What is ssh-mcp AGENTS.md?

An AGENTS.md instruction file describing how AI coding tools should work with the blackaxgit/ssh-mcp repository.

Use it when Codex or another AGENTS.md-aware tool is developing, testing, building, or releasing this Python SSH MCP server.

It records the repository layout, configuration, testing commands, and project-specific facts so agents do not invent procedures.

How blackaxgit/ssh-mcp configures Codex and OpenCode

Reuse

Borrowing it

Nothing to install: this file belongs to blackaxgit/ssh-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/blackaxgit/ssh-mcp/main/AGENTS.md

Clone the repo

git clone --depth 1 https://github.com/blackaxgit/ssh-mcp

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/blackaxgit/ssh-mcp/agents-md/github.svg)](https://agentmods.dev/instructions/blackaxgit/ssh-mcp/agents-md)

Your own site

<a href="https://agentmods.dev/instructions/blackaxgit/ssh-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/blackaxgit/ssh-mcp/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/blackaxgit/ssh-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/blackaxgit/ssh-mcp/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 8,982 This file is loaded in full into every session.

When invoked 8,982 The same file — it is already loaded in full.

Security scan C 1 finding. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.08982	$0.08982
Opus 5.5	$0.03593	$0.03593
Sonnet 5.5	$0.01796	$0.01796
Haiku 4.5	$0.00898	$0.00898

Measured 7d ago against content hash 7f94faae9468, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade C, and why

ssh-mcp AGENTS.md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

- **The dangerous-command list is a tripwire, not a security boundary.** `README.md` and `SECURITY.md` say so explicitly, and base64 / hex-escape / homoglyph / `$(...)` bypasses are acknowledged. Do not describe it as a

AGENTS.md · 225 lines

How it starts

The opening of the file, as written. The whole thing — 225 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

AI coding assistant context for this repository. Read natively by Codex, Cursor, Copilot, Gemini CLI, Windsurf, and 20+ AGENTS.md-aware tools. Claude Code users: load via @AGENTS.md in CLAUDE.md.

Command sources: .github/workflows/ci.yml (the gates), .github/workflows/release.yml (build/publish), CONTRIBUTING.md, pyproject.toml. There is no Makefile — copy commands from CI rather than inventing them.

Overview

Purpose: SSH MCP server that lets AI assistants execute commands on remote servers.
Owner: TODO: team/maintainer
Type: app — published as a PyPI wheel (uvx blc-ssh-mcp) and a container image (ghcr.io/blackaxgit/ssh-mcp). The PyPI distribution is blc-ssh-mcp, not ssh-mcp — that name belongs to an unrelated project this repo has never owned; see the comment above name in pyproject.toml. The import package is still ssh_mcp and the image is still .../ssh-mcp.
Stacks: Python 3.11-3.15, uv + hatchling, asyncssh, MCP SDK, Starlette/uvicorn (HTTP transport only)
Deploy targets: N/A — this is a tool operators run themselves, not a hosted service
Version: src/ssh_mcp/__init__.py is the single source (hatchling reads it). Currently 0.9.2. 0.7.0 shipped 2026-09-06 (the MCP SDK v2 migration) and is the first release published under a reviewer-gated pypi environment; 0.6.0, 0.6.1 and 0.6.2 all shipped 2026-07-26. CHANGELOG.md [Unreleased] is where post-0.9.2 work accrues.

What this tool does matters for how you treat it. Every tool call runs a shell command or transfers a file on a remote host. A bug here is not a crashed request; it is an unintended command on someone's infrastructure, or a write to the operator's own machine.

Commands

uv sync --locked --extra dev        # setup. --locked is required; see Gotchas
uv run pytest                       # full suite (861 tests, seconds)
uv run pytest tests/test_ssh.py::TestRedactSecrets -v          # one class
uv run pytest 'tests/test_ssh.py::TestRedactSecrets::<test_name>' -v   # one test
uv run pytest -k "confinement" -v                              # by keyword

Read the full file on GitHub · 225 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

7d ago Changed 7f94faae9468
20d ago Changed 9fa1fe730dfb
1mo ago Changed · -2 tokens per session 6a32fdd8be55
1mo ago Changed · +10 tokens per session 26b86d78918e
2mo ago Changed · +27 lines · +3,189 tokens per session scan A → C c7d01722877c
2mo ago First seen · 198 lines · 5,785 tokens per session scan A 7142c86c7e62

Subscribe to this mod's changes

ssh-mcp AGENTS.md is an instructions file published in the GitHub repository blackaxgit/ssh-mcp (5 stars, last pushed 4d ago), licensed MPL-2.0. It adds 8,982 tokens to every session, about $0.0359 per session on Opus 5.5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

DevOps and cloud ai automation claude infrastructure mcp

ssh-mcp AGENTS.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
ssh-mcp AGENTS.mdblackaxgit/ssh-mcp	Instructions file	5	4d ago	MPL-2.0	C	8,982	Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	yesterday	MIT	A	7,461	Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	yesterday	MIT	A	4,680	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	5,516	GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	3,093	GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness	Instructions file	274k	2d ago	MIT	A	4,313	Codex, OpenCode

ssh-mcp: Instructions file for Codex