Shell Command MCP Server - Secure MCP Server by ALMC Security 2025

Shell Command MCP Server

View on GitHub

Shell Command MCP Server

Go server implementing Model Context Protocol (MCP) for executing shell commands.

Features

  • Execute shell commands using bash or zsh
  • List previous command executions
  • Safety features to limit allowed commands
  • Configure allowed command set for security

Note: The server will only allow execution of commands specified via the allowedCommands parameter or all commands if configured with "*".

API

Tools

  • execute_command

    • Execute a shell command
    • Input:
      • command (string): The command to execute
      • shell (string, optional): The shell to use (bash or zsh, defaults to bash)
    • Output:
      • Command output with both stdout and stderr
      • Exit code
      • Execution time
  • list_recent_commands

    • List recently executed commands
    • Input:
      • limit (integer, optional): Number of commands to return (defaults to 10)
    • Output:
      • List of recently executed commands with timestamps and status
  • list_allowed_commands

    • List all commands that the server is allowed to execute
    • No input required
    • Returns:
      • List of allowed commands or "*" if all commands are allowed

Usage with Claude Desktop

Install the server

go install github.com/gamunu/mcp-unix-shell

Add this to your claude_desktop_config.json:

{
  "mcpServers": {
    "shell": {
      "command": "mcp-unix-shell",
      "args": [
        "--allowed-commands=ls,cat,echo,find"
      ]
    }
  }
}

To allow all commands (use with caution):

{
  "mcpServers": {
    "shell": {
      "command": "mcp-unix-shell",
      "args": [
        "--allowed-commands=*"
      ]
    }
  }
}

Security Considerations

When using this MCP server, please consider:

  1. Only allow commands you trust - a restrictive allowlist is recommended
  2. Avoid allowing commands that could modify system settings or access sensitive data
  3. The server runs with the permissions of the user running Claude Desktop
  4. Command output is sent back to the LLM, so be mindful of sensitive information

License

This MCP server is licensed under the Apache License 2.0.

Related in Development - Secure MCP Servers

ServerSummaryActions
ast-grep MCPAn experimental Model Context Protocol (MCP) server that provides AI assistants with powerful struct...View
AI Develop Assistant协助AI开发者进行智能化需求分析与架构设计的MCP工具View
MCP Documentation ServerA customized version of the MCP documentation server that enables integration between LLM applicatio...View
MCP SandboxView
CAD-Query MCP ServerA Model Context Protocol (MCP) server that provides CAD generation and verification tools for Claude...View
USolverA Model Context Protocol server that exposes tools for solving combinatorial, convex, integer progra...View