Skip to main content
Glama

MCP SSH Manager

Servidor MCP local para administrar servidores SSH desde clientes compatibles con Model Context Protocol.

Funciones

  • Ejecutar comandos remotos.

  • Subir, bajar y sincronizar archivos.

  • Abrir sesiones SSH persistentes y túneles.

  • Revisar salud, procesos, servicios y logs.

  • Crear backups y operar bases MySQL, PostgreSQL o MongoDB.

  • Desplegar archivos con backup, permisos, owner y reinicio de servicio.

  • Activar grupos de tools para reducir contexto.

Related MCP server: acp-mcp

Requisitos

  • Node.js 18 o superior.

  • npm install ejecutado en este repositorio.

  • Acceso SSH a los servidores configurados.

  • Opcional: rsync, sshpass, clientes de base de datos o Docker según la tool usada.

Inicio rápido

npm install
npm test

Crear .env:

SSH_SERVER_PROD_HOST=example.com
SSH_SERVER_PROD_USER=root
SSH_SERVER_PROD_PORT=22
SSH_SERVER_PROD_KEYPATH=C:\Users\me\.ssh\id_rsa
SSH_SERVER_PROD_DEFAULT_DIR=/var/www/app

Registrar el MCP en el cliente con stdio:

{
  "mcpServers": {
    "ssh-manager": {
      "command": "node",
      "args": ["D:/work/ssh-manager-mcp-server/src/index.js"],
      "env": {
        "SSH_ENV_PATH": "D:/work/ssh-manager-mcp-server/.env"
      }
    }
  }
}

No uses npm start en el cliente MCP. El cliente debe lanzar node src/index.js como proceso local por stdio.

Documentación

Leé en este orden:

  1. Inicio rápido

  2. Instalación

  3. Índice de documentación

  4. Instalación en clientes MCP

  5. Gestión de tools

  6. Catálogo de tools

  7. Modos de seguridad

  8. Deploy

  9. Backups

  10. Alias y hooks

Configuración

El .env usa este formato:

SSH_SERVER_<NOMBRE>_HOST=hostname
SSH_SERVER_<NOMBRE>_USER=username
SSH_SERVER_<NOMBRE>_PASSWORD=password
SSH_SERVER_<NOMBRE>_KEYPATH=~/.ssh/id_rsa
SSH_SERVER_<NOMBRE>_PORT=22
SSH_SERVER_<NOMBRE>_DEFAULT_DIR=/path
SSH_SERVER_<NOMBRE>_SUDO_PASSWORD=password
SSH_SERVER_<NOMBRE>_PLATFORM=linux
SSH_SERVER_<NOMBRE>_MODE=unrestricted

Campos útiles:

  • PASSWORD o KEYPATH: autenticación SSH.

  • PASSPHRASE: passphrase de la clave.

  • DEFAULT_DIR: directorio usado cuando la tool no recibe cwd.

  • PLATFORM: linux por defecto, windows para OpenSSH en Windows.

  • PROXYJUMP o PROXYCOMMAND: salto SSH o comando proxy.

  • MODE, ALLOW_PATTERNS, DENY_PATTERNS, AUDIT_LOG: política por servidor.

También se puede usar TOML con SSH_CONFIG_PATH. Ver Instalación en clientes MCP.

Rutas de configuración

Orden para .env:

  1. SSH_ENV_PATH

  2. %USERPROFILE%\.ssh-manager\.env

  3. .env del directorio actual

  4. %USERPROFILE%\.env

  5. .env junto al proyecto

TOML se carga desde SSH_CONFIG_PATH o ~/.codex/ssh-config.toml.

Desarrollo

npm test
npm run lint
npm run coverage
npm run validate
npx knip

npm run validate ejecuta lint, tests y cobertura. La cobertura global exige 85% para el código incluido por c8.

Seguridad

  • No commitees .env, claves ni passwords.

  • Preferí claves SSH antes que password.

  • Usá readonly o restricted en servidores sensibles.

  • Revisá Modos de seguridad antes de habilitar tools destructivas.

