Skip to main content
Glama

MCP SSH Server

A Model Context Protocol (MCP) server that provides comprehensive SSH and serial console access to remote servers and network devices. Enables AI tools like Claude Desktop to securely manage Linux servers, network switches, and infrastructure devices through both network SSH connections and direct USB-to-Serial console access.

Features

Core SSH Capabilities

  • SSH connection management with password or key-based authentication

  • Remote command execution with timeout handling

  • File upload and download via SFTP

  • Directory listing and file operations

  • Secure connection handling

Network Device Management

  • USB-to-Serial Console Access - Direct console connections via FTDI and other USB adapters

  • Network Switch Management - Full support for Cisco IOS/IOS-XE and Aruba switches

  • Device Discovery - Automatic detection of switch types and capabilities

  • Configuration Management - Backup, restore, and automated configuration

  • Network Diagnostics - Built-in ping, traceroute, and connectivity testing

  • Console-to-SSH Transition - Automated SSH setup via console connection

  • Firmware Management - Upload, verify, install, and rollback switch firmware

Server Management

  • Ubuntu server management tools (Nginx, SSL, packages, firewall)

  • Compatible with Claude Desktop, VS Code, and other MCP-compatible clients

Related MCP server: SSH MCP Server

Real-World Production Testing

This tool has been extensively tested in production network environments:

  • Network Discovery - Successfully discovered previously unknown fluttering ports on production switches that were causing intermittent connectivity issues

  • Zero Downtime - Managed multiple switches in live production networks without causing any network disruptions or outages

  • Time Savings - Automated SSH configuration reduced switch setup time from 15-20 minutes to under 2 minutes

  • Reliability - Zero incidents during production deployments across multiple network devices

  • USB-to-Serial Compatibility - Tested with FTDI FT232R/FT232H, Prolific PL2303, Silicon Labs CP2102/CP2104, and CH340 adapters

  • Switch Compatibility - Validated on Cisco Catalyst 2960/3560/3750 and Aruba 2530/2930 series switches

The tool has proven itself reliable enough for production network management tasks without requiring a separate lab environment for testing.

Prerequisites

  • Node.js 18 or higher

  • npm or yarn

  • Compatible with Windows, macOS, and Linux

Installation

  1. Clone the repository:

    git clone https://github.com/yourusername/mcp-ssh-server.git
    cd mcp-ssh-server
  2. Install dependencies:

    npm install
  3. Build the project:

    npm run build
  4. Install globally (optional):

    npm install -g .

Configuration

Claude Desktop Configuration

  1. Open Claude Desktop

  2. Go to Settings > Developer (or press Ctrl+Shift+D)

  3. Edit the MCP configuration

  4. Add the following configuration:

{
  "mcpServers": {
    "ssh-server": {
      "command": "node",
      "args": ["/path/to/mcp-ssh-server/build/index.js"],
      "env": {
        "NODE_NO_WARNINGS": "1"
      }
    }
  }
}

Important: Replace /path/to/mcp-ssh-server/build/index.js with the absolute path to your built index.js file.

VS Code Configuration (if using MCP extension)

Create or edit .vscode/mcp.json in your workspace:

{
  "mcpServers": {
    "ssh-server": {
      "command": "node",
      "args": ["/path/to/mcp-ssh-server/build/index.js"]
    }
  }
}

Available Tools

Core SSH Tools

ssh_connect

Establish an SSH connection to a remote server.

Parameters:

  • host (required) - Hostname or IP address

  • username (required) - SSH username

  • password (optional) - SSH password

  • privateKeyPath (optional) - Path to private key file

  • passphrase (optional) - Passphrase for private key

  • port (optional) - SSH port (default: 22)

  • connectionId (optional) - Unique identifier for this connection

Returns:

  • success - Boolean indicating success

  • connectionId - ID to use for subsequent commands

  • message - Connection status message

Example:

Connect to my server at example.com using username 'admin' and password authentication

ssh_exec

Execute a command on the remote server.

Parameters:

  • connectionId (required) - ID from ssh_connect

  • command (required) - Command to execute

  • cwd (optional) - Working directory

  • timeout (optional) - Command timeout in milliseconds (default: 60000)

Returns:

  • code - Exit code

  • signal - Signal that terminated the process (if any)

  • stdout - Standard output

  • stderr - Standard error

Example:

Run "ls -la /var/www/html" on the server

ssh_upload_file

Upload a file to the remote server.

Parameters:

  • connectionId (required) - ID from ssh_connect

  • localPath (required) - Local file path

  • remotePath (required) - Remote destination path

Returns:

  • success - Boolean indicating success

  • message - Upload status message

ssh_download_file

Download a file from the remote server.

