SSH — policy-gated remote access

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-10-26T00:04:40.761532Z",
      "publishedAt": "2026-10-26T00:04:40.761532Z",
      "statusChangedAt": "2026-10-26T00:04:40.761532Z"
    }
  },
  "server": {
    "name": "io.github.tufantunc/ssh-mcp",
    "title": "SSH — policy-gated remote access",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "2.22.0",
    "packages": [
      {
        "version": "2.22.0",
        "transport": {
          "type": "stdio"
        },
        "identifier": "ssh-mcp",
        "registryType": "npm",
        "environmentVariables": [
          {
            "name": "SSH_MCP_PASSWORD",
            "isSecret": true,
            "description": "Password for the configured profile; a per-profile SSH_MCP_<PROFILE>_PASSWORD takes precedence. Credentials are never accepted as CLI arguments."
          },
          {
            "name": "SSH_MCP_KEY",
            "format": "filepath",
            "description": "Path to the private key file to authenticate with — the path, not the key material. A per-profile SSH_MCP_<PROFILE>_KEY takes precedence."
          },
          {
            "name": "SSH_MCP_PASSPHRASE",
            "isSecret": true,
            "description": "Passphrase for an encrypted private key."
          },
          {
            "name": "SSH_MCP_SUDO_PASSWORD",
            "isSecret": true,
            "description": "Password the sudo tool escalates with, when the policy in force allows the privileged class."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/tufantunc/ssh-mcp",
      "source": "github"
    },
    "websiteUrl": "https://github.com/tufantunc/ssh-mcp#readme",
    "description": "Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log."
  }
}