Skip to main content

MCP server for SSH remote server management

Project description

cygnus-ssh-mcp

cygnus-ssh-mcp

The most powerful SSH MCP server for AI assistants

PyPI version Python License: GPL v3 Tests

Give Claude full control of your Linux, macOS, and Windows servers with 43 specialized tools

Installation · Quick Start · Features · Documentation


Why cygnus-ssh-mcp?

Most SSH MCP servers let you run commands. cygnus-ssh-mcp lets you manage servers.

What you get Basic SSH MCP cygnus-ssh-mcp
Run commands
Pre-configured hosts with aliases
Sudo support (Linux/macOS) Limited
Windows Server support
Background task management
Line-level file editing
Command history with output
Recursive directory operations
Archive create/extract
Full Unicode support ?

Installation

pip install cygnus-ssh-mcp

Or run without installing using uvx:

uvx cygnus-ssh-mcp

Quick Start

1. Create your hosts file

Create ~/.mcp_ssh_hosts.toml:

# Minimal (password auth) - only required fields
["user@server.example.com"]
password = "your_password"
port = 22

# With alias and sudo (most common setup)
["admin@production.example.com"]
password = "your_password"
port = 22
sudo_password = "sudo_pass"        # optional: for use_sudo operations
alias = "prod"                     # optional: connect by alias
description = "Production server"  # optional: for documentation

# SSH key authentication
["deploy@staging.example.com"]
keyfile = "~/.ssh/id_ed25519"
port = 22
alias = "staging"

# Windows Server (requires OpenSSH)
["administrator@winserver.example.com"]
password = "your_password"
port = 22
alias = "win-prod"

Required fields: port + (password OR keyfile) Optional fields: alias, description, sudo_password, key_passphrase

Host file locations: Default is ~/.mcp_ssh_hosts.toml. Falls back to ./mcp_ssh_hosts.toml if not found. Use --config /path/to/hosts.toml for a custom location.

2. Add to Claude Desktop

Edit your claude_desktop_config.json:

{
  "mcpServers": {
    "ssh": {
      "command": "cygnus-ssh-mcp"
    }
  }
}

Or with a custom hosts file location:

{
  "mcpServers": {
    "ssh": {
      "command": "cygnus-ssh-mcp",
      "args": ["--config", "/path/to/my_hosts.toml"]
    }
  }
}

3. Start managing servers

In Claude, just say:

"Connect to prod and show me the disk usage"

"Edit /etc/nginx/nginx.conf and change worker_connections to 2048"

"Find all .log files larger than 100MB in /var/log"


Platform Support

cygnus-ssh-mcp works from any client (Windows, Linux, macOS) to any target server:

Platform Support
From (Client) To (Target) Status
Windows Linux ✅ Tested
Windows Windows ✅ Tested
Linux Linux ✅ Tested
Linux Windows ✅ Tested
macOS Any ✅ Supported

Windows targets require OpenSSH Server installed and running.


Features

Host Configuration

Stop typing credentials. Connect by alias.

["admin@server.com"]
password = "secret"
port = 22
alias = "web"

Then just: "Connect to web"

Supports password, SSH key, and encrypted keys with passphrase.


Line-Level File Editing

Edit config files with surgical precision—no download/upload needed.

# Replace a single line
ssh_file_replace_line(
    file_path="/etc/nginx/nginx.conf",
    match_line="worker_connections 1024;",
    new_line="worker_connections 4096;"
)

# Insert lines after a match
ssh_file_insert_lines_after_match(
    file_path="/etc/hosts",
    match_line="# Custom entries",
    lines_to_insert=["192.168.1.10 app.local", "192.168.1.11 db.local"]
)

Safety built-in: Operations fail if the match isn't unique—no accidental mass edits.


Background Task Management

Launch long-running processes and check back later.

# Start a backup (returns immediately)
ssh_task_launch(command="./backup.sh", stdout_log="/var/log/backup.log")

# Check status anytime
ssh_task_status(pid=12345)  # → 'running' or 'exited'

# Kill if needed
ssh_task_kill(pid=12345, force=True)

Comprehensive Sudo Support

Every tool supports use_sudo. Password is handled automatically.

ssh_file_write(path="/etc/app/config.yaml", content="...", use_sudo=True)
ssh_dir_mkdir(path="/opt/myapp", use_sudo=True)
ssh_archive_extract(archive="/backup.tar.gz", dest="/", use_sudo=True)

Dual Timeout System

Never get stuck on a hanging command.

ssh_cmd_run(
    command="./long_script.sh",
    io_timeout=60.0,       # Kill if no output for 60s
    runtime_timeout=3600.0  # Kill if total time exceeds 1 hour
)

Full Unicode Support

Write and read files with emojis, international text, and special characters—on all platforms.

✅ ❌ 🎉 • → ≥ ∞ │ ┌ ─ 你好 مرحبا Привет café naïve

How it works: ssh_file_read and ssh_file_write use SFTP for direct binary transfer, completely bypassing shell encoding issues. This means Unicode works perfectly even on Windows targets where PowerShell's console encoding would normally corrupt special characters.