Available Tools

17 tools
ssh_backup_createA

Creates a database or file backup on the remote server over SSH, writing a compressed archive plus a JSON metadata file into backupDir. Supports mysql, postgresql, mongodb, and files (full is not yet implemented and errors). Database types require database; files requires paths. After writing it prunes backups older than retention days (default 7); compress defaults to true. Runs pre-backup and post-backup hooks.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesBackup name (e.g., production, app-data)
typeYesBackup type: mysql, postgresql, mongodb, files, or full
pathsNoPaths to backup (for files type)
dbHostNoDatabase host (default: localhost)
dbPortNoDatabase port
dbUserNoDatabase user
serverYesServer name
excludeNoPatterns to exclude from backup
compressNoCompress backup (default: true)
databaseNoDatabase name (required for db types)
backupDirNoBackup directory (default: /var/backups/ssh-manager)
retentionNoRetention period in days (default: 7)
dbPasswordNoDatabase password

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full burden for behavioral disclosure. It discloses multiple behavioral traits: writes compressed archive + JSON metadata, prunes backups older than retention days (default 7), compress defaults to true, runs pre/post hooks, and that 'full' type errors. This is comprehensive for a mutation tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is four sentences, each serving a distinct purpose: main action, type support, default behaviors, and hooks. It is front-loaded with the core verb and resource, and every sentence adds essential information without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity of 13 parameters and no output schema, the description covers the main operational aspects (what it creates, type-specific requirements, defaults, pruning, hooks). It does not describe the return value or error handling, but this is reasonable for a creation tool where the output is implicit.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so each parameter has a description. The tool description adds value by clarifying parameter relationships (e.g., 'database types require database; files requires paths') and defaults (compress, retention). This contextual information aids parameter selection beyond the schema alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it creates a database or file backup over SSH, writing a compressed archive and metadata file. It lists supported types (mysql, postgresql, mongodb, files) and notes that 'full' is not implemented. This specificity distinguishes it from sibling tools like ssh_backup_list and ssh_backup_restore.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides implicit guidance by stating which types require which parameters (e.g., 'Database types require database; files requires paths'). It also mentions that 'full' is not yet implemented, guiding the agent away from using it. However, it does not explicitly contrast with alternatives like ssh_backup_schedule for scheduled backups.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_backup_listA

Lists existing backups found in backupDir on the remote server, returning each backup id, type, database or paths, size, compression, retention, status, and creation time parsed from stored metadata. Read-only: it inspects the filesystem and mutates nothing. Optional type filters results to mysql, postgresql, mongodb, files, or full. backupDir defaults to the configured backup directory.

ParametersJSON Schema
NameRequiredDescriptionDefault
typeNoFilter by backup type
serverYesServer name
backupDirNoBackup directory (default: /var/backups/ssh-manager)

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Explicitly states 'Read-only: it inspects the filesystem and mutates nothing.', which fully covers behavioral traits. Since no annotations are provided, the description compensates perfectly.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no wasted words. First sentence covers action and return data, second covers safety and parameters. Highly efficient and front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema, so description appropriately details return data (id, type, size, etc.) and clarifies behavior (read-only, default dir). Covers all necessary info for a listing tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, but description adds value by clarifying the default for backupDir and explicitly listing the filter options (though schema has enum). This extra context aids correct parameter usage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states verb 'lists', resource 'backups found in backupDir on remote server', and distinguishes from siblings like ssh_backup_create by focusing on listing existing backups and parsing metadata.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly notes read-only nature and optional type filter, but does not provide explicit guidance on when to use vs. alternatives like ssh_backup_create or ssh_backup_restore. Relies on context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_backup_restoreA

Restores a previously created backup identified by backupId, reading its metadata to pick the engine. This is destructive and overwrites the target: PostgreSQL runs pg_restore with --clean --if-exists which DROPs existing objects, MongoDB runs mongorestore --drop, and MySQL pipes the dump into the live database replacing matching objects. Supports mysql, postgresql, mongodb, and files. Runs pre-restore and post-restore hooks.