Parameters:

  • connectionId (required) - ID from ssh_connect

  • remotePath (required) - Remote file path

  • localPath (required) - Local destination path

Returns:

  • success - Boolean indicating success

  • message - Download status message

ssh_list_files

List files in a directory on the remote server.

Parameters:

  • connectionId (required) - ID from ssh_connect

  • remotePath (required) - Directory path to list

Returns:

  • files - Array of file objects with properties:

    • filename - File name

    • isDirectory - Boolean indicating if it's a directory

    • size - File size

    • lastModified - Last modification time

ssh_disconnect

Close an SSH connection.

Parameters:

  • connectionId (required) - ID from ssh_connect

Returns:

  • success - Boolean indicating success

  • message - Disconnection status message

Usage Examples with Claude

  1. Connect to your server:

    Please connect to my VPS at example.com using username 'admin' and my SSH key at ~/.ssh/id_rsa
  2. Check server status:

    Run the command "systemctl status nginx" to check web server status
  3. Upload a website file:

    Upload my local file ~/websites/index.html to /var/www/html/index.html on the server
  4. List website files:

    Show me all files in the /var/www/html directory
  5. Download a backup:

    Download the file /var/backups/website-backup.tar.gz to my local Downloads folder
  6. Disconnect when done:

    Please disconnect from the SSH session

Network Switch Management Tools

switch_discover_device

Discover and identify network switch device type and capabilities.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • enablePassword (optional) - Enable password for privileged mode

switch_show_interfaces

Show interface status and configuration on network switch.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • interfaceType (optional) - Type of interfaces to show

  • enablePassword (optional) - Enable password for privileged mode

switch_show_vlans

Show VLAN configuration and status on network switch.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • enablePassword (optional) - Enable password for privileged mode

switch_backup_config

Backup switch configuration (running or startup config).

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • configType (optional) - Type of configuration to backup

  • enablePassword (optional) - Enable password for privileged mode

switch_network_diagnostics

Run network diagnostics from switch (ping, traceroute).

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • target (required) - Target IP address or hostname

  • diagnosticType (optional) - Type of diagnostic to run

  • enablePassword (optional) - Enable password for privileged mode

switch_show_mac_table

Show MAC address table on network switch.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • vlan (optional) - Specific VLAN to show MAC addresses for

  • enablePassword (optional) - Enable password for privileged mode

USB-to-Serial Console Tools

These tools enable direct console access to network devices using USB-to-Serial adapters. This is essential for initial device setup, emergency access when network connectivity is lost, or when SSH has not yet been configured.

Supported USB-to-Serial Adapters:

  • FTDI FT232R/FT232H (recommended - most reliable)

  • Prolific PL2303 (widely compatible)

  • Silicon Labs CP2102/CP2104 (good performance)

  • CH340/CH341 chipsets (budget-friendly option)

All adapters work with standard Cisco/Aruba console cables (RJ45 to DB9 or direct USB).

serial_list_ports

List available USB-to-Serial ports on the system. Automatically detects FTDI, Prolific, Silicon Labs, and CH340 adapters.

Example:

Show me all available serial ports

serial_connect

Connect to a network device via USB-to-Serial console port.

Parameters:

  • port (required) - Serial port name (e.g., COM3 on Windows, /dev/ttyUSB0 on Linux)

  • baudRate (optional) - Baud rate (default: 9600 for most switches)

  • connectionId (optional) - Unique identifier for connection

  • deviceType (optional) - Device type for optimal settings (cisco, aruba, generic)

Example:

Connect to my Cisco switch console on COM3

serial_send_command

Send a command to network device via serial connection.

Parameters:

  • connectionId (required) - ID of an active serial connection

  • command (required) - Command to send to device

  • waitForResponse (optional) - Wait for device response

  • timeout (optional) - Response timeout in milliseconds

Example:

Send "show version" command to the console connection

serial_discover_device

Discover device type and capabilities via serial connection. Automatically identifies Cisco IOS, Cisco IOS-XE, Aruba, and generic devices.

Parameters:

  • connectionId (required) - ID of an active serial connection

Example:

Discover what type of device is connected

serial_list_connections

List all active serial connections.

serial_disconnect

Disconnect from a serial port.

Parameters:

  • connectionId (required) - ID of an active serial connection

Ubuntu Website Management Tools

The following Ubuntu server management tools are available:

  • ubuntu_nginx_control - Web server control (start, stop, restart, status, reload, check-config)

  • ubuntu_update_packages - System package updates with security-only option

  • ubuntu_ssl_certificate - SSL certificate management using Let's Encrypt (issue, renew, status, list)

  • ubuntu_website_deployment - Website deployment with automatic backup and restore

  • ubuntu_ufw_firewall - Firewall (UFW) management (enable, disable, allow, deny, delete)

SSH Setup & Automation Tools

These tools automate the process of configuring SSH access on network switches via console connection, enabling a smooth transition from console-only to SSH-based management.

switch_generate_ssh_config

Generate SSH configuration template for a network switch based on device type and security level.

