Curated ssh_probe diagnostics and single-host ssh_exec over an allowlisted SSH fleet.

How do I install SSH Fleet?

Clone SSH Fleet from https://github.com/inhuman/mcp-ssh-fleet and configure it as an MCP server in your client (Claude Desktop, Cursor, or VS Code).

Is SSH Fleet open source?

Yes, SSH Fleet is open source under the MIT license. Source code is available at https://github.com/inhuman/mcp-ssh-fleet.

What category does SSH Fleet belong to?

SSH Fleet is listed under Other MCP servers on MCPFind.

SSH Fleet — MCP Server for Other

mcp-ssh-fleet

English | Русский

MCP server that gives an agent two tools over SSH to a fleet of hosts outside Kubernetes. The SSH key is a mounted secret (never enters model context); the inventory is a fail-closed allowlist.

Tools

ssh_probe(tags, check) — curated read-only diagnostics on every host carrying the given tags (AND semantics, like GitLab runner tags). check is one of a built-in set: uptime, disk, mem, failed, logs. Arbitrary commands cannot be passed. Class: read-only.
ssh_exec(host, command) — one arbitrary non-interactive command on ONE inventory host (by name or address; hosts outside the inventory are refused). Class: write-external: the server executes the command, while access gating (approval/RBAC) belongs to the MCP client.

Both: output size cap, per-host timeout, TOFU host-key check (fingerprint in logs), output as one section per host.

Configuration (env)

Variable	Default	Meaning
`SSH_FLEET_TRANSPORT`	`http`	`http` (StreamableHTTP, endpoint `/mcp`) \| `sse` \| `stdio`
`SSH_FLEET_ADDR`	`:8080`	listen address for http/sse
`SSH_FLEET_AUTH_TOKEN`	—	optional `X-MCP-AUTH` token
`SSH_FLEET_INVENTORY_PATH`	`/etc/ssh-fleet/inventory.yaml`	path to the inventory (configmap)
`SSH_FLEET_KEY_PATH`	`/etc/ssh-fleet/id_ed25519`	path to the private key (secret)
`SSH_FLEET_OUTPUT_CAP_BYTES`	`8192`	output cap per section
`SSH_FLEET_CMD_TIMEOUT_SECONDS`	`20`	per-host timeout
`SSH_FLEET_PROBE_CONCURRENCY`	`8`	probe parallelism pool
`SSH_FLEET_PROBE_MAX_HOSTS`	`50`	safety cap on hosts per probe

Inventory format — see deploy/inventory.example.yaml.

Quickstart (docker, stdio)

docker run -i --rm \
  -v /path/to/inventory.yaml:/etc/ssh-fleet/inventory.yaml:ro \
  -v /path/to/id_ed25519:/etc/ssh-fleet/id_ed25519:ro \
  -e SSH_FLEET_TRANSPORT=stdio \
  ghcr.io/inhuman/mcp-ssh-fleet:latest

This is the shape MCP clients use when installing from the MCP Registry (io.github.inhuman/mcp-ssh-fleet).

Connecting an MCP client (http/sse)

By default the server speaks StreamableHTTP; register it as a regular HTTP MCP server with endpoint /mcp (URL like http://<host>:8080/mcp). Both tools become available to the client.

Client-side security recommendations:

ssh_probe is read-only (curated checks only) and can be granted broadly.
ssh_exec is arbitrary execution (write-external). Gate its access on the client side (approval / RBAC / user allowlist) — the server merely executes a command on an inventory host; it does not decide access policy.

Development

make test        # unit tests + e2e against a real in-process SSH server
make vet
make vulncheck
make build
make docker

Release: tag vX.Y.Z → GitHub Actions builds and publishes a multi-arch image to ghcr.io/inhuman/mcp-ssh-fleet.

Set up in your AI client

AI clientOperating system

Merge this template into ~/Library/Application Support/Claude/claude_desktop_config.json. Keep existing servers. Add any arguments, credentials, and permissions required by the maintainer; this template has not been install-tested.

json

{
  "mcpServers": {
    "io-github-inhuman-mcp-ssh-fleet": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/inhuman/mcp-ssh-fleet:0.1.5"
      ]
    }
  }
}

Restart Claude Desktop completely for changes to take effect. Confirm the server appears connected in the client’s tool list, then try a read-only example from its documentation.

Claude Desktop setup reference

Compatible MCP Clients

SSH Fleet works with any MCP-compatible client. Copy the config snippet from the Configuration section above and add it to the file shown for your client, then restart the application.

Claude Desktop~/Library/Application Support/Claude/claude_desktop_config.jsonRestart Claude Desktop completely for changes to take effect.

Cursor~/.cursor/mcp.jsonRestart Cursor for changes to take effect.

VS Code.vscode/mcp.jsonReload VS Code window for changes to take effect.

Windsurf~/.codeium/windsurf/mcp_config.jsonRestart Windsurf for changes to take effect.

Claude Code.mcp.jsonSave at the project root, then start Claude Code in that project and review the MCP server approval prompt. Keep real credentials out of shared files.

SSH Fleet