Every capability. Every interface. Real examples.

npm install --global linux-server-mcp@3.7.0
linux-server-mcp --help
ssh-manager --version
ssh-manager --help

ssh-manager server add
ssh-manager server list
ssh-manager server test prod1

# then start local stdio MCP
linux-server-mcp

SSH_SERVER_PROD_HOST=prod.example.com
SSH_SERVER_PROD_PORT=22
SSH_SERVER_PROD_USER=deploy
SSH_SERVER_PROD_KEYPATH=/var/lib/linux-server-mcp/ssh/prod_ed25519
SSH_SERVER_PROD_MODE=restricted
SSH_SERVER_PROD_ALLOW_PATTERNS=whoami;uptime;df(?: -h)?;systemctl status [A-Za-z0-9_.@-]+
SSH_SERVER_PROD_DENY_PATTERNS=\bsudo\b;\bsu\b;\bbash\b;\bsh\b
SSH_SERVER_PROD_AUDIT_LOG=/var/log/linux-server-mcp/audit-prod.jsonl

[ssh_servers.prod]
host = "prod.example.com"
user = "deploy"
key_path = "/var/lib/linux-server-mcp/ssh/prod_ed25519"
mode = "restricted"
allow_patterns = ["uptime", "df(?: -h)?", "systemctl status [A-Za-z0-9_.@-]+"]

tool: ssh_key_manage
{ "action": "verify", "server": "prod" }

# explicit trust mutation when reviewed
{ "action": "accept", "server": "prod", "autoAccept": false }

ssh-manager server list
ssh-manager server test prod1
ssh-manager sync push prod1 ./app /var/www/app
ssh-manager tunnel create prod1 local 3307:localhost:3306
ssh-manager monitor prod1 cpu
ssh-manager tools list
ssh-manager tools configure

linux-server-mcp
# or
npm run start:stdio

claude mcp add linux-server-mcp node "$(pwd)/src/index.js"

# Then ask the client to use tools such as:
# ssh_list_servers → ssh_health_check → ssh_service_status

1. list tools
2. choose server target
3. call ssh_health_check before mutations
4. call the smallest operation required
5. verify outcome with health/service/log tools

POST https://mcp.example.com/mcp
GET  https://mcp.example.com/healthz

# default Node bind
127.0.0.1:8787

NODE_ENV=production
MCP_AUTH_MODE=bearer
MCP_AUTH_TOKEN_FILE=/run/credentials/linux-server-mcp.service/mcp_auth_token
# optional rotation grace credential
MCP_AUTH_TOKEN_PREVIOUS_FILE=/run/credentials/linux-server-mcp.service/mcp_auth_token_previous

GET  /.well-known/oauth-protected-resource
GET  /.well-known/oauth-protected-resource/mcp
GET  /.well-known/oauth-authorization-server
GET  /oauth/authorize
POST /oauth/authorize
POST /oauth/token

MCP_ALLOWED_ORIGINS=https://app.example.com,https://admin.example.com
MCP_ALLOWED_HOSTS=mcp.example.com
MCP_TRUST_PROXY=true     # only when the proxy is explicitly trusted
MCP_HTTP_BODY_LIMIT_BYTES=2097152
MCP_HTTP_MAX_HEADER_SIZE=32768
MCP_HTTP_REQUEST_TIMEOUT_MS=30000

tool: ssh_session_start
{ "server": "prod", "name": "release-check" }
# returns session id: abc...

tool: ssh_session_send
{ "session": "abc...", "command": "cd /srv/app && export RELEASE=v42" }

tool: ssh_session_send
{ "session": "abc...", "command": "pwd && echo $RELEASE" }

tool: ssh_session_close
{ "session": "abc..." }

ssh_health_check  → detailed=true
ssh_service_status → ["nginx", "docker"]
ssh_process_manager → action=list, sortBy=memory
ssh_monitor → type=disk
ssh_tail → /var/log/nginx/error.log, follow=false, lines=100

tool: ssh_alert_setup
{ "server": "prod", "action": "set", "cpuThreshold": 85, "memoryThreshold": 90, "diskThreshold": 85 }

tool: ssh_alert_setup
{ "server": "prod", "action": "check" }

tool: ssh_backup_create
{
  "server": "prod",
  "type": "postgresql",
  "name": "orders-nightly",
  "database": "orders",
  "retention": 14,
  "compress": true
}

ssh_backup_create: { server: "prod", type: "files", name: "app-data", paths: ["/srv/app/uploads", "/etc/nginx"], exclude: ["*.tmp"], retention: 7 }

ssh_backup_schedule: { server: "prod", schedule: "0 2 * * *", type: "postgresql", name: "orders", database: "orders", retention: 14 }

tool: ssh_db_query
{
  "server": "prod",
  "type": "postgresql",
  "database": "orders",
  "query": "SELECT id, status FROM jobs ORDER BY id DESC LIMIT 20"
}

ssh_db_list: { server: "prod", type: "mysql" }
ssh_db_list: { server: "prod", type: "mysql", database: "shop" }
ssh_db_dump: { server: "prod", type: "mysql", database: "shop", outputFile: "/var/backups/shop.sql", compress: true, tables: ["orders", "customers"] }

tool: ssh_deploy
{
  "server": "prod",
  "files": [{ "local": "./nginx.conf", "remote": "/etc/nginx/nginx.conf" }],
  "options": { "backup": true, "owner": "root:root", "permissions": "644", "restart": "nginx" }
}

ssh_tunnel_create: { server: "prod", type: "local", localPort: 5433, remoteHost: "127.0.0.1", remotePort: 5432 }
ssh_tunnel_create: { server: "prod", type: "dynamic", localPort: 1080 }
ssh_tunnel_list: {}
ssh_tunnel_close: { tunnelId: "..." }

ssh_group_manage: { action: "create", name: "web", servers: ["web1", "web2", "web3"], strategy: "rolling", delay: 3000, stopOnError: true }
ssh_execute_group: { group: "web", command: "systemctl status nginx", strategy: "rolling", delay: 3000, stopOnError: true }

ssh_profile: { action: "list" }
ssh_profile: { action: "switch", profile: "docker" }
ssh_command_alias: { action: "add", alias: "web-logs", command: "docker compose logs --tail=200 web" }
ssh_command_alias: { action: "suggest", command: "logs" }
ssh_hooks: { action: "list" }
ssh_hooks: { action: "enable", hook: "pre-deploy" }

ssh_connection_status: { action: "status" }
ssh_connection_status: { action: "reconnect", server: "prod" }
ssh_history: { limit: 20, server: "prod", success: true }

GET/POST /api/account/*
POST     /api/checkout
POST     /api/webhooks/dodo
POST     /api/webhooks/lemon
GET      /api/health

Admin UI: /saas-admin

1. ssh_service_status(server=prod, services=["nginx"])
2. ssh_tail(server=prod, file=/var/log/nginx/error.log, follow=false, lines=50)
3. ssh_execute(server=prod, command="systemctl restart nginx")  # only if policy allows
4. ssh_service_status(server=prod, services=["nginx"])
5. ssh_health_check(server=prod)

ssh-manager server list
ssh-manager server test prod
ssh-manager tools list
curl -fsS https://mcp.example.com/healthz
curl -i https://mcp.example.com/.well-known/oauth-protected-resource