Parameters:

  • deviceType (optional) - Device type: cisco, aruba (auto-detected if not specified)

  • securityLevel (optional) - Security level: basic, secure (default: basic)

  • hostname (required) - Switch hostname

  • ip_address (required) - Management IP address

  • subnet_mask (optional) - Subnet mask (default: 255.255.255.0)

  • gateway (required) - Default gateway

  • username (required) - SSH username

  • password (required) - SSH password

switch_apply_ssh_config

Apply SSH configuration to a switch via an active serial console connection.

Parameters:

  • serialConnectionId (required) - ID of an active serial connection

  • deviceType (optional) - Device type: cisco, aruba

  • hostname (required) - Switch hostname

  • ip_address (required) - Management IP address

  • gateway (required) - Default gateway

  • username (required) - SSH username

  • password (required) - SSH password

  • confirmApply (required) - Must be true to proceed

switch_verify_ssh_status

Check the current SSH configuration status on a switch via serial connection.

Parameters:

  • serialConnectionId (required) - ID of an active serial connection

switch_test_ssh_connection

Test SSH connectivity to a newly configured switch.

Parameters:

  • ip_address (required) - Switch IP address

  • username (required) - SSH username

  • password (required) - SSH password

  • port (optional) - SSH port (default: 22)

switch_complete_ssh_setup

Complete end-to-end SSH setup workflow via console connection. This automates the entire process of configuring SSH on a switch.

Parameters:

  • serialConnectionId (required) - ID of an active serial connection

  • hostname (required) - Switch hostname

  • ip_address (required) - Management IP address

  • gateway (required) - Default gateway

  • username (required) - SSH username

  • password (required) - SSH password

  • confirmSetup (required) - Must be true to proceed

Console-to-SSH Transition Tools

console_to_ssh_transition

Complete automated workflow to transition a network switch from console-only access to SSH management. This is the recommended tool for initial switch setup.

Parameters:

  • port (required) - Serial port (e.g., COM3, /dev/ttyUSB0)

  • hostname (required) - Switch hostname

  • ip_address (required) - Management IP address

  • gateway (required) - Default gateway

  • username (required) - SSH username

  • password (required) - SSH password

  • deviceType (optional) - Device type: cisco, aruba (auto-detected if not specified)

  • confirmTransition (required) - Must be true to proceed

Example:

Set up SSH on my Cisco switch connected to COM3 with hostname "switch-core-01", IP 192.168.1.10, gateway 192.168.1.1, username "admin"

quick_ssh_check

Quick check of SSH status on a switch via serial connection without making any changes.

Parameters:

  • port (required) - Serial port

  • baudRate (optional) - Baud rate (default: 9600)

  • enablePassword (optional) - Enable password if required

Firmware Management Tools

These tools provide comprehensive firmware management capabilities for network switches, including version checking, firmware upload, verification, installation, and rollback preparation.

switch_check_firmware

Check the current firmware version and system information on a network switch.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • enablePassword (optional) - Enable password for privileged mode

Returns:

  • Current firmware version

  • Boot version

  • Device model and serial number

  • System uptime

  • Full version output

switch_check_storage

Verify available storage space on the switch before firmware upload.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • enablePassword (optional) - Enable password for privileged mode

Returns:

  • Flash storage information

  • Available space

  • File system details

switch_upload_firmware

Upload a firmware file to the network switch via SFTP. Supports large firmware files with 30-minute timeout.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • localFirmwarePath (required) - Local path to firmware file

  • remotePath (optional) - Remote path on switch (default: flash:/filename)

  • enablePassword (optional) - Enable password for privileged mode

Example:

Upload firmware file ~/downloads/c2960-lanbasek9-mz.150-2.SE11.bin to the switch

switch_verify_firmware

Verify the integrity of an uploaded firmware file on the switch using MD5 checksums.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • firmwarePath (required) - Path to firmware file on switch

  • enablePassword (optional) - Enable password for privileged mode

Returns:

  • Verification status

  • MD5 checksum results

  • File information

switch_install_firmware

Install firmware on the switch and optionally reboot to apply the update.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • firmwarePath (required) - Path to firmware file on switch

  • enablePassword (optional) - Enable password for privileged mode

  • autoReboot (optional) - Automatically reboot after installation (default: false)

Important: This modifies the boot configuration. Test in a lab environment first!

