SSH MCP Server
An MCP (Model Context Protocol) server for SSH remote server management with SSH agent authentication support. Its README documents 5 tools, including ssh_connection_info, ssh_list_directory, ssh_download.
People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.
One of 28 MCP servers published from pulsemcp/mcp-servers. Stars and repository activity are shared across all of them. See all 28 →
VERIFIED ACTIVE
LAST COMMIT 2026-07-26 · VERIFIED 2026-08-25
MIT · TypeScript servers · how we verify → /methodology
01 · Install SSH
before you install - you'll need
Set SSH_HOST, SSH_USERNAME, SSH_AUTH_SOCK before connecting.
Claude Code
claude mcp add pulsemcp-mcp-servers-experimental-ssh -- npx -y ssh-agent-mcp-server Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"pulsemcp-mcp-servers-experimental-ssh": {
"command": "npx",
"args": [
"-y",
"ssh-agent-mcp-server"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions
license MIT - declared in the repository
npm package ssh-agent-mcp-server - unscoped; check the name against the project README before installing
registry vendor namespace com.pulsemcp - domain-verified with the official MCP registry
03 · What SSH can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
What you can build
With this server connected, an agent can get configured SSH connection information, list directory contents on remote server, download file from remote server via SFTP, and upload file to remote server via SFTP.
The 5 tools it gives your agent
Extracted from the project's README - what ssh lets an agent do.
- ssh_connection_info
- - Get configured SSH connection information
- ssh_list_directory
- - List directory contents on remote server
- ssh_download
- - Download file from remote server via SFTP
- ssh_upload
- - Upload file to remote server via SFTP
- ssh_execute
- - Execute shell command on remote server
Latest releases
[email protected] · 2026-07-10
Fixed · Gmail deep-links emitted by list_email_conversations, search_email_conversations, get_email_conversation, and send_email now use the form instead of Two independent defects made the old links fail to open the…
[email protected] · 2026-07-09
Added · create_oauth_client tool (keys group, write): mints a non-interactive Tailscale OAuth client (client_id + client_secret) with configurable scopes and ACL tags. Unlike create_auth_key - which only enrolls…
[email protected] · 2026-07-06
Added · set_account_balance_history (manage group): edit a manual account's recorded daily balance snapshots. Previously the server could read balance history (get_account_balance_history) but had no write counterpart…
04 · Who maintains SSH
ssh is maintained by pulsemcp. We track 29 MCP servers from pulsemcp - 28 actively maintained, 77 combined GitHub stars, oldest repo from May 2025. Full record: all servers from pulsemcp.
- playwright-stealth Browser automation using Playwright with optional stealth mode to bypass anti-bot protection. ★ 77
- slack MCP server for Slack - read/write messages, manage threads, and react to messages. ★ 77
- google-flights MCP server for searching Google Flights - flight search, date grid pricing, and airport lookup. ★ 77
- onepassword MCP server for interacting with 1Password via the CLI to read and manage credentials. ★ 77
- pointsyeah MCP server for searching award flights and travel deals via PointsYeah. ★ 77
- remote-filesystem MCP server for remote filesystem operations on cloud storage (Google Cloud Storage). ★ 77
05 · Facts
- repository
- github.com/pulsemcp/mcp-servers
- category
- security - actively maintained as of 2026-08-25.
- registry
- com.pulsemcp/ssh (active, first published 2026-05-18 · 2 versions)
- packages
- npm:ssh-agent-mcp-server
06 · SSH FAQ
Is SSH still maintained?
Yes - as of 2026-08-25, its last commit was 2026-07-26. We re-verify nightly.
What can SSH do?
With this server connected, an agent can get configured SSH connection information, list directory contents on remote server, download file from remote server via SFTP, and upload file to remote server via SFTP.
How do I install SSH?
Run `npx -y ssh-agent-mcp-server`. The README documents 3 environment variables (SSH_HOST, SSH_USERNAME, SSH_AUTH_SOCK) to set first. Set SSH_HOST, SSH_USERNAME, SSH_AUTH_SOCK before connecting. You can also paste the ready-made client config above.
Does SSH run locally?
Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to SSH
Alternatives to SSH
Maintained security servers if SSH isn't the fit.
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,102 · 2026-08-24
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 632 · 2026-08-24
- Decionis MCP Server Fail-closed policy gate for AI agent actions, with local evaluation and native pre-tool hooks. ★ 533 · 2026-08-24
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 470 · 2026-08-25
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 409 · 2026-08-23
- Bradesco MCP server for Bradesco - Pix, Cobrança (boleto), Arrecadação, Extrato (OAuth2 + mTLS) ★ 269 · 2026-08-12
Pairs well with
Servers that cover what SSH doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · Promptrejectormcp · Royal MCP · Hush · Janee · Audit
More TypeScript MCP servers · Twist · Vercel · Image Diff · Pulse Fetch · Pulse Subregistry · see all