SSH MCP
The SSH MCP server enables AI tools like Claude Desktop to securely manage remote servers and network devices through SSH and serial console connections, providing comprehensive infrastructure management capabilities.
Core SSH Operations:
Connection Management: Establish SSH connections with password or key-based authentication (including passphrase support for encrypted keys), custom ports, and connection IDs
Remote Command Execution: Run commands with configurable working directory, timeout settings, and sudo support for privileged operations
File Operations: Upload/download files via SFTP and list directory contents with detailed file information
Ubuntu Server Management:
Nginx Control: Start, stop, restart, reload, check status, and validate configuration
Package Management: Update and upgrade system packages with security-only updates and automatic cleanup options
SSL Certificates: Issue, renew, check status, and list Let's Encrypt certificates with automatic domain verification
Website Deployment: Deploy files with automatic backup creation and restore capabilities
UFW Firewall: Configure rules including enable/disable, allow/deny, and protocol-specific settings
Network Device Management:
Console Access: Connect via USB-to-Serial adapters (FTDI, Prolific, Silicon Labs, CH340)
Device Operations: Discover switch types, show interfaces/VLANs/MAC tables, backup configurations, and run network diagnostics (ping/traceroute)
Automated SSH Setup: Console-to-SSH transition for switches, reducing setup time from 15-20 minutes to under 2 minutes
Firmware Management: Check versions, verify storage, upload firmware via SFTP, verify integrity, install updates, and prepare rollback procedures
Compatibility: Tested with Cisco Catalyst 2960/3560/3750 and Aruba 2530/2930 series switches
Production Reliability: Proven in live network environments with zero downtime incidents during deployments
Planned integration for Apache web server control in future enhancements
Support for .env files to store sensitive configuration information
Supports git for repository management including cloning the MCP server
Repository hosting for the MCP server code
Planned integration for SSL certificate management with Let's Encrypt
Compatible with Linux operating systems for running the MCP server
Compatible with macOS operating systems for running the MCP server
Provides tools to check NGINX server status and planned integration for Nginx web server control
Supports Node.js 18 or higher as a requirement for running the MCP server
Support for Ubuntu website management tools including system package updates and server administration
Planned integration for WordPress management on remote servers
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@SSH MCPconnect to my server at example.com using username 'admin' and password authentication"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
MCP SSH Server
A Model Context Protocol (MCP) server that provides comprehensive SSH and serial console access to remote servers and network devices. Enables AI tools like Claude Desktop to securely manage Linux servers, network switches, and infrastructure devices through both network SSH connections and direct USB-to-Serial console access.
Features
Core SSH Capabilities
SSH connection management with password or key-based authentication
Remote command execution with timeout handling
File upload and download via SFTP
Directory listing and file operations
Secure connection handling
Network Device Management
USB-to-Serial Console Access - Direct console connections via FTDI and other USB adapters
Network Switch Management - Full support for Cisco IOS/IOS-XE and Aruba switches
Device Discovery - Automatic detection of switch types and capabilities
Configuration Management - Backup, restore, and automated configuration
Network Diagnostics - Built-in ping, traceroute, and connectivity testing
Console-to-SSH Transition - Automated SSH setup via console connection
Firmware Management - Upload, verify, install, and rollback switch firmware
Server Management
Ubuntu server management tools (Nginx, SSL, packages, firewall)
Compatible with Claude Desktop, VS Code, and other MCP-compatible clients
Related MCP server: SSH MCP Server
Real-World Production Testing
This tool has been extensively tested in production network environments:
Network Discovery - Successfully discovered previously unknown fluttering ports on production switches that were causing intermittent connectivity issues
Zero Downtime - Managed multiple switches in live production networks without causing any network disruptions or outages
Time Savings - Automated SSH configuration reduced switch setup time from 15-20 minutes to under 2 minutes
Reliability - Zero incidents during production deployments across multiple network devices
USB-to-Serial Compatibility - Tested with FTDI FT232R/FT232H, Prolific PL2303, Silicon Labs CP2102/CP2104, and CH340 adapters
Switch Compatibility - Validated on Cisco Catalyst 2960/3560/3750 and Aruba 2530/2930 series switches
The tool has proven itself reliable enough for production network management tasks without requiring a separate lab environment for testing.
Prerequisites
Node.js 18 or higher
npm or yarn
Compatible with Windows, macOS, and Linux
Installation
Clone the repository:
git clone https://github.com/yourusername/mcp-ssh-server.git cd mcp-ssh-serverInstall dependencies:
npm installBuild the project:
npm run buildInstall globally (optional):
npm install -g .
Configuration
Claude Desktop Configuration
Open Claude Desktop
Go to Settings > Developer (or press Ctrl+Shift+D)
Edit the MCP configuration
Add the following configuration:
{
"mcpServers": {
"ssh-server": {
"command": "node",
"args": ["/path/to/mcp-ssh-server/build/index.js"],
"env": {
"NODE_NO_WARNINGS": "1"
}
}
}
}Important: Replace /path/to/mcp-ssh-server/build/index.js with the absolute path to your built index.js file.