Example:

Install firmware flash:/c2960-lanbasek9-mz.150-2.SE11.bin and reboot the switch

switch_prepare_rollback

Prepare information needed for firmware rollback in case of issues with new firmware.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • enablePassword (optional) - Enable password for privileged mode

Returns:

  • Current boot configuration

  • Available firmware images

  • Rollback instructions

USB-to-Serial Console Setup

Hardware Requirements

USB-to-Serial Adapters:

  • FTDI-based adapters (FT232R, FT232H) - Best choice for reliability

  • Prolific PL2303 - Widely available and compatible

  • Silicon Labs CP2102/CP2104 - Good performance and stability

  • CH340/CH341 - Budget option, works well on most systems

Console Cables:

  • Cisco console cable (RJ45 to DB9 or USB)

  • Aruba/HP console cable (RJ45 to DB9 or USB)

  • Universal console cables work with most devices

Driver Installation

Windows:

  • FTDI drivers: Usually auto-installed, or download from ftdichip.com

  • Prolific drivers: Available from prolific.com.tw

  • Silicon Labs drivers: Download from silabs.com

  • CH340 drivers: Usually included in Windows 10/11, or download separately

macOS:

  • FTDI adapters: Usually work out-of-the-box

  • Other adapters: May require driver installation from manufacturer

Linux:

  • Most adapters work immediately with kernel drivers

  • FTDI, Silicon Labs, CH340: Built into kernel

  • Check dmesg after plugging in adapter to verify detection

Quick Start with Console

  1. Connect USB-to-Serial adapter to your computer

  2. Connect console cable from adapter to switch console port

  3. List available ports: "Show me available serial ports"

  4. Connect to port: "Connect to COM3 for Cisco switch"

  5. Send commands or run automated setup

Security Notes

  • Store SSH private keys securely

  • Use key-based authentication when possible

  • Limit SSH access to specific IP addresses

  • Keep your server updated

  • Use strong passwords or passphrases (minimum 8 characters)

  • Secure physical access to console ports and USB-to-Serial adapters

  • Consider setting up environment variables in a .env file for sensitive information

Troubleshooting

Server won't start

  • Check that Node.js is installed: node --version

  • Verify all dependencies are installed: npm install

  • Rebuild the project: npm run build

Connection issues

  • Verify SSH server is running on the target

  • Check firewall settings

  • Confirm credentials are correct

  • Test SSH connection manually first

Claude Desktop integration

  • Ensure the path in configuration is absolute

  • Restart Claude Desktop after configuration changes

  • Check Developer Console for error messages

Development

To modify or extend the server:

  1. Edit source files in src/

  2. Rebuild: npm run build

  3. Test your changes

  4. Restart Claude Desktop or VS Code to pick up changes

Running in Development Mode

For quick testing during development:

npm run dev

Contributing

Contributions for additional tools and features are welcome. Please feel free to submit pull requests or open issues for enhancements and bug fixes.

License

MIT License

Available Tools

11 tools
ssh_connectC

Connect to a remote server via SSH

ParametersJSON Schema
NameRequiredDescriptionDefault
hostYesHostname or IP address of the remote server
portNoSSH port (default: 22)
usernameYesSSH username
passwordNoSSH password (if not using key-based authentication)
privateKeyPathNoPath to private key file (if using key-based authentication)
passphraseNoPassphrase for private key (if needed)
connectionIdNoUnique identifier for this connection

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. 'Connect' implies establishing a persistent session, but the description doesn't specify what happens after connection (e.g., whether it maintains state, returns a connection handle, or has timeout behavior). It mentions SSH but doesn't detail security implications, error handling, or what constitutes a successful connection.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, clear sentence that efficiently conveys the core function without unnecessary words. It's front-loaded with the essential action and resource, making it easy for an agent to parse. Every word earns its place in this minimal but complete statement.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 7 parameters, no annotations, and no output schema, the description is insufficient. It doesn't address what the tool returns (e.g., connection status, session ID), error conditions, or behavioral details like persistence. Given the complexity of SSH connections and the lack of structured metadata, the description should provide more operational context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all parameters are documented in the schema. The description adds no additional parameter semantics beyond the basic action of connecting. It doesn't explain parameter interactions (e.g., password vs privateKeyPath) or provide context beyond what the schema already specifies. Baseline 3 is appropriate given high schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('connect') and target ('to a remote server via SSH'), making the purpose immediately understandable. It distinguishes from siblings like ssh_disconnect or ssh_exec by specifying the connection establishment function. However, it doesn't explicitly differentiate from all SSH-related siblings beyond the basic verb.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites like needing authentication credentials, nor does it explain when to choose this over other SSH tools like ssh_exec (which might handle both connection and command execution). The context is implied but not articulated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_disconnectC

Close an SSH connection

ParametersJSON Schema
NameRequiredDescriptionDefault
connectionIdYesID of an active SSH connection

