fast-mcp-ssh — Claude Code MCP server: features and setup
Gives AI agents SSH access to configured hosts for command execution, file operations, and remote desktop captures. Connects over MCP stdio.
Open on GitHubWhat fast-mcp-ssh does
The server runs one-off commands and persistent PTY sessions that retain the current directory and environment variables. SFTP handles file transfers, including copies between configured hosts. Tools also capture remote desktops and create local TCP forwards.
Access rules can block operations or ask the user to confirm them; read_only prevents actions that look like writes. Calls are recorded in ~/.fast-mcp-ssh/audit.log, with credentials scrubbed. These checks help prevent accidents, but they do not defend against a model controlled by an attacker.
Install from source with cargo install fast-mcp-ssh. Host settings live in ~/.fast-mcp-ssh/hosts.toml, and the MCP configuration starts fast-mcp-ssh over stdio. Remote screenshots depend on one of the supported capture utilities being available on the host.
What it helps with
- run a command on a remote host
- keep shell state between commands in a PTY session
- copy a file between configured hosts
- capture a remote desktop image
- restrict SSH actions with access rules
Example prompts for the agent
- Connect to a configured host and run
uname -a. - Open a PTY session on the host, change directories, and show the current path.
- Copy a file from one configured host to another using SFTP.
How to install fast-mcp-ssh
Install
The MCP registry has no launch command for it: see the repository README
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about fast-mcp-ssh
How do I install fast-mcp-ssh in Claude Code?
Install it from source with cargo install fast-mcp-ssh. Then add an MCP server entry using type stdio and command fast-mcp-ssh.
What does fast-mcp-ssh do?
It gives an agent SSH tools for commands, persistent PTY sessions, file operations, and remote desktop captures. It can also copy files between configured hosts.
How does fast-mcp-ssh restrict risky operations?
Patterns can block calls or require confirmation, while read_only = true blocks actions that appear to write. Calls go to an audit log with credentials scrubbed.