VS Code Configuration (if using MCP extension)
Create or edit .vscode/mcp.json in your workspace:
{
"mcpServers": {
"ssh-server": {
"command": "node",
"args": ["/path/to/mcp-ssh-server/build/index.js"]
}
}
}Available Tools
Core SSH Tools
ssh_connect
Establish an SSH connection to a remote server.
Parameters:
host(required) - Hostname or IP addressusername(required) - SSH usernamepassword(optional) - SSH passwordprivateKeyPath(optional) - Path to private key filepassphrase(optional) - Passphrase for private keyport(optional) - SSH port (default: 22)connectionId(optional) - Unique identifier for this connection
Returns:
success- Boolean indicating successconnectionId- ID to use for subsequent commandsmessage- Connection status message
Example:
Connect to my server at example.com using username 'admin' and password authenticationssh_exec
Execute a command on the remote server.
Parameters:
connectionId(required) - ID from ssh_connectcommand(required) - Command to executecwd(optional) - Working directorytimeout(optional) - Command timeout in milliseconds (default: 60000)
Returns:
code- Exit codesignal- Signal that terminated the process (if any)stdout- Standard outputstderr- Standard error
Example:
Run "ls -la /var/www/html" on the serverssh_upload_file
Upload a file to the remote server.
Parameters:
connectionId(required) - ID from ssh_connectlocalPath(required) - Local file pathremotePath(required) - Remote destination path
Returns:
success- Boolean indicating successmessage- Upload status message
ssh_download_file
Download a file from the remote server.
Parameters:
connectionId(required) - ID from ssh_connectremotePath(required) - Remote file pathlocalPath(required) - Local destination path
Returns:
success- Boolean indicating successmessage- Download status message
ssh_list_files
List files in a directory on the remote server.
Parameters:
connectionId(required) - ID from ssh_connectremotePath(required) - Directory path to list
Returns:
files- Array of file objects with properties:filename- File nameisDirectory- Boolean indicating if it's a directorysize- File sizelastModified- Last modification time
ssh_disconnect
Close an SSH connection.
Parameters:
connectionId(required) - ID from ssh_connect
Returns:
success- Boolean indicating successmessage- Disconnection status message
Usage Examples with Claude
Connect to your server:
Please connect to my VPS at example.com using username 'admin' and my SSH key at ~/.ssh/id_rsaCheck server status:
Run the command "systemctl status nginx" to check web server statusUpload a website file:
Upload my local file ~/websites/index.html to /var/www/html/index.html on the serverList website files:
Show me all files in the /var/www/html directoryDownload a backup:
Download the file /var/backups/website-backup.tar.gz to my local Downloads folderDisconnect when done:
Please disconnect from the SSH session
Network Switch Management Tools
switch_discover_device
Discover and identify network switch device type and capabilities.
Parameters:
connectionId(required) - ID of an active SSH connectionenablePassword(optional) - Enable password for privileged mode
switch_show_interfaces
Show interface status and configuration on network switch.
Parameters:
connectionId(required) - ID of an active SSH connectioninterfaceType(optional) - Type of interfaces to showenablePassword(optional) - Enable password for privileged mode
switch_show_vlans
Show VLAN configuration and status on network switch.
Parameters:
connectionId(required) - ID of an active SSH connectionenablePassword(optional) - Enable password for privileged mode
switch_backup_config
Backup switch configuration (running or startup config).
Parameters:
connectionId(required) - ID of an active SSH connectionconfigType(optional) - Type of configuration to backupenablePassword(optional) - Enable password for privileged mode
switch_network_diagnostics
Run network diagnostics from switch (ping, traceroute).
Parameters:
connectionId(required) - ID of an active SSH connectiontarget(required) - Target IP address or hostnamediagnosticType(optional) - Type of diagnostic to runenablePassword(optional) - Enable password for privileged mode
switch_show_mac_table
Show MAC address table on network switch.
Parameters:
connectionId(required) - ID of an active SSH connectionvlan(optional) - Specific VLAN to show MAC addresses forenablePassword(optional) - Enable password for privileged mode
USB-to-Serial Console Tools
These tools enable direct console access to network devices using USB-to-Serial adapters. This is essential for initial device setup, emergency access when network connectivity is lost, or when SSH has not yet been configured.
Supported USB-to-Serial Adapters:
FTDI FT232R/FT232H (recommended - most reliable)
Prolific PL2303 (widely compatible)
Silicon Labs CP2102/CP2104 (good performance)
CH340/CH341 chipsets (budget-friendly option)
All adapters work with standard Cisco/Aruba console cables (RJ45 to DB9 or direct USB).
serial_list_ports
List available USB-to-Serial ports on the system. Automatically detects FTDI, Prolific, Silicon Labs, and CH340 adapters.
Example:
Show me all available serial portsserial_connect
Connect to a network device via USB-to-Serial console port.