ParametersJSON Schema
NameRequiredDescriptionDefault
dbHostNoDatabase host (default: localhost)
dbPortNoDatabase port
dbUserNoDatabase user
serverYesServer name
backupIdYesBackup ID to restore
databaseNoTarget database name (for db restores)
backupDirNoBackup directory (default: /var/backups/ssh-manager)
dbPasswordNoDatabase password
targetPathNoTarget path for files restore (default: /)

TDQS

A4.1/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description fully discloses destructive behavior: overwriting target, dropping existing objects for PostgreSQL and MongoDB, replacing for MySQL, and supporting files. It also mentions pre/post hooks, providing full behavioral context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single paragraph of 4 sentences, efficient and front-loaded with the core action. Every sentence adds value, though slight reordering could improve scanability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the multi-engine, destructive nature, the description covers engine behaviors and hooks. No output schema is present, so the return value is not described, but the main operational context is sufficient for a restore tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and each parameter already has a description. The tool description adds overall context but does not enhance individual parameter meaning significantly. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool restores a backup by ID, selects engine based on metadata, and distinguishes from sibling tools like ssh_backup_create and ssh_backup_list. The verb 'restores' and resource 'backup' are specific, and the engines are enumerated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage when a backup ID is available, but does not explicitly state when to avoid this tool (e.g., for non-destructive operations) or contrast with alternatives like ssh_backup_create or ssh_backup_list. The context is clear but lacks exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_backup_scheduleA

Schedules a recurring backup on the remote server by writing an executable bash script to /usr/local/bin/ssh-manager-backup-NAME.sh and installing a crontab entry for the given cron expression. Mutates the remote filesystem and crontab, and typically needs root to write that path. Supports mysql, postgresql, mongodb, and files; the generated script also deletes backups older than retention days (default 7).

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesBackup name
typeYesBackup type
pathsNoPaths to backup (for files type)
serverYesServer name
databaseNoDatabase name (for db types)
scheduleYesCron schedule (e.g., "0 2 * * *" for daily at 2 AM)
retentionNoRetention period in days (default: 7)

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description fully discloses that the tool mutates remote filesystem and crontab, needs root, writes a script to a specific path, and deletes backups older than retention (default 7). This is thorough behavioral disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the main action, and includes critical details without excess. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite no output schema, the description covers all key aspects: what it does, how it works, side effects, and supported types. It is complete for an agent to understand the tool's purpose and usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

All 7 parameters have schema descriptions (100% coverage). The description adds value by explaining the generated script behavior, default retention, and the path location, enhancing understanding beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool schedules a recurring backup by writing a script and installing a crontab entry. It specifies supported types (mysql, postgresql, mongodb, files) and retention. This distinguishes it from siblings like ssh_backup_create (one-time backup) and ssh_backup_list.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for recurring backups and mentions root requirement but does not explicitly guide when to use this vs alternatives like ssh_backup_create or ssh_execute.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_deployA

Deploys a list of local files to remote paths on the named server, uploading each to a temporary location first and then moving it into place. Mutates remote state. By default it backs up any existing target file before overwriting; backup can be disabled per call. Options can set owner and permissions, supply a sudo password, and name a single service to restart afterward. Detects sensible owner and permission defaults from the remote path. Runs pre and post deploy hooks. Blocked entirely on servers in readonly or restricted security mode.

ParametersJSON Schema
NameRequiredDescriptionDefault
filesYesArray of files to deploy
serverYesServer name or alias
optionsNoDeployment options

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description fully discloses mutation, default backup behavior, options for owner/permissions/sudo/restart, automatic default detection, hooks, and security restrictions. This provides comprehensive transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single paragraph with six sentences, each adding distinct value: main action, state mutation, backup, options, defaults, hooks, restrictions. No unnecessary words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers all major aspects: upload method, backup, options, defaults, hooks, security. However, it omits error handling behavior (e.g., what happens if a move fails) and does not describe the return value, leaving minor gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds context by explaining the temporary-upload-then-move process and automatic default detection, enriching understanding of parameters like owner and permissions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool deploys local files to remote paths using a two-step upload-then-move process. It distinguishes from siblings like ssh_upload by specifying the temporary location and backup behavior.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage via the detailed process but does not explicitly compare to alternatives such as ssh_upload or ssh_backup_create. An explicit 'use this when' statement would improve clarity.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_downloadA