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full burden for behavioral disclosure. It states the action (close) but doesn't describe effects (e.g., terminates session, frees resources), side effects, error conditions, or permissions required. This is a mutation tool with minimal behavioral context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, efficient sentence with zero wasted words. It's appropriately sized for a simple tool and front-loads the core action. Every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation tool with no annotations and no output schema, the description is inadequate. It doesn't explain what happens after closing (success/failure states, return values), error handling, or dependencies on active connections. Given the complexity and lack of structured data, more context is needed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% (connectionId parameter fully documented in schema). The description adds no parameter-specific details beyond what the schema provides. Baseline 3 is appropriate when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description 'Close an SSH connection' clearly states the action (close) and resource (SSH connection). It distinguishes from siblings like ssh_connect (open) and ssh_exec (run commands), but doesn't explicitly mention this differentiation. The purpose is specific and unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites (e.g., needing an active connection), exclusions, or relationships with sibling tools like ssh_connect. Usage context is implied but not stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_download_fileC

Download a file from the remote server

ParametersJSON Schema
NameRequiredDescriptionDefault
connectionIdYesID of an active SSH connection
remotePathYesPath to the file on the remote server
localPathYesPath where the file should be saved locally

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It states the action ('Download') but doesn't describe what happens during execution—such as whether it overwrites local files, handles errors, requires specific permissions, or provides progress feedback. This leaves significant gaps for a file transfer operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, efficient sentence that directly states the tool's function without any unnecessary words. It's front-loaded with the core action, making it easy to parse and understand immediately.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a file download tool with no annotations and no output schema, the description is incomplete. It doesn't explain what the tool returns (e.g., success status, error messages, or file metadata), nor does it cover behavioral aspects like error handling or security considerations, which are critical for SSH operations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all three parameters (connectionId, remotePath, localPath) with clear descriptions. The description adds no additional meaning beyond what's in the schema, such as file format support or path validation rules, meeting the baseline for high coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Download') and resource ('a file from the remote server'), making the tool's purpose immediately understandable. However, it doesn't explicitly differentiate from sibling tools like ssh_upload_file or ssh_list_files, which would require mentioning it's specifically for file retrieval rather than upload or listing.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites like needing an active SSH connection (implied by the connectionId parameter but not stated), nor does it differentiate from siblings such as ssh_upload_file for uploading or ssh_list_files for browsing files.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_execC

Execute a command on the remote server

ParametersJSON Schema
NameRequiredDescriptionDefault
connectionIdYesID of an active SSH connection
commandYesCommand to execute
cwdNoWorking directory for the command
timeoutNoCommand timeout in milliseconds

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It states the action but lacks critical details: it doesn't mention security implications, permission requirements, output format (e.g., stdout/stderr), error handling, or that it might affect the remote system. This is inadequate for a mutation tool with zero annotation coverage.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, efficient sentence with no wasted words. It's front-loaded with the core action, making it easy to parse quickly, which is ideal for conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (executing commands on a remote server), lack of annotations, and no output schema, the description is incomplete. It fails to address behavioral aspects like safety, output, or error handling, which are crucial for an agent to use this tool effectively in context with siblings.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema description coverage is 100%, so all parameters are documented in the schema. The description adds no additional meaning beyond implying command execution, which the schema already covers with parameter descriptions. This meets the baseline of 3 when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('execute a command') and target ('on the remote server'), which distinguishes it from siblings like ssh_connect or ssh_upload_file. However, it doesn't explicitly differentiate from potential command-execution alternatives in the sibling list, keeping it at 4 rather than 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives. It doesn't mention prerequisites (e.g., needing an active SSH connection via ssh_connect), exclusions, or comparisons to other command-related tools, leaving the agent to infer usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_list_filesC

List files in a directory on the remote server

ParametersJSON Schema
NameRequiredDescriptionDefault
connectionIdYesID of an active SSH connection
remotePathYesPath to the directory on the remote server

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It states the basic function but lacks critical details: it doesn't specify what the output looks like (e.g., list format, error handling), whether it requires specific permissions, or if there are rate limits. For a tool interacting with a remote server, this is a significant gap in transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, direct sentence that efficiently conveys the core purpose without any fluff. It is appropriately sized and front-loaded, making it easy for an agent to parse quickly. Every word earns its place, with no wasted verbiage.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity of SSH operations and the lack of annotations or output schema, the description is incomplete. It doesn't explain what the tool returns (e.g., file list, errors), behavioral aspects like timeouts, or integration with sibling tools (e.g., ssh_connect). For a tool with no structured output and no annotations, more context is needed to be fully helpful.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% description coverage, with clear documentation for both parameters (connectionId and remotePath). The description adds no additional semantic context beyond what the schema provides, such as format examples or constraints. According to the rules, with high schema coverage, the baseline is 3 even without param info in the description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('List files') and target ('in a directory on the remote server'), which is specific and unambiguous. It distinguishes from siblings like ssh_download_file or ssh_exec by focusing on directory listing rather than file transfer or command execution. However, it doesn't explicitly differentiate from hypothetical similar listing tools, keeping it at 4 rather than 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites (e.g., needing an active SSH connection via ssh_connect), exclusions (e.g., not for listing local files), or comparisons to other tools. This leaves the agent to infer usage from the tool name and context alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_upload_fileC