Parameters:
port(required) - Serial port name (e.g., COM3 on Windows, /dev/ttyUSB0 on Linux)baudRate(optional) - Baud rate (default: 9600 for most switches)connectionId(optional) - Unique identifier for connectiondeviceType(optional) - Device type for optimal settings (cisco, aruba, generic)
Example:
Connect to my Cisco switch console on COM3serial_send_command
Send a command to network device via serial connection.
Parameters:
connectionId(required) - ID of an active serial connectioncommand(required) - Command to send to devicewaitForResponse(optional) - Wait for device responsetimeout(optional) - Response timeout in milliseconds
Example:
Send "show version" command to the console connectionserial_discover_device
Discover device type and capabilities via serial connection. Automatically identifies Cisco IOS, Cisco IOS-XE, Aruba, and generic devices.
Parameters:
connectionId(required) - ID of an active serial connection
Example:
Discover what type of device is connectedserial_list_connections
List all active serial connections.
serial_disconnect
Disconnect from a serial port.
Parameters:
connectionId(required) - ID of an active serial connection
Ubuntu Website Management Tools
The following Ubuntu server management tools are available:
ubuntu_nginx_control - Web server control (start, stop, restart, status, reload, check-config)
ubuntu_update_packages - System package updates with security-only option
ubuntu_ssl_certificate - SSL certificate management using Let's Encrypt (issue, renew, status, list)
ubuntu_website_deployment - Website deployment with automatic backup and restore
ubuntu_ufw_firewall - Firewall (UFW) management (enable, disable, allow, deny, delete)
SSH Setup & Automation Tools
These tools automate the process of configuring SSH access on network switches via console connection, enabling a smooth transition from console-only to SSH-based management.
switch_generate_ssh_config
Generate SSH configuration template for a network switch based on device type and security level.
Parameters:
deviceType(optional) - Device type: cisco, aruba (auto-detected if not specified)securityLevel(optional) - Security level: basic, secure (default: basic)hostname(required) - Switch hostnameip_address(required) - Management IP addresssubnet_mask(optional) - Subnet mask (default: 255.255.255.0)gateway(required) - Default gatewayusername(required) - SSH usernamepassword(required) - SSH password
switch_apply_ssh_config
Apply SSH configuration to a switch via an active serial console connection.
Parameters:
serialConnectionId(required) - ID of an active serial connectiondeviceType(optional) - Device type: cisco, arubahostname(required) - Switch hostnameip_address(required) - Management IP addressgateway(required) - Default gatewayusername(required) - SSH usernamepassword(required) - SSH passwordconfirmApply(required) - Must be true to proceed
switch_verify_ssh_status
Check the current SSH configuration status on a switch via serial connection.
Parameters:
serialConnectionId(required) - ID of an active serial connection
switch_test_ssh_connection
Test SSH connectivity to a newly configured switch.
Parameters:
ip_address(required) - Switch IP addressusername(required) - SSH usernamepassword(required) - SSH passwordport(optional) - SSH port (default: 22)
switch_complete_ssh_setup
Complete end-to-end SSH setup workflow via console connection. This automates the entire process of configuring SSH on a switch.
Parameters:
serialConnectionId(required) - ID of an active serial connectionhostname(required) - Switch hostnameip_address(required) - Management IP addressgateway(required) - Default gatewayusername(required) - SSH usernamepassword(required) - SSH passwordconfirmSetup(required) - Must be true to proceed
Console-to-SSH Transition Tools
console_to_ssh_transition
Complete automated workflow to transition a network switch from console-only access to SSH management. This is the recommended tool for initial switch setup.
Parameters:
port(required) - Serial port (e.g., COM3, /dev/ttyUSB0)hostname(required) - Switch hostnameip_address(required) - Management IP addressgateway(required) - Default gatewayusername(required) - SSH usernamepassword(required) - SSH passworddeviceType(optional) - Device type: cisco, aruba (auto-detected if not specified)confirmTransition(required) - Must be true to proceed
Example:
Set up SSH on my Cisco switch connected to COM3 with hostname "switch-core-01", IP 192.168.1.10, gateway 192.168.1.1, username "admin"quick_ssh_check
Quick check of SSH status on a switch via serial connection without making any changes.
Parameters:
port(required) - Serial portbaudRate(optional) - Baud rate (default: 9600)enablePassword(optional) - Enable password if required
Firmware Management Tools
These tools provide comprehensive firmware management capabilities for network switches, including version checking, firmware upload, verification, installation, and rollback preparation.
switch_check_firmware
Check the current firmware version and system information on a network switch.
Parameters:
connectionId(required) - ID of an active SSH connectionenablePassword(optional) - Enable password for privileged mode
Returns:
Current firmware version
Boot version
Device model and serial number
System uptime
Full version output
switch_check_storage
Verify available storage space on the switch before firmware upload.
Parameters:
connectionId(required) - ID of an active SSH connectionenablePassword(optional) - Enable password for privileged mode
Returns:
Flash storage information
Available space
File system details
switch_upload_firmware
Upload a firmware file to the network switch via SFTP. Supports large firmware files with 30-minute timeout.
