What is ssh-mcp-server CLAUDE.md?

Developer guidance for an SSH server that can manage remote computers. SSH is a secure connection method; the server supports commands, file transfers, interactive terminals, and port forwarding using stored credentials.

Use it when adding or changing remote command execution, copying files, syncing directories, managing interactive sessions, or storing SSH credentials.

It shows which tools exist and how credentials and remote sessions are organized before you modify the server.

How KinoThe-Kafkaesque/ssh-mcp-server configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to KinoThe-Kafkaesque/ssh-mcp-server. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/KinoThe-Kafkaesque/ssh-mcp-server/main/CLAUDE.md

Clone the repo

git clone --depth 1 https://github.com/KinoThe-Kafkaesque/ssh-mcp-server

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/kinothe-kafkaesque/ssh-mcp-server/claude-md/github.svg)](https://agentmods.dev/instructions/kinothe-kafkaesque/ssh-mcp-server/claude-md)

Your own site

<a href="https://agentmods.dev/instructions/kinothe-kafkaesque/ssh-mcp-server/claude-md"><img src="https://agentmods.dev/badge/instructions/kinothe-kafkaesque/ssh-mcp-server/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/kinothe-kafkaesque/ssh-mcp-server/claude-md"><img src="https://agentmods.dev/badge/instructions/kinothe-kafkaesque/ssh-mcp-server/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 872 This file is loaded in full into every session.

When invoked 872 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00872	$0.00872
Opus 5.5	$0.00349	$0.00349
Sonnet 5.5	$0.00174	$0.00174
Haiku 4.5	$0.00087	$0.00087

Measured 10d ago against content hash 51d0d43a31bf, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

ssh-mcp-server CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 118 lines

How it starts

The opening of the file, as written. The whole thing — 118 lines — stays where its author put it; the contents beside it link to each section on GitHub.

SSH MCP Server - Claude Code Guide

Project Overview

SSH MCP Server is a Model Context Protocol server that provides SSH-related tools for remote server management. It enables secure command execution, file transfers, interactive sessions, and port forwarding through stored credentials.

Architecture

src/index.ts          # Main server implementation (all tools)
~/ssh.db              # SQLite database for credentials (user home dir)

Available Tools

Credential Management

add_credential - Store SSH credentials (name, host, username, keyPath)
list_credentials - List all stored credentials
remove_credential - Delete a stored credential

Command Execution

ssh_exec - Execute command via SSH (uses shell, supports env)
ssh_exec_raw - Execute command as array (no shell escaping issues)

File Transfer

scp_copy - Copy single files (simpler, faster)
rsync_copy - Sync directories (incremental, better for large transfers)

Interactive Sessions

ssh_session_start - Start PTY session (for vim, htop, etc.)
ssh_session_send - Send input to session
ssh_session_read - Read session output
ssh_session_list - List active sessions
ssh_session_end - Close session

Port Forwarding

ssh_tunnel_start - Create SSH tunnel (local or remote)
ssh_tunnel_list - List active tunnels
ssh_tunnel_stop - Close tunnel

Key Dependencies

@modelcontextprotocol/sdk - MCP protocol implementation
ssh2 - Native SSH2 client for sessions, tunnels, and raw exec
sqlite3 / sqlite - Credential storage

Development

npm install          # Install dependencies
npm run build        # Compile TypeScript
npm start            # Run server

Testing

See TEST_SPEC.md for comprehensive test cases covering:

All tool functionality
Error handling and classification
Security validation
Integration test sequence

Security Notes

Credentials loaded from DB, not passed through tool arguments
Sensitive data (host, key path) hidden in error messages
Only credential names logged, not connection details
SSH keys validated for existence before use (~ expands to the home directory)
Server host keys pinned per credential on first connection (trust on first use); mismatches refused

Read the full file on GitHub · 118 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

10d ago Changed · +2 lines · +46 tokens per session 51d0d43a31bf
2mo ago First seen · 116 lines · 826 tokens per session scan A 225157a6bf78

Subscribe to this mod's changes

ssh-mcp-server CLAUDE.md is an instructions file published in the GitHub repository KinoThe-Kafkaesque/ssh-mcp-server (11 stars, last pushed 10d ago), licensed MIT. It adds 872 tokens to every session, about $0.0035 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

mcp mcp-server sqlite ssh

ssh-mcp-server CLAUDE.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
ssh-mcp-server CLAUDE.mdKinoThe-Kafkaesque/ssh-mcp-server	Instructions file	11	10d ago	MIT	A	872	Claude Code
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	yesterday	MIT	A	7,461	Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	yesterday	MIT	A	4,680	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	5,516	GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	3,093	GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness	Instructions file	274k	2d ago	MIT	A	4,313	Codex, OpenCode

ssh-mcp-server: Instructions file for Claude Code