Upload a file to the remote server

ParametersJSON Schema
NameRequiredDescriptionDefault
connectionIdYesID of an active SSH connection
localPathYesPath to the local file
remotePathYesPath where the file should be saved on the remote server

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It states the action ('Upload') but lacks critical details: it doesn't specify whether this overwrites existing files, requires specific permissions, handles errors, or indicates success/failure. For a file transfer tool with zero annotation coverage, this leaves significant gaps in understanding its behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, direct sentence with zero wasted words. It front-loads the core action and resource efficiently, making it easy to parse quickly. Every word earns its place by conveying essential information without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity of SSH file operations and the lack of annotations or output schema, the description is insufficient. It doesn't cover behavioral aspects like error handling, success indicators, or interaction with sibling tools (e.g., dependency on 'ssh_connect'). For a tool that modifies remote systems, more context is needed to ensure safe and effective use.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% description coverage, clearly documenting all three required parameters. The description adds no additional semantic context beyond what the schema provides, such as file format constraints or path validation rules. Since the schema does the heavy lifting, the baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Upload') and target resource ('a file to the remote server'), making the purpose immediately understandable. However, it doesn't distinguish this tool from its sibling 'ssh_download_file' beyond the directional difference, missing an opportunity to clarify the upload-specific context.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives like 'ssh_download_file' or 'ssh_list_files', nor does it mention prerequisites such as needing an active SSH connection via 'ssh_connect'. Without any contextual cues, users must infer usage from the tool name alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ubuntu_nginx_controlC

Control Nginx web server on Ubuntu

ParametersJSON Schema
NameRequiredDescriptionDefault
connectionIdYesID of an active SSH connection
actionYesAction to perform (start, stop, restart, status, reload, check-config)
sudoNoWhether to run the command with sudo (default: true)

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full burden for behavioral disclosure but provides minimal information. It mentions 'Control' which implies system administration actions, but doesn't disclose that this likely requires root/sudo privileges (though the schema hints at this), doesn't mention what happens when actions fail, and provides no information about output format or error conditions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise at just 5 words, front-loading the essential information with zero wasted words. Every word earns its place by specifying the target (Nginx), platform (Ubuntu), and action type (Control).

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a system administration tool with 3 parameters, no annotations, and no output schema, the description is insufficient. It doesn't explain what 'Control' entails operationally, doesn't mention that this requires an established SSH connection (though the parameter implies it), and provides no information about what the tool returns or how to interpret results.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 100% schema description coverage, the baseline is 3. The description adds no parameter-specific information beyond what's already documented in the schema. It doesn't explain the relationship between parameters, doesn't provide examples of valid 'action' values (though the schema lists them), and offers no additional context about parameter usage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb ('Control') and resource ('Nginx web server on Ubuntu'), making the purpose immediately understandable. However, it doesn't differentiate this tool from potential alternatives like 'ssh_exec' which could also control Nginx, or explain why this specialized tool exists when general SSH execution is available.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites (like needing an active SSH connection first), doesn't compare it to the 'ssh_exec' sibling tool, and offers no context about when this specialized Nginx control tool is preferable to general command execution.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ubuntu_ssl_certificateC

Manage SSL certificates using Let's Encrypt on Ubuntu

ParametersJSON Schema
NameRequiredDescriptionDefault
connectionIdYesID of an active SSH connection
actionYesAction to perform (issue, renew, status, list)
domainNoDomain name for the certificate (required for issue and renew)
emailNoEmail address for Let's Encrypt notifications (required for issue)
webrootNoWeb root path for domain verification (default: /var/www/html)
sudoNoWhether to run the command with sudo (default: true)

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. While 'manage' implies both read and write operations, it doesn't specify critical behaviors like whether actions are destructive (e.g., 'issue' might overwrite existing certificates), authentication requirements beyond SSH, rate limits for Let's Encrypt, or what the tool outputs. This leaves significant gaps for a tool with multiple action types.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, efficient sentence that states the core purpose without unnecessary words. It's appropriately sized and front-loaded, with every word earning its place by conveying essential information about the tool's domain and technology stack.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (multiple actions with different parameter requirements), lack of annotations, and absence of an output schema, the description is insufficient. It doesn't explain what the tool returns (e.g., certificate paths, status messages, error formats) or provide context about Let's Encrypt integration, making it incomplete for effective agent use.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema description coverage is 100%, so all parameters are documented in the schema. The description adds no additional parameter semantics beyond what's in the schema (e.g., it doesn't explain the relationship between 'action' values and other parameters like 'domain' or 'email'). Since the schema does the heavy lifting, the baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose as managing SSL certificates using Let's Encrypt on Ubuntu, which includes both the verb ('manage') and resource ('SSL certificates'). It distinguishes itself from sibling tools like ubuntu_nginx_control or ubuntu_website_deployment by focusing specifically on SSL certificate operations, though it doesn't explicitly differentiate from all siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites (e.g., needing an active SSH connection via ssh_connect first), nor does it explain when to choose this over other certificate management approaches or sibling tools like ubuntu_website_deployment that might handle certificates differently.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ubuntu_ufw_firewallC