Parameters:
connectionId(required) - ID of an active SSH connectionlocalFirmwarePath(required) - Local path to firmware fileremotePath(optional) - Remote path on switch (default: flash:/filename)enablePassword(optional) - Enable password for privileged mode
Example:
Upload firmware file ~/downloads/c2960-lanbasek9-mz.150-2.SE11.bin to the switchswitch_verify_firmware
Verify the integrity of an uploaded firmware file on the switch using MD5 checksums.
Parameters:
connectionId(required) - ID of an active SSH connectionfirmwarePath(required) - Path to firmware file on switchenablePassword(optional) - Enable password for privileged mode
Returns:
Verification status
MD5 checksum results
File information
switch_install_firmware
Install firmware on the switch and optionally reboot to apply the update.
Parameters:
connectionId(required) - ID of an active SSH connectionfirmwarePath(required) - Path to firmware file on switchenablePassword(optional) - Enable password for privileged modeautoReboot(optional) - Automatically reboot after installation (default: false)
Important: This modifies the boot configuration. Test in a lab environment first!
Example:
Install firmware flash:/c2960-lanbasek9-mz.150-2.SE11.bin and reboot the switchswitch_prepare_rollback
Prepare information needed for firmware rollback in case of issues with new firmware.
Parameters:
connectionId(required) - ID of an active SSH connectionenablePassword(optional) - Enable password for privileged mode
Returns:
Current boot configuration
Available firmware images
Rollback instructions
USB-to-Serial Console Setup
Hardware Requirements
USB-to-Serial Adapters:
FTDI-based adapters (FT232R, FT232H) - Best choice for reliability
Prolific PL2303 - Widely available and compatible
Silicon Labs CP2102/CP2104 - Good performance and stability
CH340/CH341 - Budget option, works well on most systems
Console Cables:
Cisco console cable (RJ45 to DB9 or USB)
Aruba/HP console cable (RJ45 to DB9 or USB)
Universal console cables work with most devices
Driver Installation
Windows:
FTDI drivers: Usually auto-installed, or download from ftdichip.com
Prolific drivers: Available from prolific.com.tw
Silicon Labs drivers: Download from silabs.com
CH340 drivers: Usually included in Windows 10/11, or download separately
macOS:
FTDI adapters: Usually work out-of-the-box
Other adapters: May require driver installation from manufacturer
Linux:
Most adapters work immediately with kernel drivers
FTDI, Silicon Labs, CH340: Built into kernel
Check
dmesgafter plugging in adapter to verify detection
Quick Start with Console
Connect USB-to-Serial adapter to your computer
Connect console cable from adapter to switch console port
List available ports: "Show me available serial ports"
Connect to port: "Connect to COM3 for Cisco switch"
Send commands or run automated setup
Security Notes
Store SSH private keys securely
Use key-based authentication when possible
Limit SSH access to specific IP addresses
Keep your server updated
Use strong passwords or passphrases (minimum 8 characters)
Secure physical access to console ports and USB-to-Serial adapters
Consider setting up environment variables in a
.envfile for sensitive information
Troubleshooting
Server won't start
Check that Node.js is installed:
node --versionVerify all dependencies are installed:
npm installRebuild the project:
npm run build
Connection issues
Verify SSH server is running on the target
Check firewall settings
Confirm credentials are correct
Test SSH connection manually first
Claude Desktop integration
Ensure the path in configuration is absolute
Restart Claude Desktop after configuration changes
Check Developer Console for error messages
Development
To modify or extend the server:
Edit source files in
src/Rebuild:
npm run buildTest your changes
Restart Claude Desktop or VS Code to pick up changes
Running in Development Mode
For quick testing during development:
npm run devContributing
Contributions for additional tools and features are welcome. Please feel free to submit pull requests or open issues for enhancements and bug fixes.
