MCP CheckMCP servers for shell commands
Every shell commands server in the official MCP Registry, 48 in all, ranked by how closely it fits. 39 work without an API key and 1 come from the company itself. Each row shows the security checks, the secrets asked for and an install command.
shell commands MCP servers 48
Now showing are unlisted. These entries didn't pass our listing filter: no source repo, a very short or duplicated description, or a publisher with 100+ servers. Same automated checks, shown as-is. How we check
| Type | Secrets | Version | Actions | ||||
|---|---|---|---|---|---|---|---|
| 7/7All passed | 65health of 100 | npmRuns locally | Noneno keys asked | 1.2.0 | |||
io.github.Sheldon1999/cldsh-Cloudinary-Shell Unix-style shell, scriptable CLI and MCP server for Cloudinary asset management. | 7/7All passed | 54health of 100 | npmRuns locally | Noneno keys asked | 2.0.1 | ||
★ 10k io.github.wonderwhy-er/desktop-commander MCP server for terminal commands, file operations, and process management | 6/71 warning | 87health of 100 | npmRuns locally | Noneno keys asked | 0.3.1 | ||
★ 5.3k io.github.pollinations/computer A private persistent computer: files and a bash shell that survive between runs. | 3/3All passed | 76health of 100 | RemoteHosted | Noneno keys asked | 1.0.0 | ||
★ 124 io.github.AppachiTech/suvadu Local shell history and AI agent sessions over MCP: search commands, failures, risk and git changes | 3/41 warning | 54health of 100 | CargoRuns locally | Noneno keys asked | 0.5.2 | ||
★ 76 io.github.gradion-ai/ipybox Unified execution environment for Python code, shell commands, and programmatic MCP tool calls | 7/7All passed | 59health of 100 | PyPIRuns locally | Noneno keys asked | 0.9.2 | ||
 ★ 64 io.github.Servosity/autotask-mcp Every Autotask entity at the command line, plus a local SQLite mirror that answers ticket-aging | 4/51 warning | 63health of 100 | MCPBRuns locally | 3secrets asked | 0.1.9 | ||
★ 28 io.github.NORTHTEKDevs/ghost Verified desktop control for agents on Windows and Linux: apps with no API, windows, shell, browser. | 5/61 warning | 52health of 100 | MCPBRuns locally | 1secret asked | 0.23.4 | ||
★ 23 io.github.maxkle1nz/m1nd The shell around your coding agent: a neuro-symbolic code graph with calibrated trust, via MCP. | 7/7All passed | 67health of 100 | npmRuns locally | Noneno keys asked | 1.5.0 | ||
★ 20 io.github.IronSecCo/ironclaw Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container. | 4/4All passed | 52health of 100 | DockerRuns locally | 1secret asked | 0.1.557 | ||
★ 18 io.github.Muvon/octofs Standalone MCP filesystem tools server — view, edit, shell, workdir. | 6/71 warning | 67health of 100 | npmRuns locally | Noneno keys asked | 0.21.0 | ||
★ 15 io.github.yaminbkk/nexusmem Local-first memory for AI coding agents: shell history with exit codes, git diffs, docs, MCP. | 7/7All passed | 62health of 100 | npmRuns locally | Noneno keys asked | 0.10.5 | ||
 ★ 13 io.github.paypal/paypal-mcp-server Official PayPal A command line tool for setting up PayPal MCP server | 7/7All passed | 45health of 100 | npmRuns locally | 1secret asked | 1.8.1 | ||
★ 12 io.github.blinkingbit-oss/execkit Stateful, structured, safe shell sessions for AI agents over local, SSH, and Docker. | 7/7All passed | 62health of 100 | PyPIRuns locally | Noneno keys asked | 0.10.1 | ||
| 5/61 warning | 57health of 100 | MCPBRuns locally | Noneno keys asked | 0.4.6 | |||
★ 7 io.github.soren-achebe/backscroll Search, retrieve, and diff the full output of past terminal commands recorded locally by backscroll. | 3/41 warning | 49health of 100 | MCPBRuns locally | Noneno keys asked | 0.13.1 | ||
★ 6 io.github.raghibrm/remote-pc-mcp Drive a PC over MCP: shell, files, processes, system stats, screenshots, mouse and keyboard. | 7/7All passed | 54health of 100 | PyPIRuns locally | 1secret asked | 0.6.2 | ||
★ 6 io.github.kascada/logmcp MCP server — read-only log access for AI assistants, without giving AI shell access. | 2/2All passed | 51health of 100 | RemoteRuns locally | Noneno keys asked | 0.7.7 | ||