Downloads one remote file from the named server to a local destination path over SFTP, overwriting any existing local file at that path. Affects only the local filesystem and is read-only on the remote side, so it stays allowed even on servers in readonly or restricted security mode. Reads the remote file using the configured SSH user, which must have permission to read it. Handles single files only; use ssh_sync for directories.

ParametersJSON Schema
NameRequiredDescriptionDefault
serverYesServer name
localPathYesLocal destination path
remotePathYesRemote file path

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. It discloses overwriting existing local files, read-only remote behavior, local filesystem-only impact, and permission requirements. This fully informs the agent of all behavioral traits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, each with distinct purpose: main action, safety mode, permission requirement, alternative tool. Front-loaded with key action. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple file download tool, the description covers all necessary context: single file, SSH user permissions, overwrite behavior, readonly compatibility. No output schema exists but return value is implied. No gaps for typical usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers 100% of parameters with basic descriptions. Description adds value beyond schema by explaining the overwrite behavior and permission context for 'localPath' and 'remotePath', but schema already conveys the primary meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it downloads a single remote file via SFTP to a local path, and distinguishes from ssh_sync for directories. The verb 'downloads' combined with resource 'one remote file' and destination 'local destination path' is specific and unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use (single file) and when not (use ssh_sync for directories). Also mentions it is allowed on readonly/restricted servers and requires read permission, providing clear guidance on preconditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_executeA

Runs a shell command over SSH on a named configured server and returns stdout, stderr, and exit code. Mutates remote state depending on the command; not read-only. Expands command aliases before running. Uses the cwd parameter or, if omitted, the server configured default directory; adapts syntax for Linux versus Windows PowerShell targets. Timeout defaults to 120000 ms and is capped at 300000 ms. Under readonly mode destructive commands like rm or dd are refused; under restricted mode the command must match allow patterns. Output is truncated when very large.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdNoWorking directory (optional, uses default if configured)
serverYesServer name from configuration
commandYesCommand to execute
timeoutNoCommand timeout in milliseconds (default: 120000, max: 300000)

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. Discloses alias expansion, OS adaptation, timeout defaults/cap, readonly/restricted restrictions, and output truncation—comprehensive for a command execution tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Concise paragraph with no wasted sentences. Front-loaded with core purpose, each subsequent sentence adds specific behavioral detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema, but description explains return values (stdout, stderr, exit code) and covers edge cases (timeout, truncation, mode restrictions). Complete for a command execution tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% (baseline 3). Description adds value beyond schema by explaining cwd default behavior, timeout range, and command alias expansion, enhancing understanding of each parameter's semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states it runs a shell command over SSH and returns stdout, stderr, and exit code. Distinguishes from sibling tools like ssh_download or ssh_execute_group.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Mentions mutability (not read-only) and behavior under readonly/restricted modes, guiding when to use and when not. Could be more explicit about alternatives but provides useful context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_execute_groupA

Runs one command on every server belonging to the named group and returns a per-server success or failure report. Mutates remote state on each member and is not idempotent. Best-effort: the security policy of each server is evaluated independently, so readonly or restricted members are reported as failed without aborting the rest unless stopOnError is set. Strategy may be parallel, sequential, or rolling (delay applies between servers). Per-server timeout is 30000 ms; cwd defaults to the configured default directory.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdNoWorking directory
delayNoDelay between servers in ms (for rolling)
groupYesGroup name (e.g., "production", "staging", "all")
commandYesCommand to execute
strategyNoExecution strategy
stopOnErrorNoStop execution on first error

