MCP Tools DirectoryAbout this integration
Persistent stateful remote SSH sessions for AI agents via MCP + OpenSSH.
- Transport
- stdio
- Authentication
- unknown
- Initial setup
- credentials
- Runtime
- unattended
- Evidence
- documented
- Version
- 0.2.0
- Package
- @zyluo/remote-ssh-mcp
- Last compatibility test
- Not independently tested
Connect your agent
@zyluo/remote-ssh-mcpQualified from pinned publisher README and package manifest only. The package, SSH client, and remote hosts were not executed. Remote commands can have irreversible effects; the publisher calls for least privilege and a narrow allowlist.
Capabilities: discover allowed SSH hosts, open persistent SSH sessions, run remote shell commands, observe and interrupt long-running commands, list and close sessions
Connected profiles
Additional details
io.github.the-nine-nation/remote-ssh-mcp
Source ↗ · Checked 2026-09-170.2.0
Source ↗ · Checked 2026-09-17CC0-1.0; package licenses are separate
Source ↗ · Checked 2026-09-17npm
Source ↗ · Checked 2026-09-17@zyluo/remote-ssh-mcp
Source ↗ · Checked 2026-09-200.2.2
Source ↗ · Checked 2026-09-20The publisher documents a long-lived local stdio server whose session IDs retain remote working directory and environment state, with idle reaping and bounded session counts.
Source ↗ · Checked 2026-09-20Authentication is delegated to the local OpenSSH client through SSH config, known hosts, agents, keys, ProxyJump, or hardware keys. This SSH mechanism is broader than the native API-key, client-credentials, and OAuth taxonomy, so auth remains unknown; no secrets are accepted as MCP tool arguments.
Source ↗ · Checked 2026-09-20Run the package with npx or its remote-ssh-mcp executable, then connect only through exact Host aliases discovered from SSH config or added by SSH_MCP_ALLOWED_HOSTS.
Source ↗ · Checked 2026-09-20Publisher documentation reviewed; package and integration endpoint not executed or independently security-audited.
Source ↗ · Checked 2026-09-20