License
MIT License
Available Tools
11 toolsssh_connectC
Connect to a remote server via SSH
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | Hostname or IP address of the remote server | |
| port | No | SSH port (default: 22) | |
| username | Yes | SSH username | |
| password | No | SSH password (if not using key-based authentication) | |
| privateKeyPath | No | Path to private key file (if using key-based authentication) | |
| passphrase | No | Passphrase for private key (if needed) | |
| connectionId | No | Unique identifier for this connection |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. 'Connect' implies establishing a persistent session, but the description doesn't specify what happens after connection (e.g., whether it maintains state, returns a connection handle, or has timeout behavior). It mentions SSH but doesn't detail security implications, error handling, or what constitutes a successful connection.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, clear sentence that efficiently conveys the core function without unnecessary words. It's front-loaded with the essential action and resource, making it easy for an agent to parse. Every word earns its place in this minimal but complete statement.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 7 parameters, no annotations, and no output schema, the description is insufficient. It doesn't address what the tool returns (e.g., connection status, session ID), error conditions, or behavioral details like persistence. Given the complexity of SSH connections and the lack of structured metadata, the description should provide more operational context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all parameters are documented in the schema. The description adds no additional parameter semantics beyond the basic action of connecting. It doesn't explain parameter interactions (e.g., password vs privateKeyPath) or provide context beyond what the schema already specifies. Baseline 3 is appropriate given high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('connect') and target ('to a remote server via SSH'), making the purpose immediately understandable. It distinguishes from siblings like ssh_disconnect or ssh_exec by specifying the connection establishment function. However, it doesn't explicitly differentiate from all SSH-related siblings beyond the basic verb.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites like needing authentication credentials, nor does it explain when to choose this over other SSH tools like ssh_exec (which might handle both connection and command execution). The context is implied but not articulated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_disconnectC
Close an SSH connection
| Name | Required | Description | Default |
|---|---|---|---|
| connectionId | Yes | ID of an active SSH connection |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden for behavioral disclosure. It states the action (close) but doesn't describe effects (e.g., terminates session, frees resources), side effects, error conditions, or permissions required. This is a mutation tool with minimal behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with zero wasted words. It's appropriately sized for a simple tool and front-loads the core action. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation tool with no annotations and no output schema, the description is inadequate. It doesn't explain what happens after closing (success/failure states, return values), error handling, or dependencies on active connections. Given the complexity and lack of structured data, more context is needed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% (connectionId parameter fully documented in schema). The description adds no parameter-specific details beyond what the schema provides. Baseline 3 is appropriate when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Close an SSH connection' clearly states the action (close) and resource (SSH connection). It distinguishes from siblings like ssh_connect (open) and ssh_exec (run commands), but doesn't explicitly mention this differentiation. The purpose is specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites (e.g., needing an active connection), exclusions, or relationships with sibling tools like ssh_connect. Usage context is implied but not stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_download_fileC
Download a file from the remote server
| Name | Required | Description | Default |
|---|---|---|---|
| connectionId | Yes | ID of an active SSH connection | |
| remotePath | Yes | Path to the file on the remote server | |
| localPath | Yes | Path where the file should be saved locally |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It states the action ('Download') but doesn't describe what happens during execution—such as whether it overwrites local files, handles errors, requires specific permissions, or provides progress feedback. This leaves significant gaps for a file transfer operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that directly states the tool's function without any unnecessary words. It's front-loaded with the core action, making it easy to parse and understand immediately.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a file download tool with no annotations and no output schema, the description is incomplete. It doesn't explain what the tool returns (e.g., success status, error messages, or file metadata), nor does it cover behavioral aspects like error handling or security considerations, which are critical for SSH operations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all three parameters (connectionId, remotePath, localPath) with clear descriptions. The description adds no additional meaning beyond what's in the schema, such as file format support or path validation rules, meeting the baseline for high coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Download') and resource ('a file from the remote server'), making the tool's purpose immediately understandable. However, it doesn't explicitly differentiate from sibling tools like ssh_upload_file or ssh_list_files, which would require mentioning it's specifically for file retrieval rather than upload or listing.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites like needing an active SSH connection (implied by the connectionId parameter but not stated), nor does it differentiate from siblings such as ssh_upload_file for uploading or ssh_list_files for browsing files.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_execC
Execute a command on the remote server
| Name | Required | Description | Default |
|---|---|---|---|
| connectionId | Yes | ID of an active SSH connection | |
| command | Yes | Command to execute | |
| cwd | No | Working directory for the command | |