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, so description fully covers behaviors: mutation of remote state, non-idempotent, best-effort, per-server security policy evaluation, timeout (30000 ms), cwd defaults, and strategy-specific delay. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is informative and front-loaded, but slightly verbose. Could condense 'Best-effort: the security policy...' into a more concise statement. However, overall structure is logical and easy to parse.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given tool complexity (multiple strategies, non-idempotent, best-effort) and absence of output schema, description covers all essential behavioral aspects. Agent can understand what to expect and how to use parameters.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema has 100% coverage with descriptions. Description adds meaning beyond schema: explains strategy implications, delay role, stopOnError effect, timeout, and cwd default. For example, 'delay' is described as 'between servers in ms (for rolling)' which clarifies its use.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states it runs one command on every server in a named group and returns a per-server report, which is specific and distinguishes it from sibling tools like ssh_execute (single server) and ssh_deploy.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Describes execution strategies (parallel, sequential, rolling), delay, stopOnError, and best-effort behavior. Implicitly indicates use for group-level commands but lacks explicit when-not-to-use or comparison with alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_health_checkA

Runs a comprehensive read-only health check on the named server by executing diagnostic shell commands over SSH, then returns parsed JSON with overall status, CPU, memory, disk usage, and uptime. It only reads metrics and changes nothing on the remote host. Set detailed to true to additionally include load average and network metrics; it defaults to false. Critical CPU, memory, or disk conditions are surfaced in a critical_issues list.

ParametersJSON Schema
NameRequiredDescriptionDefault
serverYesServer name
detailedNoInclude detailed metrics (network, load average)

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description explicitly states it is read-only, only reads metrics, and changes nothing on the remote host. With no annotations provided, the description fully bears the transparency burden and meets it well.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three concise sentences, front-loaded with the main purpose, and every sentence adds necessary information. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given two parameters, no annotations, and no output schema, the description covers the behavior, safety, parameter details, and result format (parsed JSON with fields). It could mention error handling or SSH prerequisites, but is largely complete for its complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already describes both parameters (server, detailed). The description adds value by stating the default for detailed (false) and specifying what additional metrics it includes (load average, network). This goes beyond the schema's brief descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it runs a read-only health check via SSH, returning parsed JSON with status, CPU, memory, disk, and uptime. This distinguishes it from siblings like ssh_execute (which runs arbitrary commands) and ssh_service_status (service-specific).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides parameter guidance (detailed flag) but does not explicitly state when to use this tool vs alternatives like ssh_execute or ssh_process_manager. It implies usage for health checks but lacks explicit when-not-to-use or alternative references.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_key_manageA

Manages SSH host key fingerprints in your local known_hosts file for the named server. The action parameter selects: verify, check, and list are read-only comparisons or listings; accept adds or updates the host key in known_hosts; remove deletes it. accept and remove mutate local state and are blocked on servers configured as readonly. server is required for every action except list. autoAccept defaults to false and should be used with caution.

ParametersJSON Schema
NameRequiredDescriptionDefault
actionYesAction to perform
serverNoServer name (required for most actions)
autoAcceptNoAutomatically accept new keys (use with caution)

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden. It discloses that accept and remove mutate local state and are blocked on readonly servers, and warns that autoAccept should be used with caution. This fully informs the agent of behavioral traits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no waste. First sentence states the general purpose, second explains all actions and constraints. Information is front-loaded and every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 3 parameters and no output schema, the description is mostly complete. It covers all actions, constraints, and warnings. A minor gap: it doesn't explicitly state that the 'list' action lists all known hosts entries (implied by server not being required), but overall it's sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so each parameter has a basic description. The tool description adds significant meaning by explaining the purpose of each action value, the mutation safety, and the server requirement per action. It enriches the semantics beyond the schema's enum and boolean descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it manages SSH host key fingerprints in the local known_hosts file, specifying the verb 'Manages' and resource 'SSH host key fingerprints'. It distinguishes five actions (verify, accept, remove, list, check) with explicit behavior, making it distinct from sibling SSH tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context for each action, noting that verify, check, and list are read-only, while accept and remove are mutation actions blocked on readonly servers. It also specifies that server is required except for list, and warns about autoAccept. However, it does not explicitly compare to sibling tools or state when to use alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_list_serversA

