Skip to main content
Glama
Jambozx

OnlineCyberTools MCP (280+ filterable tools)

by Jambozx
OverviewSchemaRelated ServersScoreDiscussions
JavaScript
Remote

linux_ssh_config_generator

Read-onlyIdempotent

Generate OpenSSH client (~/.ssh/config) and server (sshd_config) configuration text from structured host and daemon definitions. Supports custom settings, presets, and security warnings for weak options.

Instructions

SSH Config Generator. Generate an OpenSSH client config (~/.ssh/config) and/or server config (/etc/ssh/sshd_config) as text from structured host and daemon definitions. It only BUILDS the config text — it never writes ~/.ssh/config or sshd_config, edits a file, connects to any host, or touches the SSH agent. "operation" selects the mode: "generate" (default) renders config from "input"; "presets" returns ready-made example requests (Mozilla-hardened server, bastion, jump-host client, LAN, CIS Level 2, dev). For generate, "input.mode" picks which sides to emit. Client Host blocks support HostName, User, Port, IdentityFile, ProxyJump (bastion/jump host), ForwardAgent, LocalForward, and ControlMaster multiplexing; server settings cover Port, PermitRootLogin, password/pubkey auth, Allow/Deny users and groups, forwarding, idle timeouts, MaxAuthTries, and Ciphers/KexAlgorithms/ MACs — emitting security warnings for weak choices. Use this for OpenSSH connection and daemon config; use linux_web_server_config_generato

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
operationNoMode selector. "generate" builds config from "input"; "presets" ignores "input" and returns example requests.generate
inputNoRequired when operation=generate. May also be supplied bare (its fields at the top level alongside operation).

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
successNoAlways true on a 200 response.
operationNoThe operation echoed back (generate or presets).
resultNoFor generate, the generated config and analysis. For presets, a "presets" array of example requests.