| timeout | No | Command timeout in milliseconds |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It states the action but lacks critical details: it doesn't mention security implications, permission requirements, output format (e.g., stdout/stderr), error handling, or that it might affect the remote system. This is inadequate for a mutation tool with zero annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with no wasted words. It's front-loaded with the core action, making it easy to parse quickly, which is ideal for conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (executing commands on a remote server), lack of annotations, and no output schema, the description is incomplete. It fails to address behavioral aspects like safety, output, or error handling, which are crucial for an agent to use this tool effectively in context with siblings.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 100%, so all parameters are documented in the schema. The description adds no additional meaning beyond implying command execution, which the schema already covers with parameter descriptions. This meets the baseline of 3 when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('execute a command') and target ('on the remote server'), which distinguishes it from siblings like ssh_connect or ssh_upload_file. However, it doesn't explicitly differentiate from potential command-execution alternatives in the sibling list, keeping it at 4 rather than 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives. It doesn't mention prerequisites (e.g., needing an active SSH connection via ssh_connect), exclusions, or comparisons to other command-related tools, leaving the agent to infer usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_list_filesC
List files in a directory on the remote server
| Name | Required | Description | Default |
|---|---|---|---|
| connectionId | Yes | ID of an active SSH connection | |
| remotePath | Yes | Path to the directory on the remote server |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It states the basic function but lacks critical details: it doesn't specify what the output looks like (e.g., list format, error handling), whether it requires specific permissions, or if there are rate limits. For a tool interacting with a remote server, this is a significant gap in transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, direct sentence that efficiently conveys the core purpose without any fluff. It is appropriately sized and front-loaded, making it easy for an agent to parse quickly. Every word earns its place, with no wasted verbiage.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of SSH operations and the lack of annotations or output schema, the description is incomplete. It doesn't explain what the tool returns (e.g., file list, errors), behavioral aspects like timeouts, or integration with sibling tools (e.g., ssh_connect). For a tool with no structured output and no annotations, more context is needed to be fully helpful.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% description coverage, with clear documentation for both parameters (connectionId and remotePath). The description adds no additional semantic context beyond what the schema provides, such as format examples or constraints. According to the rules, with high schema coverage, the baseline is 3 even without param info in the description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('List files') and target ('in a directory on the remote server'), which is specific and unambiguous. It distinguishes from siblings like ssh_download_file or ssh_exec by focusing on directory listing rather than file transfer or command execution. However, it doesn't explicitly differentiate from hypothetical similar listing tools, keeping it at 4 rather than 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites (e.g., needing an active SSH connection via ssh_connect), exclusions (e.g., not for listing local files), or comparisons to other tools. This leaves the agent to infer usage from the tool name and context alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssh_upload_fileC
Upload a file to the remote server
| Name | Required | Description | Default |
|---|---|---|---|
| connectionId | Yes | ID of an active SSH connection | |
| localPath | Yes | Path to the local file | |
| remotePath | Yes | Path where the file should be saved on the remote server |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It states the action ('Upload') but lacks critical details: it doesn't specify whether this overwrites existing files, requires specific permissions, handles errors, or indicates success/failure. For a file transfer tool with zero annotation coverage, this leaves significant gaps in understanding its behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, direct sentence with zero wasted words. It front-loads the core action and resource efficiently, making it easy to parse quickly. Every word earns its place by conveying essential information without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of SSH file operations and the lack of annotations or output schema, the description is insufficient. It doesn't cover behavioral aspects like error handling, success indicators, or interaction with sibling tools (e.g., dependency on 'ssh_connect'). For a tool that modifies remote systems, more context is needed to ensure safe and effective use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% description coverage, clearly documenting all three required parameters. The description adds no additional semantic context beyond what the schema provides, such as file format constraints or path validation rules. Since the schema does the heavy lifting, the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Upload') and target resource ('a file to the remote server'), making the purpose immediately understandable. However, it doesn't distinguish this tool from its sibling 'ssh_download_file' beyond the directional difference, missing an opportunity to clarify the upload-specific context.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like 'ssh_download_file' or 'ssh_list_files', nor does it mention prerequisites such as needing an active SSH connection via 'ssh_connect'. Without any contextual cues, users must infer usage from the tool name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ubuntu_nginx_controlC
Control Nginx web server on Ubuntu
| Name | Required | Description | Default |
|---|---|---|---|
| connectionId | Yes | ID of an active SSH connection | |
| action | Yes | Action to perform (start, stop, restart, status, reload, check-config) | |
| sudo | No | Whether to run the command with sudo (default: true) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden for behavioral disclosure but provides minimal information. It mentions 'Control' which implies system administration actions, but doesn't disclose that this likely requires root/sudo privileges (though the schema hints at this), doesn't mention what happens when actions fail, and provides no information about output format or error conditions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise at just 5 words, front-loading the essential information with zero wasted words. Every word earns its place by specifying the target (Nginx), platform (Ubuntu), and action type (Control).
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a system administration tool with 3 parameters, no annotations, and no output schema, the description is insufficient. It doesn't explain what 'Control' entails operationally, doesn't mention that this requires an established SSH connection (though the parameter implies it), and provides no information about what the tool returns or how to interpret results.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema description coverage, the baseline is 3. The description adds no parameter-specific information beyond what's already documented in the schema. It doesn't explain the relationship between parameters, doesn't provide examples of valid 'action' values (though the schema lists them), and offers no additional context about parameter usage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('Control') and resource ('Nginx web server on Ubuntu'), making the purpose immediately understandable. However, it doesn't differentiate this tool from potential alternatives like 'ssh_exec' which could also control Nginx, or explain why this specialized tool exists when general SSH execution is available.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites (like needing an active SSH connection first), doesn't compare it to the 'ssh_exec' sibling tool, and offers no context about when this specialized Nginx control tool is preferable to general command execution.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ubuntu_ssl_certificateC
