shellguard
Active·★ 24·Apache-2.0·Updated 2026-08-21
ShellGuard is an MCP server that provides LLM agents with controlled, read-only bash access to remote servers over SSH. It parses and validates every command against an allowlist, blocking destructive operations with helpful suggestions. The LLM can connect, run diagnostics, inspect logs, query databases, and download files without manual context-switching.
#ai-agents#cli#devops#golang#llm#mcp#mcp-server#mcp-servers
01
Features
01SSH connection management with configurable authentication, host key verification, and native/system mode
02Read-only command execution with AST parsing, allowlist validation, and injection prevention
03Automated toolkit provisioning (ripgrep, jq, yq) to remote servers
04SFTP file download with 50MB limit
05Multi-platform MCP client support (Cursor, Claude Desktop, VS Code, Zed, etc.)
02
Compatibility
Cursor
Cursor
Verified via docs
Claude Desktop
Claude Desktop
Verified via docs
Claude Code
Claude Code
Verified via docs
OpenCode
OpenCode
Verified via docs
VS Code / GitHub Copilot
VS Code / Copilot
Verified via docs
Zed
Zed
Verified via docs
03
Quick start
1
$ curl -fsSL https://raw.githubusercontent.com/fawdyinc/shellguard/main/install.sh | sh
04
Use cases
↳Remote server diagnostics and troubleshooting without manual SSH sessions
↳Log file inspection and database querying via natural language
↳Automated incident response with read-only access guarantees
05
Alternatives
chiasmus★ 217
Chiasmus is an MCP server that gives language models access to formal verification
OnionClaw★ 375
Provide AI agents with full Tor network access and dark web data through a zero-config OpenClaw skill or standalone tool.
gram★ 274
Securely scale AI usage across your organization. Control plane for distribution of MCP, Skills, CLIs and more.
Comments
Log in to leave a comment
No comments yet. Be the first!