MCP servers for SSH
77 servers from the official MCP Registry that work with SSH. 57 need no API key and 6 can run hosted. Each row shows the security checks, the secrets asked for and an install command.
SSH MCP servers 77
Now showing are unlisted. These entries didn't pass our listing filter: no source repo, a very short or duplicated description, or a publisher with 100+ servers. Same automated checks, shown as-is. How we check
| Type | Secrets | Version | Actions | ||||
|---|---|---|---|---|---|---|---|
★ 840 io.github.tufantunc/ssh-mcp Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log. | 6/82 warnings | 71health of 100 | npmRuns locally | 3secrets asked | 2.22.0 | ||
★ 584 io.github.levnikolaevich/hex-ssh-mcp Token-efficient SSH MCP with hash-verified files and persistent tmux sessions. 14 tools. | 6/71 warning | 76health of 100 | npmRuns locally | Noneno keys asked | 1.9.2 | ||
★ 525 io.github.bvisible/mcp-ssh-manager SSH for AI agents: commands, files, backups and health, with approval, a vault and an audit trail | 6/71 warning | 72health of 100 | npmRuns locally | Noneno keys asked | 4.0.1 | ||
★ 81 com.pulsemcp/ssh MCP server for SSH remote server management with SSH agent authentication support. | 7/7All passed | 65health of 100 | npmRuns locally | 1secret asked | 0.1.5 | ||
★ 13 io.github.mindstone/mcp-server-replit-ssh Read, write, list, and check files on Replit projects over SSH/SFTP, plus SSH key setup. | 7/7All passed | 56health of 100 | npmRuns locally | Noneno keys asked | 0.2.2 | ||
★ 8 io.github.gelse/ssh-mcp MCP gateway for controlled SSH access with per-client auth, command policies, and audit logging. | 4/4All passed | 61health of 100 | DockerRuns locally | 1secret asked | 0.3.0 | ||
★ 8 io.github.Areso/safe-ssh-mcp A secured scoped SSH MCP server for executing safe read-only diagnostic DevOps / SysOps commands | 7/7All passed | 53health of 100 | PyPIRuns locally | Noneno keys asked | 0.1.15 | ||
★ 8 io.github.cygnussystems/cygnus-ssh-mcp SSH-based MCP control of remote Linux, macOS, and Windows servers -- 46 purpose-built tools. | 6/71 warning | 56health of 100 | PyPIRuns locally | Noneno keys asked | 1.5.1 | ||
★ 6 io.github.sandbanks/agentic_ssh High-performance (Rust), token-efficient, and asynchronous SSH orchestrations for AI agents. | 3/41 warning | 53health of 100 | CargoRuns locally | Noneno keys asked | 0.6.0 | ||
| 6/71 warning | 52health of 100 | npmRuns locally | Noneno keys asked | 0.18.0 | |||
★ 6 io.github.hypnosis/ssh-mcp-server Modern SSH for AI agents — cloud servers to BusyBox routers, with destructive commands blocked. | 6/71 warning | 62health of 100 | npmRuns locally | Noneno keys asked | 2.3.3 | ||
★ 5 io.github.klNuno/fast-mcp-ssh SSH, SFTP, PTY shells, host-to-host copies and remote screenshots for AI agents. One Rust binary. | 3/41 warning | 54health of 100 | CargoRuns locally | Noneno keys asked | 0.5.1 | ||
★ 4 io.github.Echoqili/ssh-licco SSH Model Context Protocol Server - Enable SSH functionality for AI models | 7/7All passed | 62health of 100 | PyPIRuns locally | 1secret asked | 2.7.3 | ||
★ 4 io.github.Zw-awa/ssh-session-mcp Shared SSH PTY runtime for MCP clients with viewer, input lock, async tracking, and policy rules. | 7/7All passed | 45health of 100 | npmRuns locally | 1secret asked | 2.7.1 | ||
★ 3 io.github.d00mus/mcp-ssh-gateway SSH terminals for AI agents: stateful shells, exit codes the moment a command ends, router CLIs. | 6/71 warning | 52health of 100 | PyPIRuns locally | Noneno keys asked | 7.0.0 | ||
★ 3 io.github.jordanburke/ssh-client-mcp-server MCP server for executing shell commands on remote hosts via SSH. | 7/7All passed | 62health of 100 | npmRuns locally | Noneno keys asked | 1.5.1 | ||
★ 2 io.github.oaslananka/ssh-mcp-pro Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP. | 6/71 warning | 55health of 100 | npmRuns locally | 1secret asked | 1.2.3 | ||
★ 1 io.github.xlbbb-cn/mcp-ssh-exec-cmd Stdio MCP server for SSH host storage and remote command execution with a connection-pool monitor. | 7/7All passed | 55health of 100 | npmRuns locally | 1secret asked | 0.1.3 | ||