Lists all SSH servers defined in the loaded configuration, returning for each the name, host, user, port, authentication type (password or key), default directory, and description. Read-only and local: it reads configuration only and opens no SSH connections. Deliberately omits secrets, so no passwords, key paths, passphrases, or sudo passwords are returned. Takes no parameters. Useful as a first call to discover which server names other tools accept.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Discloses read-only nature, no connections opened, secrets omitted, and return fields. No annotations provided, so description fully handles transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Concise, front-loaded with main action, every sentence adds value with no redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Fully describes output, side effects, and usage context. No gaps given zero parameters and no output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

No parameters exist; description explicitly states 'takes no parameters' and explains purpose without needing schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Explicitly states it lists SSH servers from configuration, with specific fields returned. Distinguishes from siblings by being a read-only discovery tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Advises using it as a first call to discover server names accepted by other tools, providing clear when-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_process_managerA

Lists, inspects, or terminates processes on a remote server over SSH. The action parameter selects: list returns top processes (read-only), info returns details for one process (read-only), and kill sends a signal to terminate a process and mutates remote state. pid is required for kill and info. kill is blocked on servers configured as readonly. signal defaults to TERM, sortBy defaults to cpu, and limit defaults to 20; filter narrows the list by name or command.

ParametersJSON Schema
NameRequiredDescriptionDefault
pidNoProcess ID (required for kill and info actions)
limitNoNumber of processes to return (default: 20)
actionYesAction: list processes, kill process, or get process info
filterNoFilter processes by name/command
serverYesServer name
signalNoSignal to send when killing (default: TERM)
sortByNoSort processes by CPU or memory (default: cpu)

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description fully discloses behavioral traits: which actions are read-only vs. mutating, that kill may be blocked depending on server config, and default values for signal, sortBy, and limit. This is comprehensive and leaves no ambiguity.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences, efficiently structured with the main purpose first, then action details, then defaults and filters. No extraneous information; every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (three actions, seven parameters, no output schema), the description covers all relevant aspects: actions, parameter dependencies, defaults, and behavioral constraints. The lack of output schema is acceptable as it is not provided, and the description does not need to explain return values.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Input schema has 100% coverage, so baseline is 3. The description adds value beyond the schema by clarifying that pid is required for kill and info, that filter narrows by name/command, and that defaults apply to signal, sortBy, and limit. It also explains the action parameter's semantic groups, which is not fully captured in schema descriptions alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists, inspects, or terminates processes on a remote server over SSH. It explicitly names the three actions (list, info, kill) and distinguishes itself from siblings focused on file operations, tunnels, or backups.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides guidance on when to use each action: list for read-only top processes, info for details (read-only), kill for termination (mutation). It also notes that kill is blocked on readonly servers, implying when not to use it. However, it does not explicitly contrast with sibling tools or give alternative tool recommendations.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_service_statusA

Checks the running state of the named system services on a remote server by querying each one over SSH, returning JSON per service plus running and stopped counts and an aggregate health rating. Read-only: it inspects status without starting, stopping, or restarting anything. The services array parameter is required and lists the service names to check, for example nginx, mysql, or docker; common names are resolved to their actual unit names automatically.

ParametersJSON Schema
NameRequiredDescriptionDefault
serverYesServer name
servicesYesService names to check (e.g., nginx, mysql, docker)

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so the description bears the burden. It clearly states the tool is read-only and only inspects status. It could mention SSH requirements or that it queries systemctl, but the current disclosure is adequate for safe usage.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no redundancy. The first sentence states purpose and output, the second adds safety and parameter detail. Every sentence is necessary and well-structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter tool without output schema, the description adequately describes the return structure (JSON per service, counts, health rating) and the automatic name resolution. No gaps given the simplicity and no annotations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions for both parameters. The description adds value by explaining that the services parameter lists service names, provides examples, and mentions automatic resolution to unit names. No additional info for server parameter, but overall helpful.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'checks', the resource 'running state of system services on a remote server', and the output format (JSON per service, counts, health rating). It distinguishes from sibling tools like ssh_process_manager which manages processes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states the tool is read-only and does not start/stop/restart services, guiding the agent to use it for inspection only. No explicit alternatives or when-not-to-use, but the read-only hint is strong usage guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_tunnel_closeA

Tears down active SSH tunnels created earlier, freeing the bound local ports; this affects only local tunnel state, not the remote host. Exactly one of tunnelId or server must be supplied: tunnelId closes that single tunnel, while server closes every tunnel for the named server and reports how many were closed. Supplying neither raises an error. Closing is final and cannot be undone.