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. Changed9 schema fields changedv0.5.1
    • addedInput schema / additionalProperties
      Added value: +false
    • addedInput schema / properties / input
      Added value: +{
+  "additionalProperties": false,
+  "description": "Required when operation=generate. May also be supplied bare (its fields at the top level alongside operation).",
+  "properties": {
+    "clientHosts": {
+      "description": "Client Host blocks for ~/.ssh/config. Used when mode is \"client\" or \"both\". Entries with neither alias nor hostname are dropped.",
+      "items": {
+        "additionalProperties": false,
+        "properties": {
+          "alias": {
+            "description": "Host alias matched on the ssh command line; defaults to hostname if omitted.",
+            "type": "string"
+          },
+          "controlMaster": {
+            "description": "Connection multiplexing master.",
+            "enum": [
+              "auto",
+              "no",
+              "yes"
+            ],
+            "type": "string"
+          },
+          "controlPath": {
+            "description": "ControlPath socket for multiplexed connections, e.g. ~/.ssh/cm-%r@%h:%p.",
+            "type": "string"
+          },
+          "controlPersist": {
+            "description": "ControlPersist duration after last client disconnects, e.g. 10m.",
+            "type": "string"
+          },
+          "forwardAgent": {
+            "description": "ForwardAgent — warns when true (agent-hijack risk).",
+            "type": "boolean"
+          },
+          "hostname": {
+            "description": "Real DNS name or IP to connect to (HostName); defaults to alias if omitted.",
+            "type": "string"
+          },
+          "identitiesOnly": {
+            "description": "IdentitiesOnly yes — use only this key, ignore agent keys.",
+            "type": "boolean"
+          },
+          "identityFile": {
+            "description": "Private key path (IdentityFile), e.g. ~/.ssh/id_ed25519.",
+            "type": "string"
+          },
+          "localForward": {
+            "description": "LocalForward entries, each \"localPort remoteHost:remotePort\".",
+            "items": {
+              "type": "string"
+            },
+            "type": "array"
+          },
+          "port": {
+            "description": "Remote TCP port (Port directive); default 22.",
+            "maximum": 65535,
+            "minimum": 1,
+            "type": "integer"
+          },
+          "proxyJump": {
+            "description": "ProxyJump bastion/jump-host chain (user@host:port).",
+            "type": "string"
+          },
+          "remoteForward": {
+            "description": "RemoteForward entries, each \"remotePort localHost:localPort\".",
+            "items": {
+              "type": "string"
+            },
+            "type": "array"
+          },
+          "strictHostKeyChecking": {
+            "description": "Host-key policy; \"no\" warns (MITM risk).",
+            "enum": [
+              "yes",
+              "no",
+              "ask",
+              "accept-new"
+            ],
+            "type": "string"
+          },
+          "user": {
+            "description": "Default login username (User directive).",
+            "type": "string"
+          }
+        },
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "mode": {
+      "description": "Which side(s) to emit. \"client\" fills clientConfig from clientHosts; \"server\" fills serverConfig from serverSettings; \"both\" emits both.",
+      "enum": [
+        "client",
+        "server",
+        "both"
+      ],
+      "type": "string"
+    },
+    "serverSettings": {
+      "additionalProperties": false,
+      "description": "sshd_config daemon directives. Used when mode is \"server\" or \"both\".",
+      "properties": {
+        "allowAgentForwarding": {
+          "description": "AllowAgentForwarding; true warns.",
+          "type": "boolean"
+        },
+        "allowGroups": {
+          "description": "AllowGroups login whitelist.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "allowTcpForwarding": {
+          "description": "AllowTcpForwarding toggle.",
+          "type": "boolean"
+        },
+        "allowUsers": {
+          "description": "AllowUsers login whitelist.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "ciphers": {
+          "description": "Comma-separated Ciphers; weak/CBC/arcfour tokens warn.",
+          "type": "string"
+        },
+        "clientAliveCountMax": {
+          "description": "ClientAliveCountMax unanswered probes before disconnect.",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "clientAliveInterval": {
+          "description": "ClientAliveInterval keepalive seconds.",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "denyUsers": {
+          "description": "DenyUsers login blacklist.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "hostKeyAlgorithms": {
+          "description": "Comma-separated HostKeyAlgorithms; ssh-rsa/ssh-dss warn.",
+          "type": "string"
+        },
+        "kexAlgorithms": {
+          "description": "Comma-separated KexAlgorithms; SHA-1 and NIST-curve tokens warn.",
+          "type": "string"
+        },
+        "listenAddress": {
+          "description": "ListenAddress bind addresses.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "macs": {
+          "description": "Comma-separated MACs; MD5/SHA1 tokens warn.",
+          "type": "string"
+        },
+        "maxAuthTries": {
+          "description": "MaxAuthTries per connection; high values warn.",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "maxSessions": {
+          "description": "MaxSessions concurrent sessions per connection.",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "passwordAuthentication": {
+          "description": "PasswordAuthentication; true warns.",
+          "type": "boolean"
+        },
+        "permitRootLogin": {
+          "description": "PermitRootLogin; \"yes\" warns.",
+          "enum": [
+            "yes",
+            "no",
+            "without-password",
+            "forced-commands-only",
+            "prohibit-password"
+          ],
+          "type": "string"
+        },
+        "port": {
+          "description": "sshd listen Port; warns when 22.",
+          "maximum": 65535,
+          "minimum": 1,
+          "type": "integer"
+        },
+        "pubkeyAuthentication": {
+          "description": "PubkeyAuthentication; false warns.",
+          "type": "boolean"
+        },
+        "x11Forwarding": {
+          "description": "X11Forwarding; true warns.",
+          "type": "boolean"
+        }
+      },
+      "type": "object"
+    }
+  },
+  "required": [
+    "mode"
+  ],
+  "type": "object"
+}
    • removedInput schema / properties / mode
      Removed value: -{
-  "type": "string"
-}
    • addedInput schema / properties / operation / default
      Added value: +"generate"
    • addedInput schema / properties / operation / description
      Added value: +"Mode selector. \"generate\" builds config from \"input\"; \"presets\" ignores \"input\" and returns example requests."
    • addedInput schema / properties / operation / enum
      Added value: +[
+  "generate",
+  "presets"
+]
    • removedInput schema / properties / serverSettings
      Removed value: -{
-  "properties": {
-    "passwordAuthentication": {
-      "type": "boolean"
-    },
-    "permitRootLogin": {
-      "type": "string"
-    },
-    "port": {
-      "type": "integer"
-    },
-    "pubkeyAuthentication": {
-      "type": "boolean"
-    }
-  },
-  "required": [
-    "port",
-    "permitRootLogin",
-    "passwordAuthentication",
-    "pubkeyAuthentication"
-  ],
-  "type": "object"
-}
    • changedInput schema / required
      Previous value: -[
-  "operation",
-  "mode",
-  "serverSettings"
-]New value: +[]
    • changedOutput schema / (root)
      Previous value: -nullNew value: +{
+  "properties": {
+    "operation": {
+      "description": "The operation echoed back (generate or presets).",
+      "type": "string"
+    },
+    "result": {
+      "description": "For generate, the generated config and analysis. For presets, a \"presets\" array of example requests.",
+      "properties": {
+        "clientConfig": {
+          "description": "Generated ~/.ssh/config text; empty when mode is \"server\".",
+          "type": "string"
+        },
+        "explanation": {
+          "description": "Per-directive explanations actually emitted.",
+          "items": {
+            "properties": {
+              "directive": {
+                "description": "SSH directive name.",
+                "type": "string"
+              },
+              "meaning": {
+                "description": "Plain-language description of the directive.",
+                "type": "string"
+              }
+            },
+            "type": "object"
+          },
+          "type": "array"
+        },
+        "presets": {
+          "description": "Present when operation=presets; each is an example request with id, name, description, input.",
+          "items": {
+            "type": "object"
+          },
+          "type": "array"
+        },
+        "serverConfig": {
+          "description": "Generated /etc/ssh/sshd_config text; empty when mode is \"client\".",
+          "type": "string"
+        },
+        "warnings": {
+          "description": "Security advisories for weak or risky directives.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
+      "type": "object"
+    },
+    "success": {
+      "description": "Always true on a 200 response.",
+      "type": "boolean"
+    }
+  },
+  "type": "object"
+}
  2. First observedv0.1.0

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations (readOnlyHint=true, destructiveHint=false) are reinforced and expanded: the description clarifies it only builds config text, never writes files, edits, or connects. It also mentions security warnings for weak settings, which adds beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is somewhat lengthy but well-structured: it starts with purpose, then behavioral constraints, then parameter explanations, and ends with usage guidance. Every sentence adds value, though a slight reduction in verbosity would improve conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complex nested schema and presence of an output schema, the description fully covers the tool's purpose, behavior, parameter details, and presets feature. It also mentions security warnings and sibling tools, making it complete for an AI agent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Despite 100% schema coverage, the description adds significant meaning: explains 'operation' modes (generate vs presets), describes what presets returns, and summarizes the key client and server settings. It adds context about security warnings not in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it generates OpenSSH client and/or server config text from structured definitions. It distinguishes itself by explicitly stating it never writes files, connects to hosts, or touches the SSH agent, which differentiates it from the sibling linux_web_server_config_generator.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear when-to-use guidance: 'Use this for OpenSSH connection and daemon config' and implies an alternative ('use linux_web_server_config_generator'). It also explicitly states what it does not do, helping agents avoid misuse.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Jambozx/onlinecybertools-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server