPUT_CAP_BYTES",
"-e",
"SSH_FLEET_PROBE_CONCURRENCY",
"-e",
"SSH_FLEET_PROBE_MAX_HOSTS",
"-e",
"SSH_FLEET_AUTH_TOKEN",
"ghcr.io/inhuman/mcp-ssh-fleet:0.1.5"
],
"env": {
"SSH_FLEET_TRANSPORT": "stdio",
"SSH_FLEET_CMD_TIMEOUT_SECONDS": "20",
"SSH_FLEET_OUTPUT_CAP_BYTES": "8192",
"SSH_FLEET_PROBE_CONCURRENCY": "8",
"SSH_FLEET_PROBE_MAX_HOSTS": "50",
"SSH_FLEET_AUTH_TOKEN": "${SSH_FLEET_AUTH_TOKEN}"
}
}
}
}extensions:
"mcp-ssh-fleet":
enabled: true
name: "mcp-ssh-fleet"
type: stdio
cmd: "docker"
args:
- "-v"
- "${inventory_path}:/etc/ssh-fleet/inventory.yaml:ro"
- "-v"
- "${key_path}:/etc/ssh-fleet/id_ed25519:ro"
- "-e"
- "SSH_FLEET_TRANSPORT"
- "-e"
- "SSH_FLEET_CMD_TIMEOUT_SECONDS"
- "-e"
- "SSH_FLEET_OUTPUT_CAP_BYTES"
- "-e"
- "SSH_FLEET_PROBE_CONCURRENCY"
- "-e"
- "SSH_FLEET_PROBE_MAX_HOSTS"
- "-e"
- "SSH_FLEET_AUTH_TOKEN"
- "ghcr.io/inhuman/mcp-ssh-fleet:0.1.5"
envs:
"SSH_FLEET_TRANSPORT": "stdio"
"SSH_FLEET_CMD_TIMEOUT_SECONDS": "20"
"SSH_FLEET_OUTPUT_CAP_BYTES": "8192"
"SSH_FLEET_PROBE_CONCURRENCY": "8"
"SSH_FLEET_PROBE_MAX_HOSTS": "50"
"SSH_FLEET_AUTH_TOKEN": "${SSH_FLEET_AUTH_TOKEN}"
timeout: 300
Placeholders to fill from your own secret store: ${SSH_FLEET_AUTH_TOKEN}, ${key_path}. The registry never accepts secret values.
This is a local package: the command runs on your machine.
Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)stability.changes, stability.rug_pulltool list unknowndeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo ~liveness-unmeasured ~updated-91d-ago -unpinned-packages(1)
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
ghcr.io/inhuman/mcp-ssh-fleet:0.1.5 | oci | unpinned | docker | SSH_FLEET_AUTH_TOKEN, key_path |
No tools observed. Local packages are never executed by the registry.
Schemas: list_tools.
{
"name": "io.github.inhuman/mcp-ssh-fleet",
"title": "SSH Fleet",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.1.5",
"packages": [
{
"transport": {
"type": "stdio"
},
"identifier": "ghcr.io/inhuman/mcp-ssh-fleet:0.1.5",
"runtimeHint": "docker",
"registryType": "oci",
"runtimeArguments": [
{
"name": "-v",
"type": "named",
"value": "{inventory_path}:/etc/ssh-fleet/inventory.yaml:ro",
"variables": {
"inventory_path": {
"format": "filepath",
"isRequired": true,
"description": "Absolute path to your inventory.yaml on the host (see deploy/inventory.example.yaml)."
}
},
"isRequired": true,
"description": "Mount the host inventory allowlist (YAML), read-only."
},
{
"name": "-v",
"type": "named",
"value": "{key_path}:/etc/ssh-fleet/id_ed25519:ro",
"variables": {
"key_path": {
"format": "filepath",
"isSecret": true,
"isRequired": true,
"description": "Absolute path to the private SSH key on the host."
}
},
"isRequired": true,
"description": "Mount the private SSH key, read-only."
}
],
"environmentVariables": [
{
"name": "SSH_FLEET_TRANSPORT",
"default": "stdio",
"description": "MCP transport. Must be 'stdio' for direct docker/stdio use."
},
{
"name": "SSH_FLEET_CMD_TIMEOUT_SECONDS",
"default": "20",
"description": "Per-host command timeout in seconds (1..600)."
},
{
"name": "SSH_FLEET_OUTPUT_CAP_BYTES",
"default": "8192",
"description": "Cap on output bytes per host section (>=256)."
},
{
"name": "SSH_FLEET_PROBE_CONCURRENCY",
"default": "8",
"description": "Parallelism for ssh_probe."
},
{
"name": "SSH_FLEET_PROBE_MAX_HOSTS",
"default": "50",
"description": "Safety cap on the number of hosts in one probe."
},
{
"name": "SSH_FLEET_AUTH_TOKEN",
"isSecret": true,
"description": "Optional X-MCP-AUTH bearer token (only used by the http/sse transports)."
}
]
}
],
"repository": {
"url": "https://github.com/inhuman/mcp-ssh-fleet",
"source": "github"
},
"description": "Curated ssh_probe diagnostics and single-host ssh_exec over an allowlisted SSH fleet."
}