mcp-ssh-orchestrator

The server implements a robust defense-in-depth security model. Critical features include: extensive input validation (length limits, null byte/control character rejection), command normalization and chain parsing to prevent obfuscation/chaining bypasses, hard-banned dangerous shell patterns, strict file path validation (no path traversal, no symlinks/directories for secrets/keys), file size limits for configurations, mandatory SSH host key verification (CWE-295 mitigated), IP allowlists/blocklists, DNS rate limiting and caching for DoS prevention, non-root container execution, and comprehensive structured JSON audit logging for all policy decisions and executions. Sensitive information is sanitized from user-facing error messages.