mcp-ssh-manager MCP — Casos de uso, Instalar & Demo ao vivo

Por que usar

Principais recursos

37 tools spanning core SSH ops + DevOps helpers
Multi-host named configs via .env or TOML
Auth: SSH keys (preferred), SSH agent (for passphrase keys), passwords
Backup + health-monitor tools built in
rsync file sync (requires sshpass for password auth)

Demo ao vivo

Como fica na prática

ssh-manager.replay ▶ pronto

0/0

Instalar

Escolha seu cliente

~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "ssh-manager": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-ssh-manager"
      ],
      "_inferred": true
    }
  }
}

Abra Claude Desktop → Settings → Developer → Edit Config. Reinicie após salvar.

~/.cursor/mcp.json · .cursor/mcp.json

{
  "mcpServers": {
    "ssh-manager": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-ssh-manager"
      ],
      "_inferred": true
    }
  }
}

Cursor usa o mesmo esquema mcpServers que o Claude Desktop. Config de projeto vence a global.

VS Code → Cline → MCP Servers → Edit

{
  "mcpServers": {
    "ssh-manager": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-ssh-manager"
      ],
      "_inferred": true
    }
  }
}

Clique no ícone MCP Servers na barra lateral do Cline, depois "Edit Configuration".

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "ssh-manager": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-ssh-manager"
      ],
      "_inferred": true
    }
  }
}

Mesmo formato do Claude Desktop. Reinicie o Windsurf para aplicar.

~/.continue/config.json

{
  "mcpServers": [
    {
      "name": "ssh-manager",
      "command": "npx",
      "args": [
        "-y",
        "mcp-ssh-manager"
      ]
    }
  ]
}

O Continue usa um array de objetos de servidor em vez de um map.

~/.config/zed/settings.json

{
  "context_servers": {
    "ssh-manager": {
      "command": {
        "path": "npx",
        "args": [
          "-y",
          "mcp-ssh-manager"
        ]
      }
    }
  }
}

Adicione em context_servers. Zed recarrega automaticamente ao salvar.

claude mcp add ssh-manager -- npx -y mcp-ssh-manager

Uma linha só. Verifique com claude mcp list. Remova com claude mcp remove.

Casos de uso

Usos do mundo real: mcp-ssh-manager

Triage a fleet of VPS servers from chat

👤 Solo ops, small team SREs ⏱ ~15 min intermediate

Quando usar: You manage 5-20 VPS boxes and need to eyeball them all quickly.

Pré-requisitos

SSH key in agent — ssh-add ~/.ssh/id_ed25519
Named host list — TOML config with name → host/user/key path

Fluxo

Run health checks in parallel

For each server in my fleet, run: uptime, df -h, free -h, last error in journalctl. Summarize anything concerning.✓ Copiado

→ Per-host summary + flagged issues
Drill into problems

On server X where disk is 95% full, find the top 10 largest directories under /var.✓ Copiado

→ du output
Fix or escalate

Is it safe to delete /var/log/old-*.gz? Confirm with me before running.✓ Copiado

→ Plan + waits for confirm

Resultado: Fleet-wide triage in 5 minutes.

Armadilhas

Command timeouts are advisory — a hung command can leave processes running — Use timeout 30 <cmd> explicitly for anything that could hang

Take a one-shot backup from a remote server

👤 Home-lab admins, solo devs ⏱ ~15 min intermediate

Quando usar: You realize your important VPS has no backup and need one now, manually.

Fluxo

Identify backup targets

On server 'homelab', list directories under /home and /var that I should back up. Exclude logs and caches.✓ Copiado

→ Target list
Create and download archive

Tar+gzip those into /tmp/backup-$(date +%F).tgz, then download to my local ~/Backups/.✓ Copiado

→ Archive landed locally

Resultado: Ad-hoc backup in one conversation.

Armadilhas

Large backups blow remote /tmp — Stream directly: ssh host 'tar cz ...' > local.tgz (arrange via exec + download)

Combine com: filesystem

Deploy a small app to a VPS without leaving chat

👤 Solo devs shipping side projects ⏱ ~10 min intermediate

Quando usar: No Coolify, no Dokku — just a bare VPS and your code.

Fluxo

Upload code

Upload my ./dist/ directory to server 'myvps' at /opt/myapp/, preserving perms.✓ Copiado

→ Upload complete
Restart service

On myvps, sudo systemctl restart myapp and then check status. Send me the status output.✓ Copiado

→ active (running) or error

Resultado: Deploy done in 2 minutes.

Armadilhas

sudo password required — Configure NOPASSWD for the specific service in /etc/sudoers.d/

Combinações

Combine com outros MCPs para 10× de alavancagem

ssh-manager + filesystem

Download a remote file + edit locally + upload back

Download /etc/nginx/sites-enabled/example.conf, edit to add gzip_comp_level 6, upload and restart nginx.✓ Copiado

Ferramentas

O que este MCP expõe

Ferramenta	Entradas	Quando chamar	Custo
execute	host, command, timeout?: int	Any remote shell command	free
upload	host, local_path, remote_path	Send a file or directory	free
download	host, remote_path, local_path	Pull a file from a server	free
sync	host, local, remote, delete?: bool	Bulk dir sync via rsync	free
health_check	host	Quick pulse	free

Custo e limites

O que custa rodar

Cota de API: None
Tokens por chamada: Exec output can be huge — | tail -50 is your friend
Monetário: Free, MIT
Dica: Cap long output: cmd | head -100, never cat whole log files.

Segurança

Permissões, segredos, alcance

Escopos mínimos: SSH key with only the needed remote permissions

Armazenamento de credenciais: Private keys in ~/.ssh; use SSH agent for passphrases

Saída de dados: Traffic to the hosts you configure

Nunca conceda: Root-equivalent keys to an agent that can also reach the internet

Never commit .env or TOML with private keys to a repo.
Windows remote hosts need PLATFORM=windows to skip Linux-specific wrappers.
Timeouts are advisory — use explicit timeout N inside the command for hard limits.

Solução de problemas

Erros comuns e correções

Permission denied (publickey)

Key not in agent, or remote ~/.ssh/authorized_keys wrong. ssh-add -l to verify.

Verificar: ssh -i key host 'echo ok' directly first

Command timeout but process still running remotely

Wrap command with timeout: execute('host', 'timeout 30 long-command').

Verificar: ssh in and `ps aux`

rsync needs sshpass

Either install sshpass on local or switch to SSH key auth for that host.

Alternativas

mcp-ssh-manager vs. outros

Alternativa	Quando usar	Troca
Raw ssh via terminal	You're not using an LLM for ops	Manual, but well-understood
Ansible	You manage 50+ hosts with reproducible playbooks	Heavier; chat-driven ad-hoc not its strength

Mais

Recursos

📖 Leia o README oficial no GitHub

🐙 Ver issues abertas

🔍 Ver todos os 400+ servidores MCP e Skills