Manage Ubuntu Uncomplicated Firewall (UFW)

ParametersJSON Schema
NameRequiredDescriptionDefault
connectionIdYesID of an active SSH connection
actionYesAction to perform (enable, disable, status, allow, deny, delete, reset)
portNoPort number or service name (e.g., 80, 443, ssh, http)
protocolNoProtocol (tcp, udp)
fromNoSource IP address or network
sudoNoWhether to run the command with sudo (default: true)

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full burden for behavioral disclosure. 'Manage' implies both read and write operations, but the description doesn't specify which actions are destructive (e.g., 'reset' likely removes all rules), authentication requirements (sudo is a parameter but not highlighted), or potential side effects. For a multi-action tool with zero annotation coverage, this is insufficient.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, efficient sentence that directly states the tool's purpose without unnecessary words. It's appropriately sized and front-loaded, earning a perfect score for conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (6 parameters including potentially destructive actions like 'reset'), no annotations, and no output schema, the description is inadequate. It doesn't explain what the tool returns, error conditions, or behavioral nuances. For a multi-action system management tool, this leaves significant gaps in understanding.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema fully documents all 6 parameters. The description adds no additional parameter semantics beyond what's in the schema. According to scoring rules, when schema coverage is high (>80%), the baseline is 3 even with no param info in the description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description 'Manage Ubuntu Uncomplicated Firewall (UFW)' clearly states the tool's purpose as managing a specific firewall system. It identifies the resource (UFW firewall) and implies a range of management actions. However, it doesn't distinguish this tool from potential sibling firewall tools (none exist in the provided list), so it earns a 4 rather than a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites like requiring an SSH connection, nor does it differentiate from other system management tools in the sibling list (e.g., ubuntu_nginx_control). Without any usage context or exclusions, this scores a 2.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ubuntu_update_packagesC

Update system packages on Ubuntu

ParametersJSON Schema
NameRequiredDescriptionDefault
connectionIdYesID of an active SSH connection
securityOnlyNoWhether to update only security packages (default: false)
upgradeNoWhether to upgrade packages after update (default: true)
autoremoveNoWhether to remove unused packages after update (default: false)
sudoNoWhether to run the command with sudo (default: true)

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full burden for behavioral disclosure. 'Update system packages' implies a system modification, but the description doesn't disclose that this requires elevated privileges (sudo), may require user confirmation, could break dependencies, or has potential side effects. It mentions none of the behavioral traits that would help an agent understand the operation's impact.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, efficient sentence with zero wasted words. It's appropriately sized for a tool with comprehensive schema documentation. Every word earns its place by clearly stating the core functionality without unnecessary elaboration.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a system modification tool with 5 parameters, no annotations, and no output schema, the description is inadequate. It doesn't explain what 'update' entails (apt update vs apt upgrade), doesn't mention typical use cases, doesn't warn about potential system impacts, and provides no information about return values or error conditions. The agent would need to infer too much from the sparse description.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all 5 parameters thoroughly. The description adds no parameter-specific information beyond what's in the schema. It doesn't explain the relationship between parameters (e.g., how securityOnly interacts with upgrade) or provide usage examples. Baseline 3 is appropriate when schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description 'Update system packages on Ubuntu' clearly states the action (update) and resource (system packages on Ubuntu). It distinguishes from sibling tools like ubuntu_nginx_control or ubuntu_ufw_firewall by focusing on package management rather than service control or firewall configuration. However, it doesn't explicitly differentiate from generic ssh_exec which could also run update commands.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites like needing an active SSH connection, nor does it explain when to use this specialized tool versus the more general ssh_exec tool. There's no context about typical update scenarios or limitations.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ubuntu_website_deploymentC

Deploy website files and create backups on Ubuntu

ParametersJSON Schema
NameRequiredDescriptionDefault
connectionIdYesID of an active SSH connection
actionYesAction to perform (deploy, backup, restore)
localPathNoLocal path to the website files for deployment
remotePathNoRemote path where the website is located (default: /var/www/html)
backupPathNoPath to store backups (default: /var/backups/websites)
createBackupNoWhether to create a backup before deployment (default: true)
sudoNoWhether to run the command with sudo (default: true)