Manage SSL certificates using Let's Encrypt on Ubuntu
| Name | Required | Description | Default |
|---|---|---|---|
| connectionId | Yes | ID of an active SSH connection | |
| action | Yes | Action to perform (issue, renew, status, list) | |
| domain | No | Domain name for the certificate (required for issue and renew) | |
| No | Email address for Let's Encrypt notifications (required for issue) | ||
| webroot | No | Web root path for domain verification (default: /var/www/html) | |
| sudo | No | Whether to run the command with sudo (default: true) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. While 'manage' implies both read and write operations, it doesn't specify critical behaviors like whether actions are destructive (e.g., 'issue' might overwrite existing certificates), authentication requirements beyond SSH, rate limits for Let's Encrypt, or what the tool outputs. This leaves significant gaps for a tool with multiple action types.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that states the core purpose without unnecessary words. It's appropriately sized and front-loaded, with every word earning its place by conveying essential information about the tool's domain and technology stack.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (multiple actions with different parameter requirements), lack of annotations, and absence of an output schema, the description is insufficient. It doesn't explain what the tool returns (e.g., certificate paths, status messages, error formats) or provide context about Let's Encrypt integration, making it incomplete for effective agent use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 100%, so all parameters are documented in the schema. The description adds no additional parameter semantics beyond what's in the schema (e.g., it doesn't explain the relationship between 'action' values and other parameters like 'domain' or 'email'). Since the schema does the heavy lifting, the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose as managing SSL certificates using Let's Encrypt on Ubuntu, which includes both the verb ('manage') and resource ('SSL certificates'). It distinguishes itself from sibling tools like ubuntu_nginx_control or ubuntu_website_deployment by focusing specifically on SSL certificate operations, though it doesn't explicitly differentiate from all siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites (e.g., needing an active SSH connection via ssh_connect first), nor does it explain when to choose this over other certificate management approaches or sibling tools like ubuntu_website_deployment that might handle certificates differently.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ubuntu_ufw_firewallC
Manage Ubuntu Uncomplicated Firewall (UFW)
| Name | Required | Description | Default |
|---|---|---|---|
| connectionId | Yes | ID of an active SSH connection | |
| action | Yes | Action to perform (enable, disable, status, allow, deny, delete, reset) | |
| port | No | Port number or service name (e.g., 80, 443, ssh, http) | |
| protocol | No | Protocol (tcp, udp) | |
| from | No | Source IP address or network | |
| sudo | No | Whether to run the command with sudo (default: true) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden for behavioral disclosure. 'Manage' implies both read and write operations, but the description doesn't specify which actions are destructive (e.g., 'reset' likely removes all rules), authentication requirements (sudo is a parameter but not highlighted), or potential side effects. For a multi-action tool with zero annotation coverage, this is insufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that directly states the tool's purpose without unnecessary words. It's appropriately sized and front-loaded, earning a perfect score for conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (6 parameters including potentially destructive actions like 'reset'), no annotations, and no output schema, the description is inadequate. It doesn't explain what the tool returns, error conditions, or behavioral nuances. For a multi-action system management tool, this leaves significant gaps in understanding.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema fully documents all 6 parameters. The description adds no additional parameter semantics beyond what's in the schema. According to scoring rules, when schema coverage is high (>80%), the baseline is 3 even with no param info in the description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Manage Ubuntu Uncomplicated Firewall (UFW)' clearly states the tool's purpose as managing a specific firewall system. It identifies the resource (UFW firewall) and implies a range of management actions. However, it doesn't distinguish this tool from potential sibling firewall tools (none exist in the provided list), so it earns a 4 rather than a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites like requiring an SSH connection, nor does it differentiate from other system management tools in the sibling list (e.g., ubuntu_nginx_control). Without any usage context or exclusions, this scores a 2.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ubuntu_update_packagesC
Update system packages on Ubuntu
| Name | Required | Description | Default |
|---|---|---|---|
| connectionId | Yes | ID of an active SSH connection | |
| securityOnly | No | Whether to update only security packages (default: false) | |
| upgrade | No | Whether to upgrade packages after update (default: true) | |
| autoremove | No | Whether to remove unused packages after update (default: false) | |
| sudo | No | Whether to run the command with sudo (default: true) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden for behavioral disclosure. 'Update system packages' implies a system modification, but the description doesn't disclose that this requires elevated privileges (sudo), may require user confirmation, could break dependencies, or has potential side effects. It mentions none of the behavioral traits that would help an agent understand the operation's impact.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with zero wasted words. It's appropriately sized for a tool with comprehensive schema documentation. Every word earns its place by clearly stating the core functionality without unnecessary elaboration.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a system modification tool with 5 parameters, no annotations, and no output schema, the description is inadequate. It doesn't explain what 'update' entails (apt update vs apt upgrade), doesn't mention typical use cases, doesn't warn about potential system impacts, and provides no information about return values or error conditions. The agent would need to infer too much from the sparse description.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all 5 parameters thoroughly. The description adds no parameter-specific information beyond what's in the schema. It doesn't explain the relationship between parameters (e.g., how securityOnly interacts with upgrade) or provide usage examples. Baseline 3 is appropriate when schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Update system packages on Ubuntu' clearly states the action (update) and resource (system packages on Ubuntu). It distinguishes from sibling tools like ubuntu_nginx_control or ubuntu_ufw_firewall by focusing on package management rather than service control or firewall configuration. However, it doesn't explicitly differentiate from generic ssh_exec which could also run update commands.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites like needing an active SSH connection, nor does it explain when to use this specialized tool versus the more general ssh_exec tool. There's no context about typical update scenarios or limitations.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ubuntu_website_deploymentC