★ 5 io.github.navig-run/navig Local operator tools over your own sessions, knowledge, files, shell and devices. | 6/71 warning | 69health of 100 | PyPIRuns locally | Noneno keys asked | 3.27.5 | ||
★ 5 io.github.aurelio-nakamura/cmdxray Offline MCP server: explains shell commands token-by-token and flags destructive ones for AI agents. | 6/71 warning | 65health of 100 | npmRuns locally | Noneno keys asked | 0.26.1 | ||
★ 3 ai.oddessentials/agent-guild See and steer Claude Code, Codex, Antigravity, Grok, Docker Agent and shell sessions in Agent Guild. | 4/4All passed | 66health of 100 | npmRuns locally | Noneno keys asked | 1.14.1 | ||
★ 3 io.github.onlsol/relay-remotify-mcp Run shell commands on remote computers with optional per-command approval, using only curl and bash. | 6/71 warning | 57health of 100 | npmRuns locally | 1secret asked | 0.6.2 | ||
★ 3 io.github.Aitejiu/jev Jev judgments for agents: injection scanning, shell risk gating, ranking | 7/7All passed | 53health of 100 | PyPIRuns locally | 1secret asked | 0.1.2 | ||
★ 3 io.github.jordanburke/ssh-client-mcp-server MCP server for executing shell commands on remote hosts via SSH. | 7/7All passed | 62health of 100 | npmRuns locally | Noneno keys asked | 1.5.1 | ||
★ 2 io.github.hugolsramos01-bit/mcp-agentic-server Local coding tools for ChatGPT Developer Mode and MCP clients with safe editing and shell execution. | 5/72 warnings | 52health of 100 | npmRuns locally | Noneno keys asked | 1.8.2 | ||
★ 2 io.github.RohitYajee8076/backburner Run long shell commands as background tasks: start them, keep working, collect the results later | 7/7All passed | 49health of 100 | PyPIRuns locally | Noneno keys asked | 1.0.0 | ||
★ 2 io.github.mrorigo/bash-command-mcp Sophisticated bash command MCP server that runs and manages shell execution. | 4/4All passed | 43health of 100 | npmRuns locally | Noneno keys asked | 1.0.0 | ||
 ★ 1 io.github.leidarljos/ljos Local memory, a work tracker and a shell-command guard shared by coding agents on one machine. | 3/41 warning | 41health of 100 | CargoRuns locally | Noneno keys asked | 0.34.1 | ||
★ 1 io.github.compscidr/sair Run Android tests on real phones, or lease one: install, shell, screenshot, logcat. | 5/61 warning | 58health of 100 | MCPBRuns locally | 1secret asked | 0.1.34 | ||
★ 1 io.github.MFaizR77/turnback Undo a coding agent turn, including shell commands and untracked files. | 7/7All passed | 63health of 100 | npmRuns locally | Noneno keys asked | 0.9.1 | ||
★ 1 io.github.thealidev/dmcps DMCPS: Highly secure, isolated MCP server environment giving AI agents sandboxed shell access. | 2/2All passed | 45health of 100 | RemoteRuns locally | Noneno keys asked | 1.0.0 | ||
★ 1 io.github.SoWhatI/vaultshell Injects secrets into shell commands at exec time; plaintext never reaches the LLM context | 4/4All passed | 51health of 100 | DockerRuns locally | Noneno keys asked | 0.1.2 | ||
★ 1 io.github.omarmohelal/sechelix Evidence-first security review of authorized repositories. Read-only, root-confined, no shell. | 6/71 warning | 55health of 100 | PyPIRuns locally | Noneno keys asked | 0.3.0 | ||
★ 1 io.github.hs3434/sandbox-env-mcp Persistent Docker/SSH sandbox for AI agents: shell exec, file ops, audit log. | 6/71 warning | 47health of 100 | PyPIRuns locally | Noneno keys asked | 0.3.1 | ||
 com.soflution/kilnshell Fast, telemetry-free local MCP: shell, files, search, processes, PDF, Excel and Word for agents. | 3/41 warning | 49health of 100 | MCPBRuns locally | Noneno keys asked | 1.0.4 | ||
io.github.ai-ronin-systems/makefile-mcp Expose trusted GNU Make targets as governed MCP tools without a generic shell. | 6/71 warning | 47health of 100 | PyPIRuns locally | Noneno keys asked | 0.3.0 | ||
io.github.huseyincig/nc-mcp Remote MCP server exposing your Node Command fleet (files, shell, processes, browser) to AI hosts. | 3/3All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 0.26.125 | ||
