Quick MCP Shell
一个供 Amazon Quick 使用的本地 stdio MCP Server,可执行本机 shell 命令和 Python 脚本。
安全提示: 命令以运行本工具的用户权限执行,可访问该用户有权限访问的文件和网络。只连接可信的本地 MCP 客户端;不要暴露到公网或交给不可信输入。
安装 uv
Amazon Quick 使用 uvx 启动本工具。安装 uv 并确认 uvx --version 可用:
- Windows:
winget install --id=astral-sh.uv -e - macOS:
brew install uv - Linux:
curl -LsSf https://astral.sh/uv/install.sh | sh
配置 Amazon Quick
打开 Settings → Capabilities → MCP Servers,在配置文件的 mcpServers 中加入以下配置:
{
"shell": {
"command": "uvx",
"args": ["--from", "quick-mcp-shell==0.4.0", "quick-mcp-shell"]
}
}
配置文件位置:Windows C:\Users\<用户名>\.aws\amazonq\mcp.json;macOS/Linux ~/.aws/amazonq/mcp.json。保存后重启 Amazon Quick。
使用
run_command(command, cwd?, timeout?):执行 shell 命令。Windows 上通过cmd.exe执行,不是 PowerShell;macOS/Linux 上通过/bin/sh执行。run_python_script(script, cwd?, timeout?):执行 Python 脚本。使用本工具自带的隔离解释器,你项目里安装的第三方包(如 pandas)不可用;需要项目依赖时请改用run_command。
不传 cwd 时使用当前用户的主目录,相对路径也相对主目录解析;传入绝对路径时可指定任意存在的目录。timeout 默认 30 秒,最大值默认 60 秒;超时会终止整个进程树。
可选环境变量:
| 变量 | 默认值 | 作用 |
|---|---|---|
MCP_SHELL_MAX_TIMEOUT_SECONDS |
60 |
单次调用允许的最大超时秒数。 |
MCP_SHELL_MAX_OUTPUT_CHARS |
100000 |
返回结果的最大字符数,超出时保留首尾两段。 |
检查启动环境:
uvx --from quick-mcp-shell==0.4.0 quick-mcp-shell doctor
安全边界
本工具不限制命令访问的目录。命令可以切换目录或使用绝对路径;若需要真正的访问隔离,请使用受限系统账户、容器或操作系统权限控制。
Metadata
Release files for quick-mcp-shell 0.4.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| quick_mcp_shell-0.4.0.tar.gz | 7.8 kB | Without provenance | Details for quick_mcp_shell-0.4.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| quick_mcp_shell-0.4.0-py3-none-any.whl | Python 3 | none | any | Details for quick_mcp_shell-0.4.0-py3-none-any.whl |
Total release size: 16.0 kB
Release files / quick_mcp_shell-0.4.0.tar.gz
| Download URL | quick_mcp_shell-0.4.0.tar.gz |
|---|---|
| Size | 7.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
79590a6892f4e942863fc5db67f053a0b442fcecf5dbe211235735ac14080c26
|
|
BLAKE2b-256 checksum How to use checksums |
b08cc54a7812632f3e7be2e38af5d29816482759753e6f3281259fe4eb3c4a74
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.12.1 {"installer":{"name":"uv","version":"0.12.1","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":null,"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Release files / quick_mcp_shell-0.4.0-py3-none-any.whl
| Download URL | quick_mcp_shell-0.4.0-py3-none-any.whl |
|---|---|
| Size | 8.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
f4d635ed83b14c0f54b6b269d09902c3bc7ec2f9098cf54ecf340704b18929ba
|
|
BLAKE2b-256 checksum How to use checksums |
7b40753f0e0cbfe874eb37604f680018427c012bf903522f36209adf23196d55
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.12.1 {"installer":{"name":"uv","version":"0.12.1","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":null,"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Security for quick-mcp-shell 0.4.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.