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions 'deploy' and 'create backups' but doesn't specify critical details like whether this is a destructive operation (e.g., overwriting files), permission requirements, error handling, or backup retention. This leaves significant gaps for safe usage.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, efficient sentence that front-loads the core functionality ('Deploy website files and create backups on Ubuntu') with zero wasted words. It's appropriately sized for the tool's complexity and easy to parse.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 7 parameters, no annotations, and no output schema, the description is incomplete. It doesn't address behavioral aspects like safety (e.g., whether deployment overwrites existing files), error conditions, or what the tool returns. Given the complexity and lack of structured data, more context is needed for reliable use.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 100% description coverage, so parameters are well-documented in the schema itself. The description adds minimal value beyond implying the tool handles website files and backups, but it doesn't provide additional context like file format expectations or backup naming conventions. Baseline 3 is appropriate given the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose with specific verbs ('deploy website files' and 'create backups') and resource ('on Ubuntu'), making it easy to understand what the tool does. However, it doesn't explicitly differentiate from sibling tools like 'ssh_upload_file' or 'ubuntu_nginx_control', which might handle similar operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives like 'ssh_upload_file' for file transfers or 'ubuntu_nginx_control' for web server management. It mentions the action parameter includes 'deploy, backup, restore' but doesn't explain when each is appropriate or any prerequisites.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 11 tool updates
    • First observedssh_connect
    • First observedssh_disconnect
    • First observedssh_download_file
    • First observedssh_exec
    • First observedssh_list_files
    • First observedssh_upload_file
    • First observedubuntu_nginx_control
    • First observedubuntu_ssl_certificate
    • First observedubuntu_ufw_firewall
    • First observedubuntu_update_packages
    • First observedubuntu_website_deployment

TDQS

B3.2/5.0
Disambiguation3/5

The SSH tools (ssh_connect, ssh_disconnect, ssh_exec, ssh_list_files, ssh_upload_file, ssh_download_file) are clearly distinct and cover basic SSH operations well. However, the Ubuntu-specific tools (ubuntu_nginx_control, ubuntu_ssl_certificate, ubuntu_ufw_firewall, ubuntu_update_packages, ubuntu_website_deployment) overlap conceptually with the SSH tools since they also involve remote server management, creating some ambiguity about when to use which set. The descriptions help differentiate, but the boundary between general SSH operations and Ubuntu-specific administration is not perfectly clear.

Naming Consistency4/5

The naming is mostly consistent with a verb_noun pattern (e.g., ssh_connect, ssh_exec, ubuntu_update_packages), which is predictable and readable. However, there is a minor deviation: 'ssh_download_file' and 'ssh_upload_file' use 'download' and 'upload' as verbs, while others like 'ssh_list_files' use 'list'—this is still consistent in style but slightly varies in verb choice. Overall, the naming follows a clear convention with only small inconsistencies.

Tool Count4/5

With 11 tools, the count is reasonable for a server focused on SSH and Ubuntu server management. It covers a broad scope without being excessive. However, the split between general SSH tools (6 tools) and Ubuntu-specific tools (5 tools) might feel slightly fragmented, making it borderline heavy for a pure SSH server but still well-scoped for the combined purpose. It earns its place but could be optimized for clarity.

Completeness4/5

For SSH operations, the toolset is quite complete, covering connection management, file transfer, command execution, and directory listing—no major gaps. For Ubuntu server management, it includes key areas like web server control, SSL, firewall, updates, and deployment, which is comprehensive. A minor gap is the lack of tools for non-Ubuntu systems or more advanced SSH features (e.g., port forwarding), but agents can work around this with the existing tools for core workflows.

Maintenance

ActivityInactive
ResponsivenessUnresponsive

Related MCP Connectors

Related MCP Servers

  • F
    license
    B
    quality
    D
    maintenance
    Enables SSH operations including connecting to remote servers, executing commands, and transferring files between local and remote systems. Supports multiple SSH connections with both password and private key authentication methods.
    18
    -
  • A
    license
    A
    quality
    D
    maintenance
    Enables secure SSH connections to multiple remote servers with support for command execution, file transfers (SFTP), directory listing, and both password and key-based authentication.
    7
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    SSH automation MCP server that enables Claude and ChatGPT to execute commands, manage files, install packages, and control services on remote servers over SSH — supporting password, key, and agent authentication.
    33
    1,267
    4
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    A Model Context Protocol (MCP) SSH client server that provides autonomous SSH operations for GitHub Copilot and VS Code. Enable natural language SSH automation without manual prompts or GUI interactions.
    20
    1
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/mixelpixx/SSH-MCP'

If you have feedback or need assistance with the MCP directory API, please join our Discord server