ParametersJSON Schema
NameRequiredDescriptionDefault
serverNoClose all tunnels for this server
tunnelIdNoTunnel ID to close

TDQS

A5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description fully covers behavioral traits: it affects only local state, closing is irreversible, and for the server option it reports count of closed tunnels. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three well-structured sentences: first states action and scope, second explains options, third warns about finality. Every sentence is necessary and informative—no redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (two optional but mutually exclusive parameters, no output schema), the description completely covers behavior, parameter constraints, and side effects. No gaps remain.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema already has descriptions for both parameters (100% coverage), but the description adds essential context: the mutual exclusivity rule, that server closes all tunnels, and that the operation reports the number closed—significantly beyond schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses 'tears down' as a specific verb for the 'ssh tunnels' resource, clearly distinguishing it from sibling tools like ssh_tunnel_create (creates) and ssh_tunnel_list (lists). It also clarifies scope ('affects only local tunnel state').

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states that exactly one of tunnelId or server must be supplied, explains what each does, and warns that supplying neither raises an error. The finality ('cannot be undone') provides crucial guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_tunnel_createA

Opens a new SSH connection to the named server and starts a port-forwarding or SOCKS proxy tunnel that keeps running until closed. The type parameter selects local forward, remote forward, or dynamic SOCKS5 proxy. localPort is always required; remoteHost and remotePort are required for local and remote types but ignored for dynamic. localHost defaults to 127.0.0.1. Returns a tunnel ID used later to close it.

ParametersJSON Schema
NameRequiredDescriptionDefault
typeYesTunnel type
serverYesServer name or alias
localHostNoLocal host (default: 127.0.0.1)
localPortYesLocal port
remoteHostNoRemote host (not needed for dynamic)
remotePortNoRemote port (not needed for dynamic)

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses that the tunnel keeps running until closed, returns a tunnel ID, and defaults localHost to 127.0.0.1. It does not mention authentication or background execution, but overall is transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences: first explains purpose and behavior, second details parameter semantics. No waste, every sentence adds critical information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (3 tunnel types, parameter dependencies), the description covers the key behaviors and return value. No output schema exists, but the return value (tunnel ID) is mentioned. Minor gaps like blocking vs async are not critical.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds significant value by explaining when remoteHost/remotePort are required (local/remote) vs ignored (dynamic), and that localPort defaults to 127.0.0.1. This exceeds the schema's bare descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it opens an SSH tunnel for port-forwarding or SOCKS proxy, with a specific verb ('opens') and resource ('SSH connection'). It distinguishes from sibling tools like ssh_tunnel_close and ssh_execute by focusing on tunnel creation and return of a tunnel ID.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains when to use each type (local/remote/dynamic) and which parameters are required or ignored. It does not explicitly state when not to use this tool, but the context is clear enough for an agent to decide.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_tunnel_listA

Lists currently active SSH tunnels tracked by this process, showing each tunnel ID, server, type, state, local and remote endpoints, active and total connection counts, bytes transferred, error count, and timestamps. Read-only: it does not create, modify, or close anything. The optional server parameter filters results to one server; omit it to list every active tunnel across all servers.

