MCP server for secure SSH remote management — 337 tools across 74 groups for DevOps, Docker, Kubernetes, databases, systemd, Windows, cloud, compliance & more. Built in Rust.
概览
476 tools in 77 groups, a command whitelist and blacklist, secret redaction, an audit log, and a confirmation before anything destructive. - — Linux, Windows, Docker, Kubernetes/K3s, Podman, AWX, Ansible, databases, LDAP, network equipment, certificates and more. Only 8 core groups are on by default; you opt into the rest. - — every build speaks SSH. WinRM, PSRP (PowerShell Remoting), Telnet, Kubernetes exec, serial, AWS SSM, Azure and GCP are cargo features. (see Install). - — command whitelist and blacklist, built-in secret-redaction patterns plus entropy detection on every output, an audit log, and a confirmation before any destructive tool runs (on by default, over MCP and on the CLI). - — server-side jq_filter / yq_filter / columns / limit, TSV output (60-80% fewer tokens on lists), pagination of truncated output with ssh_output_fetch, per-client size limits.
README
以下为原文 README 节选，完整内容请查看原文。
Bridge MCP
Table of Contents
- Features
- Quick Start — from download to a first tool call
- Using it from an MCP client
- Upgrading to 4.0.0
- Examples
- Configuration reference
- Tool parameters
- Tool Groups
- MCP Prompts & Resources
- CLI
- Daemon Mode
- Protocol Support
- Troubleshooting
- Development
- License
Features
- 476 tools, 77 groups — Linux, Windows, Docker, Kubernetes/K3s, Podman, AWX, Ansible, databases, LDAP, network equipment, certificates and more. Only 8 core groups are on by default; you opt into the rest.
- SSH everywhere, more transports when built in — every build speaks SSH. WinRM, PSRP (PowerShell Remoting), Telnet, Kubernetes exec, serial, AWS SSM, Azure and GCP are cargo features. The release binaries and the Docker image are built with
--features full: they are SSH only (see Install). - Security first — command whitelist and blacklist, built-in secret-redaction patterns plus entropy detection on every output, an audit log, and a confirmation before any destructive tool runs (on by default, over MCP and on the CLI).
- Token-efficient output — server-side
jq_filter/yq_filter/columns/limit, TSV output (60-80% fewer tokens on lists), pagination of truncated output withssh_output_fetch, per-client size limits. - Two ways to list tools —
full(default: every enabled tool’s schema) orprogressive(four meta-tools to search, describe and call tools on demand).
安装
docker run -i --rm \配置
{
"mcpServers": {
"ssh-bridge": {
"command": "/usr/local/bin/bridge-mcp",
"args": ["serve"]
}
}
}