Ssh Hub

🚀 ssh-hub

An MCP server that enables AI coding agents to fully access remote machines via SSH. Connect to multiple servers simultaneously and perform remote file operations, execute shell commands, and synchronize directories—all through the MCP tool interface.

🚀 Quick Start

# 1. Add a remote server
ssh-hub add <SERVER_ALIAS> user@host

# 2. Register as MCP in your project
ssh-hub mcp-install /path/to/project

Connection string formats

user@host                  # defaults to port 22, path ~
user@host:/path            # explicit path
user@host:2222             # custom port, path ~
user@host:2222:/path       # custom port and path

Identity files

For passphrase-protected keys, pass -i during add — ssh-hub will load the key into your SSH agent:

⚠️ Important Note

If a phrase is required to access the private key, this command will ask for passphrase via ssh-add and store it securely.

ssh-hub add <SERVER_ALIAS> user@host -i ~/.ssh/my_key

✨ Features

• Connect to multiple servers simultaneously.
• Perform remote file operations, execute shell commands, and synchronize directories through the MCP tool interface.

📦 Installation

Install

cargo install --git https://github.com/Perceptron-Studios/ssh-hub.git

Upgrade

ssh-hub upgrade

💻 Usage Examples

Basic Usage

# Add a remote server
ssh-hub add staging deploy@staging.example.com

# Register as MCP in a project
ssh-hub mcp-install /path/to/my-project

📚 Documentation

CLI commands

Options: -v verbose logging, -i <path> identity file, -p <port> port override.

mcp-install flags: --claude (.mcp.json only), --codex (.codex/config.toml only). Defaults to both.

Authentication

All authentication is SSH-key based. No passwords are stored or transmitted. Keys are tried in order:

1. Identity file — key specified with -i during add (highest signal)
2. SSH agent — keys loaded via ssh-add, signing delegated to ssh-agent (capped at 10 keys)
3. Default keys — ~/.ssh/id_ed25519, id_rsa, id_ecdsa

RSA keys are automatically negotiated with SHA-256/SHA-512 signatures (modern servers reject legacy SHA-1).

MCP tools

All tools auto-connect to configured servers on first use — no manual connection step needed. Each tool takes a server parameter referencing a configured server name.

Discovery

• list_servers — Show configured servers with live reachability probes (TCP ping with latency)

Remote operations

• remote_bash — Execute shell commands (with optional timeout and background mode)
• remote_read — Read file contents (with offset/limit for large files)
• remote_write — Write content to a file
• remote_edit — Edit a file using string replacement
• remote_glob — Find files matching a glob pattern

Sync

• sync_push — Push local files or directories to remote (tar streaming for directories)
• sync_pull — Pull remote files or directories to local (tar streaming for directories)

Configuration

Server configs are stored in ~/.config/ssh-hub/servers.toml (macOS: ~/Library/Application Support/ssh-hub/servers.toml):

[servers.staging]
host = "staging.example.com"
user = "deploy"
port = 2222
remote_path = "/var/www/app"
identity = "~/.ssh/id_staging"

[servers.prod]
host = "prod.example.com"
user = "deploy"
remote_path = "~"

📄 License

MIT