What is ssh-mcp-server CLAUDE.md?

Developer guidance for an SSH server that can manage remote computers. SSH is a secure connection method; the server supports commands, file transfers, interactive terminals, and port forwarding using stored credentials.

Use it when adding or changing remote command execution, copying files, syncing directories, managing interactive sessions, or storing SSH credentials.

It shows which tools exist and how credentials and remote sessions are organized before you modify the server.

How KinoThe-Kafkaesque/ssh-mcp-server configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to KinoThe-Kafkaesque/ssh-mcp-server. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/KinoThe-Kafkaesque/ssh-mcp-server/main/CLAUDE.md

Clone the repo

git clone --depth 1 https://github.com/KinoThe-Kafkaesque/ssh-mcp-server

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/kinothe-kafkaesque/ssh-mcp-server/claude-md/github.svg)](https://agentmods.dev/instructions/kinothe-kafkaesque/ssh-mcp-server/claude-md)

Your own site

<a href="https://agentmods.dev/instructions/kinothe-kafkaesque/ssh-mcp-server/claude-md"><img src="https://agentmods.dev/badge/instructions/kinothe-kafkaesque/ssh-mcp-server/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/kinothe-kafkaesque/ssh-mcp-server/claude-md"><img src="https://agentmods.dev/badge/instructions/kinothe-kafkaesque/ssh-mcp-server/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 826 This file is loaded in full into every session.

When invoked 826 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00826	$0.00826
Opus 5	$0.00413	$0.00413
Sonnet 5	$0.00165	$0.00165
Haiku 4.5	$0.00083	$0.00083

Measured 9d ago against content hash 225157a6bf78, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

ssh-mcp-server CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 116 lines

How it starts

The opening of the file, as written. The whole thing — 116 lines — stays where its author put it; the contents beside it link to each section on GitHub.

SSH MCP Server - Claude Code Guide

Project Overview

SSH MCP Server is a Model Context Protocol server that provides SSH-related tools for remote server management. It enables secure command execution, file transfers, interactive sessions, and port forwarding through stored credentials.

Architecture

src/index.ts          # Main server implementation (all tools)
~/ssh.db              # SQLite database for credentials (user home dir)

Available Tools

Credential Management

add_credential - Store SSH credentials (name, host, username, keyPath)
list_credentials - List all stored credentials
remove_credential - Delete a stored credential

Command Execution

ssh_exec - Execute command via SSH (uses shell, supports env)
ssh_exec_raw - Execute command as array (no shell escaping issues)

File Transfer

scp_copy - Copy single files (simpler, faster)
rsync_copy - Sync directories (incremental, better for large transfers)

Interactive Sessions

ssh_session_start - Start PTY session (for vim, htop, etc.)
ssh_session_send - Send input to session
ssh_session_read - Read session output
ssh_session_list - List active sessions
ssh_session_end - Close session

Port Forwarding

ssh_tunnel_start - Create SSH tunnel (local or remote)
ssh_tunnel_list - List active tunnels
ssh_tunnel_stop - Close tunnel

Key Dependencies

@modelcontextprotocol/sdk - MCP protocol implementation
ssh2 - Native SSH2 client for sessions, tunnels, and raw exec
sqlite3 / sqlite - Credential storage

Development

npm install          # Install dependencies
npm run build        # Compile TypeScript
npm start            # Run server

Testing

See TEST_SPEC.md for comprehensive test cases covering:

All tool functionality
Error handling and classification
Security validation
Integration test sequence

Security Notes

Credentials loaded from DB, not passed through tool arguments
Sensitive data (host, key path) hidden in error messages
Only credential names logged, not connection details
SSH keys validated for existence before use

Read the full file on GitHub · 116 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

9d ago First seen · 116 lines · 826 tokens per session scan A 225157a6bf78

Subscribe to this mod's changes

ssh-mcp-server CLAUDE.md is an instructions file published in the GitHub repository KinoThe-Kafkaesque/ssh-mcp-server (10 stars, last pushed 4mo ago), licensed MIT. It adds 826 tokens to every session, about $0.0041 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

mcp mcp-server sqlite ssh

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,296 tokens

codex AGENTS.md

AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.

openai/codex · 5,153 tokens

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 6,785 tokens

ssh-mcp-server: Instructions file for Claude Code