ParametersJSON Schema
NameRequiredDescriptionDefault
serverNoFilter by server name

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, but the description explicitly states 'Read-only: it does not create, modify, or close anything', providing clear behavioral transparency beyond the tool's function.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, each serves a clear purpose: first states the function and list of fields, second clarifies read-only nature and parameter usage. No unnecessary words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema, but description lists the fields returned. Given the tool's simplicity and the sibling tools context, it provides enough information for an agent to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% (one parameter with description). The description adds value by explaining the effect of omitting the parameter ('list every active tunnel') and that it filters to one server.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses specific verbs ('lists') and clearly states the resource ('active SSH tunnels'), listing many fields. It distinguishes from siblings like ssh_tunnel_create and ssh_tunnel_close by stating it is read-only.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explains when to use (to list active tunnels) and what it does not do (create/modify/close). The optional server parameter usage is explained. Could explicitly mention alternatives, but context is clear with sibling names.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_uploadA

Uploads one local file to a remote destination path over SFTP on the named server, overwriting any existing remote file at that path. Mutates remote state and is not idempotent beyond replacing the target. Creates no backup. Requires the local file to exist. Does not use sudo, so the remote path must be writable by the configured SSH user. This tool is blocked entirely on servers set to readonly or restricted security mode. For directory trees use ssh_sync instead.

ParametersJSON Schema
NameRequiredDescriptionDefault
serverYesServer name
localPathYesLocal file path
remotePathYesRemote destination path

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description fully discloses behavioral traits: overwriting existing files, non-idempotent nature, no backup creation, no sudo, and server security mode restrictions. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Concise paragraph with no redundant sentences. Key information is front-loaded: action, target, and overwriting behavior. Every sentence adds necessary detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given three required parameters and no output schema, the description covers all essential aspects: operation, side effects, prerequisites, constraints, security, and alternative. No gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers 100% of parameters with basic descriptions. The tool description adds valuable context like 'over SFTP', 'overwriting', and 'requires local file to exist', enhancing the meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Uploads one local file to a remote destination path over SFTP' with a specific verb and resource. It distinguishes from sibling tools by mentioning 'For directory trees use ssh_sync instead'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use (single file upload), prerequisites (local file must exist, remote path writable), blocking conditions (readonly/restricted servers), and an alternative (ssh_sync for directories).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 17 tool updatesv3.6.4
    • First observedssh_backup_create
    • First observedssh_backup_list
    • First observedssh_backup_restore
    • First observedssh_backup_schedule
    • First observedssh_deploy
    • First observedssh_download
    • First observedssh_execute
    • First observedssh_execute_group
    • First observedssh_health_check
    • First observedssh_key_manage
    • First observedssh_list_servers
    • First observedssh_process_manager
    • First observedssh_service_status
    • First observedssh_tunnel_close
    • First observedssh_tunnel_create
    • First observedssh_tunnel_list
    • First observedssh_upload

TDQS

A4.6/5.0
Disambiguation5/5

Each tool targets a distinct operation: file transfer, command execution, tunnel management, key management, backups, health checks, service status, and process management. There is no overlap or ambiguity in their purposes.

Naming Consistency5/5

All tools follow a consistent 'ssh_' prefix with underscores, and within groups (tunnels, backups) they use a noun_verb pattern. The naming is predictable and systematic across the entire set.

Tool Count5/5

17 tools cover the essential operations for SSH server management without being excessive. Each tool serves a clear and necessary function, making the set well-scoped.

Completeness5/5

The tool set provides comprehensive coverage for common SSH tasks including file transfer, command execution, tunnel management, key management, backups (CRUD plus scheduling), health checks, service management, and process management. No obvious gaps are present.

Maintenance

ActivitySlowing
ResponsivenessSyncing

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    B
    maintenance
    MCP server for managing multiple SSH servers via AI assistants, offering tools for remote command execution, file operations, and system monitoring.
    11
    1
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    MCP server for remote machine operations via SSH, providing a single tool to execute any shell command on remote machines with real-time progress streaming.
    22
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for remote Linux/Unix server management via SSH, enabling command execution, system monitoring, file operations, and diagnostics through natural language.
    34
    1
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    MCP server for SSH remote execution, file transfer, and file editing with automatic backup/trash and ~/.ssh/config integration.
    117
    1
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/bysonte/ssh-manager-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server