★ 1 io.github.Chris221/ftp-ssh-mcp Work with a remote host over FTP/FTPS/SFTP, SSH, and MySQL. | 6/71 warning | 55health of 100 | npmRuns locally | Noneno keys asked | 1.0.3 | ||
★ 1 io.github.the-nine-nation/remote-ssh-mcp Persistent stateful remote SSH sessions for AI agents via MCP + OpenSSH. | 7/7All passed | 61health of 100 | npmRuns locally | Noneno keys asked | 0.2.0 | ||
★ 1 io.github.Easton-OU/rootpilot-ssh-diagnose Read-only SSH server diagnostics via a fixed 38-command whitelist; secrets redacted, no write path. | 7/7All passed | 43health of 100 | npmRuns locally | Noneno keys asked | 0.1.2 | ||
io.github.daidaiJ/2native-ssh-mcp SSH-based MCP server for remote command execution and file transfer. Credentials stay local. | 5/61 warning | 49health of 100 | MCPBRuns locally | Noneno keys asked | 1.7.0 | ||
★ 330 dev.emisar/emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. | 3/3All passed | 64health of 100 | RemoteHosted | Noneno keys asked | 0.53.0 | ||
★ 309 io.github.wiresage/mikrotik-mcp MCP server for MikroTik routers: firewall, NAT, routing, DHCP, DNS, WireGuard and more via SSH. | 7/7All passed | 80health of 100 | PyPIRuns locally | 2secrets asked | 0.26.2.0 | ||
★ 64 io.github.danmartuszewski/hop SSH connection manager with MCP server for AI-assisted operations across servers. | 2/2All passed | 70health of 100 | RemoteRuns locally | Noneno keys asked | 1.1.0 | ||
★ 60 io.github.open-mcp-ai/termcp An MCP server that lets AI agents act like a human at a real terminal, local or over SSH. | 4/4All passed | 65health of 100 | DockerRuns locally | Noneno keys asked | 0.2.8 | ||
★ 34 io.github.Thunder-Compute/thunder-compute GPU cloud platform — create, manage, and monitor instances, snapshots, SSH keys, and billing. | 3/3All passed | 66health of 100 | RemoteHosted | Noneno keys asked | 1.0.0 | ||
★ 31 dev.servonaut/servonaut Manage AWS, Hetzner, OVH and SSH servers: status, logs, CloudWatch, IP bans, safe command exec. | 6/71 warning | 67health of 100 | PyPIRuns locally | Noneno keys asked | 2.30.0 | ||
★ 27 io.github.Strom-Capital/mcp-server-db2i Read-only SQL queries and schema inspection for IBM Db2 for i over ODBC, JT400 or Mapepire (SSH). | 7/7All passed | 65health of 100 | npmRuns locally | 1secret asked | 3.8.3 | ||
★ 24 io.github.antonorlov/mcp-postgres-server MCP server for PostgreSQL: local, Docker, RDS, Neon, Supabase, or behind an SSH bastion. | 6/82 warnings | 57health of 100 | npmRuns locally | 4secrets asked | 0.3.1 | ||
★ 24 io.github.knewstimek/agent-tool Encoding-aware, indentation-smart file tools for AI coding agents with SSH, SFTP, and 20+ tools. | 3/41 warning | 55health of 100 | MCPBRuns locally | Noneno keys asked | 0.4.2 | ||
★ 20 io.github.raychao-oao/pty-mcp Interactive PTY sessions over MCP: local shells, SSH, serial ports, and persistent remote sessions. | 3/41 warning | 54health of 100 | MCPBRuns locally | Noneno keys asked | 0.2.3 | ||
★ 19 io.github.amol21p/interactive-terminal MCP server for real interactive terminal sessions — REPLs, SSH, databases, Docker | 5/72 warnings | 37health of 100 | npmRuns locally | Noneno keys asked | 1.0.7 | ||
★ 13 io.github.luisgf/infrabroker SSH & Kubernetes access broker for AI agents; the model never touches a credential. | 4/4All passed | 70health of 100 | DockerRuns locally | Noneno keys asked | 3.1.3 | ||
★ 12 io.github.blinkingbit-oss/execkit Stateful, structured, safe shell sessions for AI agents over local, SSH, and Docker. | 7/7All passed | 62health of 100 | PyPIRuns locally | Noneno keys asked | 0.10.1 | ||
★ 12 io.github.mkpvishnu/terminal-mcp MCP server for interactive terminal sessions — SSH, REPLs, database CLIs, TUI apps | 7/7All passed | 57health of 100 | PyPIRuns locally | Noneno keys asked | 0.3.1 | ||
★ 11 io.github.NikolaNddTesla/sshmcp SSH server management with zero-token SFTP file transfer and SOCKS proxy support | 7/7All passed | 48health of 100 | npmRuns locally | Noneno keys asked | 1.2.1 | ||
★ 10 io.github.DustinTrap/kvm-pilot Smart hands for your AI agents - write-capable KVM+BMC+SSH MCP server: gated, verified, audited. | 7/7All passed | 59health of 100 | PyPIRuns locally | 2secrets asked | 1.0.1 | ||