Windows Server Support

Full support for Windows targets with OpenSSH Server:

  • PowerShell & CMD command execution
  • Windows path handling (backslashes, drive letters, UNC paths)
  • Administrator detection — shows if session has elevated privileges
  • SFTP-based file operations — Unicode-safe, no encoding issues

Note: use_sudo is ignored on Windows (no sudo equivalent). For elevated operations, connect with an Administrator account.


And Much More...

  • Command history with output retention and pattern filtering
  • Recursive directory operations: search, copy, delete with dry-run
  • Archive operations: create and extract tar.gz
  • System info: OS version, memory, disk, CPU, uptime
  • Pattern search: regex and plain text in files

All 43 Tools

Connection & Host Management (10 tools)

Tool Description
ssh_conn_connect Connect using pre-configured host (by key or alias)
ssh_conn_is_connected Check if SSH connection is active
ssh_conn_status Get connection status (user, host, OS, cwd)
ssh_conn_host_info Get detailed system information
ssh_conn_verify_sudo Verify sudo access
ssh_conn_add_host Add new host to configuration
ssh_host_list List all configured hosts
ssh_host_remove Remove host from configuration
ssh_host_disconnect Disconnect current session
list_tools List all available tools

Command Execution (6 tools)

Tool Description
ssh_cmd_run Execute command with I/O and runtime timeouts
ssh_cmd_kill Terminate running command
ssh_cmd_check_status Check command status
ssh_cmd_output Retrieve output from command
ssh_cmd_history Get command history with filtering
ssh_cmd_clear_history Clear command history

Background Tasks (3 tools)

Tool Description
ssh_task_launch Launch command in background
ssh_task_status Check if task is running
ssh_task_kill Send signal to task

File Operations (12 tools)

Tool Description
ssh_file_stat Get file metadata
ssh_file_read Read file contents via SFTP (Unicode-safe)
ssh_file_write Create/overwrite/append file
ssh_file_copy Copy file
ssh_file_move Move or rename file
ssh_file_transfer Upload or download files
ssh_file_find_lines_with_pattern Search for pattern in file
ssh_file_get_context_around_line Get context around match
ssh_file_replace_line Replace single line
ssh_file_replace_line_multi Replace with multiple lines
ssh_file_insert_lines_after_match Insert lines after match
ssh_file_delete_line_by_content Delete line by content

Directory Operations (10 tools)

Tool Description
ssh_dir_mkdir Create directory
ssh_dir_remove Remove directory
ssh_dir_list_files_basic Basic directory listing
ssh_dir_list_advanced Recursive listing with metadata
ssh_dir_search_glob Search files by pattern
ssh_dir_search_files_content Search text in files
ssh_dir_calc_size Calculate directory size
ssh_dir_delete Delete with dry-run support
ssh_dir_batch_delete_files Batch delete by pattern
ssh_dir_copy Copy directory recursively

Archive Operations (2 tools)

Tool Description
ssh_archive_create Create tar.gz archive
ssh_archive_extract Extract archive

Documentation

Detailed guides available in docs/:


Use Cases

  • DevOps Automation — Deploy, configure, and manage servers via AI
  • Log Analysis — Search and analyze logs across multiple servers
  • Configuration Management — Edit configs with precision line operations
  • Backup & Recovery — Create archives, transfer files, restore backups
  • System Monitoring — Check status, verify services, monitor processes
  • Security Auditing — Search for sensitive patterns, verify configurations

License

GPL-3.0 — Free and open source.


Built by Cygnus Systems

Star this repo if you find it useful!

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cygnus_ssh_mcp-1.3.0.tar.gz (99.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cygnus_ssh_mcp-1.3.0-py3-none-any.whl (84.1 kB view details)

Uploaded Python 3

File details

Details for the file cygnus_ssh_mcp-1.3.0.tar.gz.

File metadata

  • Download URL: cygnus_ssh_mcp-1.3.0.tar.gz
  • Upload date:
  • Size: 99.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for cygnus_ssh_mcp-1.3.0.tar.gz
Algorithm Hash digest
SHA256 6f5dbd683f22e5a741fb19b0001e618cb5019afb2d3f7fe418d4fa4641cdbf7f
MD5 23638ac2d92039d16d81b493f0e4a386
BLAKE2b-256 0e0b029c80e6c3025068190b21fac70cc90c975415e66c17c1c8226de7511b62

See more details on using hashes here.

Provenance

The following attestation bundles were made for cygnus_ssh_mcp-1.3.0.tar.gz:

Publisher: publish.yml on cygnussystems/cygnus-ssh-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file cygnus_ssh_mcp-1.3.0-py3-none-any.whl.

File metadata

  • Download URL: cygnus_ssh_mcp-1.3.0-py3-none-any.whl
  • Upload date:
  • Size: 84.1 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for cygnus_ssh_mcp-1.3.0-py3-none-any.whl
Algorithm Hash digest
SHA256 37d51fb17bbe31e640ec6fb8ff6b6a444d14a6acf60f04b40450a2dee1982295
MD5 83d4e38b6af795a7c6c38922ddf2114f
BLAKE2b-256 732e6978e004ef9b4545776a276513a4a52c5712f689d8aafd8e5fb5a15a9952

See more details on using hashes here.

Provenance

The following attestation bundles were made for cygnus_ssh_mcp-1.3.0-py3-none-any.whl:

Publisher: publish.yml on cygnussystems/cygnus-ssh-mcp

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page