
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@nl4ever/sshmcp
Advanced tools
SSH MCP Server — Let AI manage remote servers via SSH with zero-token SFTP file transfer, proxy support, and multi-server management using Model Context Protocol
Let AI manage your servers — with zero-token file transfers.
A Model Context Protocol (MCP) server that gives AI the power to manage remote servers via SSH — execute commands, transfer files, and manage multi-server environments with per-connection proxy support.
File transfers go directly through SFTP between your machine and the server. The AI only sends a file path — it never sees or processes the file content. Transfer a 10GB database dump at the same token cost as a 1KB config file: near zero.
You: "Deploy the build to production"
AI: upload_directory("./dist", "/var/www/app") ← just the path
|
MCP Server: local disk --SFTP--> remote server ← direct transfer
|
AI: "Deployed successfully (142 files, 38MB)" ← only the result
One command. No config files to edit.
# Claude Code
claude mcp add sshmcp npx -- -y @nl4ever/sshmcp
# Or install globally first
npm install -g @nl4ever/sshmcp
claude mcp add sshmcp sshmcp
Then just tell Claude:
"Connect to my server 192.168.1.100 as root and check disk usage"
Claude will call add_server + connect + execute("df -h") automatically.
npx @nl4ever/sshmcp
npm install -g @nl4ever/sshmcp
git clone https://github.com/NikolaNddTesla/ssh-mcp-server.git
cd ssh-mcp-server
npm install && npm run build
node dist/index.js
claude mcp add sshmcp sshmcp
Add to claude_desktop_config.json:
{
"mcpServers": {
"sshmcp": {
"command": "npx",
"args": ["-y", "@nl4ever/sshmcp"]
}
}
}
Go to Settings > MCP and add:
{
"mcpServers": {
"sshmcp": {
"command": "npx",
"args": ["-y", "@nl4ever/sshmcp"]
}
}
}
Any MCP-compatible client can use this server via stdio transport:
{
"mcpServers": {
"sshmcp": {
"command": "npx",
"args": ["-y", "@nl4ever/sshmcp"]
}
}
}
Or if installed globally:
{
"mcpServers": {
"sshmcp": {
"command": "sshmcp"
}
}
}
Connection & Servers
| Tool | What it does |
|---|---|
connect | Connect to a server |
disconnect | End current session |
test_connection | Test connectivity without switching active connection |
list_servers | Show all configured servers |
get_server | View server details (passwords auto-masked) |
add_server | Add or update a server |
delete_server | Remove a server |
Remote Execution
| Tool | What it does |
|---|---|
execute | Run any shell command (with configurable timeout) |
write_file | Write text content to a remote file |
File Transfer (Zero Token Cost)
| Tool | What it does |
|---|---|
upload_file | Upload a local file to the server |
upload_directory | Recursively upload an entire directory |
download_file | Download a file from the server |
Proxy Management
| Tool | What it does |
|---|---|
list_proxies | Show all configured SOCKS proxies |
add_proxy | Add a SOCKS4/5 proxy |
delete_proxy | Remove a proxy |
All settings persist in ~/.ssh-mcp/config.json. Configure once, use across all sessions.
add_server({
server_id: "prod",
name: "Production",
host: "192.168.1.100",
port: 22,
username: "root",
password: "your-password"
})
add_proxy({ proxy_id: "us", name: "US Proxy", host: "proxy.example.com", port: 1080 })
add_server({
server_id: "overseas",
name: "Overseas Server",
host: "1.2.3.4",
port: 22,
username: "root",
password: "your-password",
proxy: "us"
})
| Method | Parameter | Use Case |
|---|---|---|
| Password | password | Most common |
| Private Key File | private_key | .pem / id_rsa on your machine |
| Private Key Inline | private_key_content | Paste key directly (CI/CD friendly) |
| SSH Agent | use_agent: true | Use system ssh-agent, no password needed |
| Keyboard Interactive | keyboard_interactive: true | OTP / 2FA |
| Jump Host | jump_host | Connect through a bastion server |
Issues and PRs are welcome! If you find a bug or have a feature request, please open an issue.
MIT
FAQs
SSH MCP Server — Let AI manage remote servers via SSH with zero-token SFTP file transfer, proxy support, and multi-server management using Model Context Protocol
The npm package @nl4ever/sshmcp receives a total of 108 weekly downloads. As such, @nl4ever/sshmcp popularity was classified as not popular.
We found that @nl4ever/sshmcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.