sunwood-ai-labs/command-executor-mcp-server

一个用于安全执行预先批准命令的模型上下文协议服务器。

🎥 演示

https://github.com/user-attachments/assets/ed763a12-b685-4e0b-b9a5-bc948a590f51

✨ 特色

• 通过预批准的命令列表安全执行命令
• 通过环境变量可配置允许的命令
• 使用 TypeScript 和 MCP SDK 构建
• 通过stdio实现无缝集成
• 错误处理和安全验证
• 实时命令输出流

🚀 安装

安装依赖：

搭建服务器：

关于自动重建的开发：

⚙️ 配置

🔒 允许的指令

默认情况下，允许以下命令：

• git
• ls
• mkdir
• CD
• NPM
• NPX
• 蟒蛇

你可以通过设置 ALLOWED_COMMANDS 环境变量来自定义允许的命令：

🔌 Claude桌面集成

要配合Claude Desktop使用，添加服务器配置：

在MacOS上：

在Windows上：

配置示例：

🛡️ 安全考量

命令执行服务器实现了若干安全措施：

1. 预先批准的指挥名单

• 只能执行明确允许的命令
• 默认列表具有限制性且注重安全

A Model Context Protocol server for executing pre-approved commands securely.

🎥 Demo

https://github.com/user-attachments/assets/ed763a12-b685-4e0b-b9a5-bc948a590f51

✨ Features

• Secure command execution with pre-approved command list
• Configurable allowed commands through environment variables
• Built with TypeScript and MCP SDK
• Communication via stdio for seamless integration
• Error handling and security validations
• Real-time command output streaming

🚀 Installation

Install dependencies:

npm install

Build the server:

npm run build

For development with auto-rebuild:

npm run watch

⚙️ Configuration

🔒 Allowed Commands

By default, the following commands are allowed:

• git
• ls
• mkdir
• cd
• npm
• npx
• python

You can customize the allowed commands by setting the ALLOWED_COMMANDS environment variable:

export ALLOWED_COMMANDS=git,ls,mkdir,python

🔌 Claude Desktop Integration

To use with Claude Desktop, add the server config:

On MacOS:

~/Library/Application Support/Claude/claude_desktop_config.json

On Windows:

%APPDATA%/Claude/claude_desktop_config.json

Configuration example:

{
  "mcpServers": {
    "command-executor": {
      "command": "/path/to/command-executor/build/index.js"
    }
  }
}

🛡️ Security Considerations

The command-executor server implements several security measures:

1. Pre-approved Command List

   • Only explicitly allowed commands can be executed
   • Default list is restrictive and security-focused
   • Commands are validated by prefix to prevent injection

2. Command Validation

   • Command prefix validation prevents command injection
   • No shell execution for improved security
   • Environment variables are properly sanitized

3. Error Handling

   • Comprehensive error handling for unauthorized commands
   • Clear error messages for debugging
   • Failed commands don’t crash the server

4. Environment Isolation

   • Server runs in its own environment
   • Environment variables can be controlled
   • Limited system access

💻 Development

📁 Project Structure

command-executor/
├─ src/
│  └─ index.ts      # Main server implementation
├─ build/
│  └─ index.js      # Compiled JavaScript
├─ assets/
│  └─ header.svg    # Project header image
└─ package.json     # Project configuration

🐛 Debugging