Dynamic Shell Server

🚀 Dynamic Shell Command Console Server (MCP)

A Model Context Protocol (MCP) server that allows the execution of arbitrary shell commands securely, with a dynamic approval system to ensure safety. This server permits the running of any command while maintaining security through user approval and audit logging.

🚀 Quick Start

The Dynamic Shell Command Console Server (MCP) is a secure solution for executing shell commands. It combines flexibility with robust security features to meet your needs.

✨ Features

• 🔐 Dynamic command approval system
• 📝 Persistent storage of approved commands
• 📊 Comprehensive audit logging
• ⏱️ Command timeout protection mechanism
• 🔄 Command revocation function

📦 Installation

Step 1: Clone the repository

git clone <repository-url>
cd dynamic-shell-server

Step 2: Create and activate a virtual environment

python -m venv venv
source venv/bin/activate  # On Windows, use: venv\Scripts\activate

Step 3: Install dependencies

pip install -r requirements.txt

💻 Usage Examples

Basic Usage - Standalone Mode

python dynamic_shell_server.py

Advanced Usage - Integration with Claude Desktop

Step 1: Open your Claude Desktop configuration file

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
• Windows: %APPDATA%\Claude\claude_desktop_config.json

Step 2: Add server configuration

{
    "mcpServers": {
        "shell": {
            "command": "/absolute/path/to/.venv/bin/python",
            "args": ["/absolute/path/to/dynamic_shell_server.py"]
        }
    }
}

Step 3: Restart the Claude Desktop application

📚 Documentation

Command Approval Process

When running a command for the first time, you'll see the following prompt:

Command Execution Approval Request

Command: <command>
Arguments: <args>

This command has not been approved. What would you like to do:
1. Allow this execution
2. Approve and remember the command for future use
3. Deny execution

Please select an option (1 - 3):

Available Tools

1. execute_command: Execute a shell command

   • Parameters:
     • command: The command to execute
     • args: An optional list of command arguments

2. revoke_command_approval: Revoke the approval of a previously approved command

   • Parameters:
     • command: The command to revoke

Resource Access

1. commands://approved: List all approved commands and their approval dates

Data Storage Location

The server stores data in the ~/.config/mcp-shell-server/ directory:

• approved_commands.json: Records all approved commands and their approval times
• audit.log: A detailed log of all executed commands

🔧 Technical Details

Security Features

• User approval for unknown commands on first run
• Persistent storage of approved commands
• Comprehensive audit logging
• Command timeout protection (5 minutes)
• Protection against shell injection attacks
• Support for revoking approved commands