mcp-ssh-manager

mcp-ssh-manager gives Claude Code and OpenAI Codex 37 tools for managing multiple SSH connections: executing commands, transferring files, running database operations, creating and restoring backups, and monitoring host health. It runs as a stdio-spawned process only, configured through a TOML file (default ~/.codex/ssh-config.toml) that lists each target server's host and credentials plus an optional per-server security mode of unrestricted, readonly or restricted, the last requiring every command to match an allow-pattern and no deny-pattern.

The maintainer is Jeremy Christillin (GitHub account bvisible), an individual User account; the npm package lists the same account as its sole maintainer. Christillin's own business, a Swiss web and app agency operating as bvisible.ch and now branded Neoservice, markets web development, e-commerce and custom software work and does not list SSH tooling or MCP as one of its services. Because the server fronts SSH, a protocol the publisher does not own or vend, and the publisher is an individual rather than SSH's vendor, authority is community.

No spec revision is named in the README, changelog or package metadata; the @modelcontextprotocol/sdk ^1.30.0 dependency is a version range rather than a stated revision, so spec_status is unknown. The repository has published four security advisories between 2026-07-12 and 2026-08-28, all four command-injection defects, one of them in read-only monitoring tools that bypassed the readonly and restricted security modes: GHSA-4jx9-2fwj-pg4j (high, CVE-2026-77383, fixed in 3.6.7), GHSA-qwwm-vrm9-4mw8 (high, CVSS 8.8, fixed in 3.8.5), GHSA-796j-h5q5-jx6p (critical, CVSS 9.6, fixed in 3.8.5) and GHSA-m793-whw6-f537 (critical, CVSS 9.6, fixed in 3.8.5). All four are patched in the current latest release, 3.8.5.