ssh-client-mcp

The server provides direct remote command execution and file transfer capabilities via SSH/SFTP, which inherently grants significant access to target machines. The implementation uses the robust 'ssh2' library and does not contain 'eval' or intentional obfuscation. Sudo password handling is designed to prevent logging, but passing it as part of the command string can lead to brief exposure in process lists on the remote server. Credentials (password or private key path) are loaded from configuration files, environment variables, or CLI arguments; users are responsible for securing these sources. While the 'ConfigManager' has a 'saveConfig' method that, as written, would include passwords if called, the main 'index.ts' entry point does not expose configuration modification tools to the AI, mitigating this risk for typical tool usage. The primary security consideration lies in the powerful access granted to the AI agent and careful management of SSH credentials by the user.