A secured MCP server for safe remote server management via SSH with command filtering, network device support, and bulk connection management.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
process.env. You'll be asked to provide them before it can run.MCP_PORTSSE_PORTSSH_ALLOW_SUDO— true, false true Allow sudo commandsSSH_AUDIT_DIR— path ./audit Directory for daily audit_YYYY-MM-DD.jsonl filesSSH_AUDIT_ENABLED— true, false true Write a per-command session audit (command + full output) to JSONLSSH_BLACKLIST— comma-separated or JSON - Override blacklist commandsSSH_DISABLE_PAGER— PROFILE_<NAME>_DISABLE_PAGER=false turns off pager suppression for connections using that profile, overriding the global default.SSH_ENABLE_LARGE_OUTPUT— true, false false Offload oversized command output to an upload endpoint and return a URI instead of inline textSSH_FAILED_CONNECTIONS_LOG— file path ./ssh-failed-connections.json /var/log/ssh-failed.jsonlSSH_FILE_UPLOAD_ENDPOINT— URL - POST target for large output. Receives {content, filename}, must return {file_id, artifact_uri}SSH_FILTER_MODE— "": "blacklist",SSH_HOST_BLACKLIST— comma-separated IPs - Blacklist of allowed host IPsSSH_HOST_FILTER_MODE— whitelist, blacklist, disabled disabled Host filtering modeSSH_HOST_WHITELIST— comma-separated IPs - Whitelist of allowed host IPsSSH_IDLE_TIMEOUT— seconds 120 Idle connection timeoutSSH_LOG_BLOCKED— true, false true Log blocked commands to stderrSSH_LOG_FILE— Path to log file (none)SSH_LOG_LEVEL— DEBUG, INFO, WARN, ERROR INFOSSH_MAX_OUTPUT_LENGTH— integer (chars) 10000 Output size threshold above which output is offloadedSSH_MAX_PAGER_PAGES— integer 1000 Safety cap on auto-paged pages per commandSSH_MCP_CONFIG— file path - Path to config JSON fileSSH_PAGER_ADVANCE_KEY— string " " (space) Key sent to advance to the next pager pageSSH_PAGER_REGEX— regex string built-in Override the pattern used to detect a pager promptSSH_WHITELIST— comma-separated or JSON - Override whitelist commands[](https://m8ven.ai/mcp/marian-craciunescu-ssh-mcp-server-secured-6xgnty)