★ 9 io.github.ermoluk/mcp-warden Local credential broker: agents call APIs, SSH and DBs via scoped presets; secrets stay in keychain. | 3/41 warning | 48health of 100 | CargoRuns locally | Noneno keys asked | 0.5.1 | ||
★ 6 io.github.nucleusv/linux-mcp-daemon AI agent access to Linux servers without SSH: scoped tools, per-call isolation, root only if granted | 3/3All passed | 50health of 100 | RemoteHosted | Noneno keys asked | 0.5.1 | ||
★ 5 io.github.astandrik/local-ydb-mcp Operate local-ydb deployments through local or SSH-backed MCP tools. | 7/7All passed | 71health of 100 | npmRuns locally | Noneno keys asked | 0.19.0 | ||
★ 5 io.github.varaprasadreddy9676/remote-bridge Sync code to remote servers via SSH/rsync and deploy from any AI IDE. | 6/71 warning | 38health of 100 | npmRuns locally | Noneno keys asked | 0.1.5 | ||
★ 4 io.github.iTophua/iterminal MCP Server for iTerminal SSH Connection Manager - Control SSH servers through Claude. | 7/7All passed | 63health of 100 | npmRuns locally | Noneno keys asked | 2.1.0 | ||
★ 4 io.github.emog33k/winrdp-mcp Zero-config server to provision and administer any Windows RDP box over WinRM/SSH/SMB. | 7/7All passed | 61health of 100 | PyPIRuns locally | 1secret asked | 0.1.3 | ||
★ 4 io.github.Islomzoda/termada Persistent, policy-controlled missions for AI agents operating local and SSH environments. | 4/4All passed | 42health of 100 | DockerRuns locally | Noneno keys asked | 0.12.0 | ||
★ 4 io.github.QiuwenZheng/interminal Lightweight MCP server providing terminal access (SSH & local shells) for AI assistants. | 7/7All passed | 44health of 100 | PyPIRuns locally | Noneno keys asked | 1.0.4 | ||
★ 3 io.github.Furowu/brokre AI-safe credential broker for MCP — run saved SSH/MySQL/psql aliases; passwords never reach AI. | 5/72 warnings | 53health of 100 | npmRuns locally | Noneno keys asked | 0.2.36 | ||
★ 3 io.github.den-indance/network-diagram-mcp Network topology editor — Claude builds diagrams via MCP. nmap/CSV import, one-click SSH. | 7/7All passed | 46health of 100 | npmRuns locally | Noneno keys asked | 1.0.7 | ||
★ 3 io.github.teefloo/asuswrt-mcp Secure AsusWRT router administration via SSH — 42+ tools, guarded mutations | 7/7All passed | 41health of 100 | PyPIRuns locally | 1secret asked | 0.1.1 | ||
★ 2 dev.agentmetal/agentmetal Rent a Linux VPS from an AI agent: provision, SSH in, run commands. Pay USDC (x402) or card. | 7/7All passed | 54health of 100 | npmRuns locally | Noneno keys asked | 0.3.4 |
Showing 1 to 50 of 77. These are the most recently updated; search or pick a category for the rest.
SSH MCP servers: questions people ask
Which SSH MCP server should I use?
Among community builds, the most-starred on GitHub are SSH — policy-gated remote access (★ 840), Hex SSH (★ 584) and mcp-ssh-manager (★ 525). If you want one that passed every check, ssh did.
Are SSH MCP servers safe to install?
On registry checks, 48 of 77 come out clean. We also read the code or live tool list of 61 of them without running anything, and 21 raised a warning worth reading, such as an install script or text aimed at the AI. Treat a pass as "nothing found", and give any server the least access that works.
Which SSH MCP servers need no API key?
57 of the 77 list no secrets, including Hex SSH, mcp-ssh-manager and Replit SSH. Some still ask you to sign in once they run.
Who makes these SSH MCP servers?
No company-verified one yet (checked 31 Oct 2026). All 77 SSH servers are community builds from 75 different publishers, so check who is behind one before you hand it a SSH key.
How fresh are these SSH MCP servers?
29 of the 77 were updated in the 30 days before 31 Oct 2026. The latest was Conning, on 27 October.
Do I have to install a SSH MCP server?
6 can run hosted, so you only paste a URL into Claude, Cursor or VS Code. The 73 that run locally ship as 40 npm, 19 PyPI, 5 Docker, 4 MCPB bundle and 3 Cargo packages.
More topics: every “MCP server for…” page. Prefer a skill? Claude skills for this (50).