3F

359956085/fstty

Developer tools

This page was translated automatically. Technical details may differ from the original. View the original

42 stars 4 forks Quality 64 Trend 27MIT

A secure Windows SSH workspace and MCP server for Codex, Claude Code, Cursor and other AI agents.

Overview

FsTTY securely opens saved SSH sessions to agents such as Codex, Claude, and Cursor. Agents do not touch passwords or private keys and can only call explicit tools within user-authorized session groups. - :Controls access, file reading, file transfer, commands, editing, and deletion by session grouping. - :Terminal, SFTP, host key verification, and credential protection are handled uniformly by FsTTY. - :Supports local stdio, as well as Streamable HTTP within trusted local networks or VPNs. - :Automatically detects local agents, supports stdio or local HTTP, combines MCP configuration and global prompts, and does not overwrite irrelevant settings. - :Supports remote log search, segmented reading, command execution, atomic write, and controlled file transfer. - :Independent logging tools, sessions, results, and time consumption; Optional tool input after desensitization is available. search_remote_file Scans up to 16 MiB at a time, with a response limit of 8 MiB, can carry 0–50 lines of context before and after, and continue scanning via nextOffset. Suitable for searching large logs without first reading the full file. New session packets are not open to MCP by default. After enabling group access, sessions can be discovered and device status read; File reading is enabled by default, while file transfer, command, edit, and delete are disabled by default. - Once permission is saved, it takes effect immediately for the next stdio or HTTP request without reconnecting. - Command permissions may bypass edit and delete restrictions and should only be granted to trusted agents. - The FsTTY MCP tool does not return passwords, private key bodies, private key passwords, or HTTP Bearer tokens. - The host key that appears or changes for the first time must first be verified and confirmed on the FsTTY interface. - File writes use temporary file and atom replacement; uploading, renaming, and moving do not override existing targets. - Deletion has no recycle bin; FsTTY will mark it as a destructive operation in the tool description. - If permission configuration cannot be read or validation fails, requests are rejected by default. Current development branches on Windows use the dedicated SSH credential service by default. Installation, migration, and authentication configuration changes require UAC; Daily connections require no interaction. Original private key files, clipboards, and uncleaned old copies can still be read by the same account program. The service does not provide secret exports; MCP tokens continue to use their original storage. See Windows credential service and acceptance instructions. stdio and HTTP switches operate independently; turning one off does not stop the other. One-click configuration only enables the selected transfer mode and retains the state of the other switch.

Overview (machine translated)

Windows SSH and MCP secure console for AI Agents.

Chinese Simplified | English

Why Use FsTTY MCP

FsTTY securely opens saved SSH sessions to agents such as Codex, Claude, and Cursor. Agents do not touch passwords or private keys and can only call explicit tools within user-authorized session groups.

  • Minimum permissions: Controls access, file reading, file transfer, commands, editing, and deletion by session grouping.
  • Multiuse SSH Capability: Terminal, SFTP, host key verification, and credential protection are handled uniformly by FsTTY.
  • Local and Remote Access: Supports local stdio as well as Streamable HTTP within trusted local area networks or VPNs.
  • One-Click Agent Configuration: Automatically detects native Agents, supports stdio or local HTTP, combines MCP configurations and global prompts, and does not override irrelevant settings.
  • Suitable for Production Troubleshooting: Supports remote log search, segmented reading, command execution, atomic write, and controlled file transfer.
  • Auditable: Independently records tools, sessions, results, and time; Optionally records tool inputs after desensitization.

MCP Tools

FsTTY currently offers 17 MCP tools:

Permissions Tools Capabilities
No Session Permission Required get_permission_guide Return the required permissions for the target tool and the steps for setting the current interface
Visit list_sessions、get_device_status Discover authorized sessions; Read CPU, memory, disk, network, system, and runtime; Also a prerequisite for all tools
File Reading list_remote_files、read_remote_file、search_remote_file Browse the directory, read files in segments, and scan remote logs by keywords
File Transfer upload_local_file、download_remote_file、create_remote_file_upload_link、create_remote_file_download_link Upload or download files via stdio Roots or a five-minute valid link
Editor write_remote_file、create_remote_directory、rename_remote_entry、move_remote_entry atomic write files; create, rename, and move remote entries
Delete delete_remote_entry Recursively delete remote files or directories

This page was translated automatically. Technical details may differ from the original.

Install

This server does not publish a one-line install command.

Open the repository installation guide New to MCP? Start with the mcpskill.org guide →