Shell MCP

A production-ready MCP server that enables AI assistants to execute shell commands, manage files, monitor system resources, and automate complex workflows with advanced features like stock tracking and web automation.

→ luciVuc/shell-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 1 credential: SUDO_PASSWORD

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configALLOW_SUDO— false When true, allows sudo prefixed commands

configAUDIT_LOG— false Logs all tool calls to logs/audit.log

configCOMMAND_TIMEOUT— "": "10000",

configHOST— 127.0.0.1 Host/IP to bind for HTTP transports

configHOSTNAME

configMCP_ENDPOINT— /mcp Endpoint path for Streamable HTTP transport

configPORT— 3000 HTTP port for SSE / Streamable HTTP transports

configSANDBOX_MODE— WITHOUT =true, YOUR AI ASSISTANT HAS THE SAME POWER AS YOU SITTING AT YOUR KEYBOARD.

🔐 secretSUDO_PASSWORD— Password for sudo -S (never logged)

configTRANSPORT— stdio Transport type: stdio, sse, or streamable-http

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/lucivuc-shell-mcp-i17jty)](https://m8ven.ai/mcp/lucivuc-shell-mcp-i17jty)

commit: 6bbb62101c5f7621ba56cbbddb3bb4742012a52e

code hash: 48cabf286229fa4f6a3d09b4d4db6c3928d6040c9a412a8e17be4b5d3342502f

verified: 6/15/2026, 2:17:32 PM

view raw JSON →