tmux-mcp-server
by audibleblink
Overview
This MCP server enables AI assistants to manage local tmux sessions, including creating, listing, and killing sessions, windows, and panes, as well as interacting with panes by sending commands and capturing output.
Installation
npx @audibleblink/tmux-mcp-serverSecurity Notes
The server uses `child_process.execAsync` to run `tmux` commands, directly interpolating user-provided arguments (e.g., session names, window names, start directories, pane indices) into shell command strings. This design is highly susceptible to command injection vulnerabilities. For example, if a session name input is `my_session"; rm -rf / #`, it could lead to arbitrary command execution on the host system. While `tmux_send_keys` attempts to escape double quotes, this escaping is not consistently applied to all arguments in all tools, and is insufficient to prevent all forms of command injection. There are no other obvious security flaws like hardcoded secrets or 'eval' usage, but the command injection risk is critical.
Similar Servers
awesome-mcp-servers
A comprehensive directory for discovering various Model Context Protocol (MCP) servers, clients, and frameworks across different domains, facilitating integration with AI assistants.
mcp-image
The MCP server enables AI assistants to generate and edit images using Google's Gemini 3 Pro Image, with intelligent prompt optimization provided by Gemini 2.0 Flash.
mcp-server-infranodus
Integrates InfraNodus knowledge graph and text network analysis capabilities into LLM workflows and AI assistants for generating knowledge graphs, detecting content gaps, identifying topics, and performing SEO analysis.
mcp-dblp
Provides a Model Context Protocol (MCP) server for Large Language Models (LLMs) to access, search, and manage publications and BibTeX entries from the DBLP computer science bibliography database.