Deploy website files and create backups on Ubuntu
| Name | Required | Description | Default |
|---|---|---|---|
| connectionId | Yes | ID of an active SSH connection | |
| action | Yes | Action to perform (deploy, backup, restore) | |
| localPath | No | Local path to the website files for deployment | |
| remotePath | No | Remote path where the website is located (default: /var/www/html) | |
| backupPath | No | Path to store backups (default: /var/backups/websites) | |
| createBackup | No | Whether to create a backup before deployment (default: true) | |
| sudo | No | Whether to run the command with sudo (default: true) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions 'deploy' and 'create backups' but doesn't specify critical details like whether this is a destructive operation (e.g., overwriting files), permission requirements, error handling, or backup retention. This leaves significant gaps for safe usage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that front-loads the core functionality ('Deploy website files and create backups on Ubuntu') with zero wasted words. It's appropriately sized for the tool's complexity and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 7 parameters, no annotations, and no output schema, the description is incomplete. It doesn't address behavioral aspects like safety (e.g., whether deployment overwrites existing files), error conditions, or what the tool returns. Given the complexity and lack of structured data, more context is needed for reliable use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 100% description coverage, so parameters are well-documented in the schema itself. The description adds minimal value beyond implying the tool handles website files and backups, but it doesn't provide additional context like file format expectations or backup naming conventions. Baseline 3 is appropriate given the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose with specific verbs ('deploy website files' and 'create backups') and resource ('on Ubuntu'), making it easy to understand what the tool does. However, it doesn't explicitly differentiate from sibling tools like 'ssh_upload_file' or 'ubuntu_nginx_control', which might handle similar operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like 'ssh_upload_file' for file transfers or 'ubuntu_nginx_control' for web server management. It mentions the action parameter includes 'deploy, backup, restore' but doesn't explain when each is appropriate or any prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
11 tool updates
- First observed
ssh_connect - First observed
ssh_disconnect - First observed
ssh_download_file - First observed
ssh_exec - First observed
ssh_list_files - First observed
ssh_upload_file - First observed
ubuntu_nginx_control - First observed
ubuntu_ssl_certificate - First observed
ubuntu_ufw_firewall - First observed
ubuntu_update_packages - First observed
ubuntu_website_deployment
TDQS
The SSH tools (ssh_connect, ssh_disconnect, ssh_exec, ssh_list_files, ssh_upload_file, ssh_download_file) are clearly distinct and cover basic SSH operations well. However, the Ubuntu-specific tools (ubuntu_nginx_control, ubuntu_ssl_certificate, ubuntu_ufw_firewall, ubuntu_update_packages, ubuntu_website_deployment) overlap conceptually with the SSH tools since they also involve remote server management, creating some ambiguity about when to use which set. The descriptions help differentiate, but the boundary between general SSH operations and Ubuntu-specific administration is not perfectly clear.
The naming is mostly consistent with a verb_noun pattern (e.g., ssh_connect, ssh_exec, ubuntu_update_packages), which is predictable and readable. However, there is a minor deviation: 'ssh_download_file' and 'ssh_upload_file' use 'download' and 'upload' as verbs, while others like 'ssh_list_files' use 'list'—this is still consistent in style but slightly varies in verb choice. Overall, the naming follows a clear convention with only small inconsistencies.
With 11 tools, the count is reasonable for a server focused on SSH and Ubuntu server management. It covers a broad scope without being excessive. However, the split between general SSH tools (6 tools) and Ubuntu-specific tools (5 tools) might feel slightly fragmented, making it borderline heavy for a pure SSH server but still well-scoped for the combined purpose. It earns its place but could be optimized for clarity.
For SSH operations, the toolset is quite complete, covering connection management, file transfer, command execution, and directory listing—no major gaps. For Ubuntu server management, it includes key areas like web server control, SSL, firewall, updates, and deployment, which is comprehensive. A minor gap is the lack of tools for non-Ubuntu systems or more advanced SSH features (e.g., port forwarding), but agents can work around this with the existing tools for core workflows.
Maintenance
Related MCP Connectors
Run commands and read/write files on your servers over Termalin's keyless tunnels (hosted MCP).
Scoped, audited SSH exec, sessions, and SFTP on your saved servers without exposing credentials
Secure tunneling, reverse proxy and remote access for local applications.
Cloud-hosted MCP server for URnetwork VPN and Proxy
Related MCP Servers
- FlicenseBqualityDmaintenanceEnables SSH operations including connecting to remote servers, executing commands, and transferring files between local and remote systems. Supports multiple SSH connections with both password and private key authentication methods.18-
- AlicenseAqualityDmaintenanceEnables secure SSH connections to multiple remote servers with support for command execution, file transfers (SFTP), directory listing, and both password and key-based authentication.7MIT
- AlicenseAqualityAmaintenanceSSH automation MCP server that enables Claude and ChatGPT to execute commands, manage files, install packages, and control services on remote servers over SSH — supporting password, key, and agent authentication.331,2674MIT
- AlicenseBqualityDmaintenanceA Model Context Protocol (MCP) SSH client server that provides autonomous SSH operations for GitHub Copilot and VS Code. Enable natural language SSH automation without manual prompts or GUI interactions.201MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/mixelpixx/SSH-MCP'
If you have feedback or need assistance with the MCP directory API, please join our Discord server