mcp-shell MCP Server
sonirico/mcp-shell
[](https://agentrank-ai.com/tool/sonirico--mcp-shell/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) Give hands to AI. MCP server to run shell commands securely, auditably, and on demand.
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
sonirico/mcp-shell is a Go MCP server licensed under GPL-3.0. Give hands to AI. MCP server to run shell commands securely, auditably, and on demand. Topics: ai, bash, go, llm, mcp, model-context-protocol, os-exec, shell, terminal.
Ranked #1312 out of 24846 indexed tools.
In the top 6% of all indexed tools.
Ecosystem
Score Breakdown
108 stars → growing community
Last commit 1mo ago → moderate activity
7/7 issues closed → responsive maintainer
6 contributors → small team
No dependents → no downstream usage
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
How to Improve
Badge all embed codes →
[](https://agentrank-ai.com/tool/sonirico--mcp-shell/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) <a href="https://agentrank-ai.com/tool/sonirico--mcp-shell/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge"><img src="https://agentrank-ai.com/api/v1/badge/sonirico--mcp-shell" alt="AgentRank"></a> Matched Queries
From the README
# mcp-shell MCP server that runs shell commands. Your LLM gets a tool; you get control over what runs and how. Built on [mark3labs/mcp-go](https://github.com/mark3labs/mcp-go). Written in Go. --- ## Run it **Docker** (easiest): ```bash docker run -it --rm -v /tmp/mcp-workspace:/tmp/mcp-workspace sonirico/mcp-shell:latest ``` **From source**: ```bash git clone https://github.com/sonirico/mcp-shell && cd mcp-shell make install mcp-shell ``` --- ## Configure it **Secure mode is the default.** With no config file, `mcp-shell` boots in secure mode and registers only typed tools: file reads, `grep`/`glob`, git inspection, and (opt-in) file/git writes and operator-defined scripts. There is no raw shell command. You only need a config file to change the defaults below. To run fully unrestricted you must opt in explicitly: ```bash MCP_SHELL_ALLOW_UNSAFE=1 mcp-shell # disables secure mode; the only tool is shell_exec ``` To customize the policy, point to a YAML config: ```bash exRead full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.