Safe Ssh Mcp

This is a deliberately restricted SSH wrapper that only exposes read-only diagnostic commands to AI agents. Instead of handing Claude a full bash shell, you get curated tools like df, du, dmesg, uptime, systemctl status checks, and top output. It's designed for DevOps scenarios where you want an AI to help troubleshoot remote systems without risking accidental modifications. The server enforces host safety by limiting the command surface area to monitoring and diagnostics. Ships with both stdio and SSE transport support, and uses standard SSH key authentication. AGPL licensed, but the copyleft doesn't extend to client applications since they communicate over IPC.