vps-mcp

The server's primary function is to execute arbitrary shell commands (`execute_command`) and perform powerful file system operations like recursive deletion (`delete_item` using `rm -rf`) on a connected VPS. While the server's code itself does not appear to have internal vulnerabilities like 'eval' or hardcoded secrets (SSH credentials are passed as arguments to tools), the capabilities it exposes are inherently high-risk. If a malicious or unconstrained AI agent interacts with this server, it could lead to complete compromise, data loss, or unauthorized access on the target VPS. The server wraps commands with the current working directory, but an agent can bypass this by explicitly providing absolute paths or changing the directory first. The method of passing raw private key content as a string via tool arguments is also a security concern for handling sensitive credentials.