io.github.gilesdawe/tokei-agent Control your Tokei (tokei.io) pre-launch and waitlist campaigns from AI agents and the command line. | 7/7All passed | 52health of 100 | npmRuns locally | 1secret asked | 0.3.8 | ||
io.github.velsrocky/vtai-agent System-automation agent MCP server for opencode/claude/pi: guarded shell, dry-run-first, audited. | 6/71 warning | 46health of 100 | PyPIRuns locally | Noneno keys asked | 0.7.0 | ||
io.github.Kyzenkms/solisk-pc-mcp Approval-gated PC control for AI clients: 97 tools for files, shell, GUI input, clipboard and audio. | 7/7All passed | 60health of 100 | npmRuns locally | Noneno keys asked | 1.0.1 | ||
io.github.dockndevai/mcp-macos Observe & operate a Mac — files, processes, apps, shell, AppleScript, GUI — safe by default. | 7/7All passed | 49health of 100 | npmRuns locally | Noneno keys asked | 0.2.1 | ||
 io.github.burrowbox/burrowbox Persistent Linux computers for AI agents: desktop, signed-in browser, vault, apps and shell. | 3/3All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 1.0.0 | ||
io.github.Blacksp1d3r/runner-mcp Self-hosted MCP for controlled AI development and staging without a general-purpose remote shell. | 6/71 warning | 57health of 100 | PyPIRuns locally | Noneno keys asked | 0.1.3 | ||
io.github.tylerscomic-lab/dockerfile-audit-mcp Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images. | 3/3All passed | 45health of 100 | RemoteHosted | Noneno keys asked | 1.0.0 | ||
io.github.dockndevai/mcp-mac-control Full macOS control — drive a Mac like a human: shell, AppleScript, files, and human-like GUI. | 7/7All passed | 55health of 100 | npmRuns locally | Noneno keys asked | 0.3.1 | ||
io.studiomeyer/stdio-shellguard Defense-in-depth for MCP stdio servers: shell-injection guard, AST audit CLI, RCE blocking. | 7/7All passed | 56health of 100 | npmRuns locally | Noneno keys asked | 0.1.2 | ||
io.github.Atharva-Jayappa/blast-scope Contextual blast-radius scoring for shell commands an AI agent is about to run | 6/71 warning | 48health of 100 | PyPIRuns locally | Noneno keys asked | 0.6.1 | ||
io.github.MukundaKatta/shellquote-mcp Safe shell argument escaping for bash, cmd.exe, and PowerShell. | 7/7All passed | 46health of 100 | npmRuns locally | Noneno keys asked | 0.1.0 |
Showing 1 to 48 of 48. These are the most recently updated; search or pick a category for the rest.
shell commands MCP servers: questions people ask
Which shell commands MCP server should I use?
Start with the official one, paypal-mcp-server, since it comes from the company itself. Among community builds, the most-starred on GitHub is Shell Exec (★ 9). If you want one that passed every check, Shell Exec did.
Are shell commands MCP servers safe to install?
On registry checks, 28 of 48 come out clean. We also read the code or live tool list of 33 of them without running anything, and 11 raised a warning worth reading, such as an install script or text aimed at the AI. Treat a pass as "nothing found", and give any server the least access that works.
Which shell commands MCP servers need no API key?
39 of the 48 list no secrets, including Shell Exec, cldsh-Cloudinary-Shell and Desktop Commander. Some still ask you to sign in once they run.
Does shell commands make its own MCP server?
Yes. paypal-mcp-server is published under a namespace the official MCP Registry verified to the company. The other 47 come from 46 independent publishers.
How do I add a shell commands MCP server to Claude?
To connect shell commands through Shell Exec, use this Claude Desktop (npm) entry: {
"mcpServers": {
"shell-exec-mcp": {
"command": "npx",
"args": [
"-y",
"shell-exec-mcp@1.2.0"
],
"env": {
"MCP_TRANSPORT": "<your value>"
}
}
}
}. Pin the version shown before you rely on it.
Do I have to install a shell commands MCP server?
4 can run hosted, so you only paste a URL into Claude, Cursor or VS Code. The 44 that run locally ship as 20 npm, 12 PyPI, 6 MCPB bundle, 2 Cargo and 2 Docker packages.
More topics: every “MCP server for…” page. Prefer a skill? Claude skills for this (170).