What is mcp-ssh AGENTS.md?

Project instructions for an MCP SSH server, a local tool that lets an AI agent connect to other computers using SSH, a standard secure remote-login method. They cover setup, use, and server operation.

Use them when installing, configuring, using, or maintaining the mcp-ssh project.

They give the agent the repository-specific rules needed to run remote commands and manage SSH connections correctly.

How DBeidachazi/mcp-ssh configures Codex and OpenCode

Reuse

Borrowing it

Nothing to install: this file belongs to DBeidachazi/mcp-ssh. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/DBeidachazi/mcp-ssh/main/AGENTS.md

Clone the repo

git clone --depth 1 https://github.com/DBeidachazi/mcp-ssh

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/dbeidachazi/mcp-ssh/agents-md/github.svg)](https://agentmods.dev/instructions/dbeidachazi/mcp-ssh/agents-md)

Your own site

<a href="https://agentmods.dev/instructions/dbeidachazi/mcp-ssh/agents-md"><img src="https://agentmods.dev/badge/instructions/dbeidachazi/mcp-ssh/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/dbeidachazi/mcp-ssh/agents-md"><img src="https://agentmods.dev/badge/instructions/dbeidachazi/mcp-ssh/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 2,939 This file is loaded in full into every session.

When invoked 2,939 The same file — it is already loaded in full.

Security scan D 2 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin 100% copy Near-identical to another mod in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.02939	$0.02939
Opus 5.5	$0.01176	$0.01176
Sonnet 5.5	$0.00588	$0.00588
Haiku 4.5	$0.00294	$0.00294

Measured 2mo ago against content hash 65b02731d5e3, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade D, and why

mcp-ssh AGENTS.md scanned grade D with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

- **Sudo Support**: Automatic password handling for sudo commands on Unix/Linux hosts

Reaches for credential fileshighPrivilege escalation

SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.

key_filename="~/.ssh/id_rsa"

Origin

This is a copy

100% identical to mcp-ssh-session AGENTS.md — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

AGENTS.md · 348 lines

How it starts

The opening of the file, as written. The whole thing — 348 lines — stays where its author put it; the contents beside it link to each section on GitHub.

MCP SSH Session

An MCP (Model Context Protocol) server that enables AI agents to establish and manage persistent SSH sessions, allowing them to execute commands on remote hosts while maintaining connection state.

Overview

This MCP server provides tools for AI agents to:

Establish persistent SSH connections to remote hosts
Execute commands within existing sessions
Manage multiple concurrent SSH sessions
Track and close active connections

Features

Persistent Sessions: SSH connections are reused across multiple command executions, reducing connection overhead
SSH Config Support: Automatically reads and uses settings from ~/.ssh/config, including aliases, hosts, ports, users, and identity files
Multi-host Support: Manage connections to multiple hosts simultaneously
Automatic Reconnection: Dead connections are detected and automatically re-established
Thread-safe: Safe for concurrent operations
Flexible Authentication: Supports both password and key-based authentication
Network Device Support: Automatic enable mode handling for routers and switches (Cisco, Juniper, etc.)
Sudo Support: Automatic password handling for sudo commands on Unix/Linux hosts
Interactive Shell Handling: Detects and responds to password prompts automatically
Command Interruption: Allows for gracefully stopping long-running or stuck commands by sending a Ctrl+C signal to the active session
Interactive PTY Mode (v0.2.0+): Terminal emulation enabled by default for better command completion detection and interactive program support
Automatic Session Recovery: Detects and recovers from corrupted session state caused by stuck commands or pager issues

Installation

Using uvx:

uvx mcp-ssh-session

Using uv:

uv venv
source .venv/bin/activate  # On Windows: .venv\Scripts\activate
uv pip install -e .

Usage

Running the Server

uvx mcp-ssh-session

Available Tools

Read the full file on GitHub · 348 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 348 lines · 2,939 tokens per session scan D 65b02731d5e3

Subscribe to this mod's changes

mcp-ssh AGENTS.md is an instructions file published in the GitHub repository DBeidachazi/mcp-ssh (0 stars, last pushed 2mo ago), licensed MIT. It adds 2,939 tokens to every session, about $0.0118 per session on Opus 5.5. A static security scan graded it D with 2 findings (asks for root, reaches for credential files). It is 100% identical to mcp-ssh-session AGENTS.md, differing in 0 lines, and is treated as a copy.

Backend and APIs

mcp-ssh AGENTS.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
mcp-ssh AGENTS.mdDBeidachazi/mcp-ssh	Instructions file	0	2mo ago	MIT	D	2,939	Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	yesterday	MIT	A	7,461	Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	yesterday	MIT	A	4,680	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	5,516	GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	3,093	GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness	Instructions file	274k	2d ago	MIT	A	4,313	Codex, OpenCode

mcp-ssh: Instructions file for Codex