Command Executor MCP Server

🚀 Command Executor MCP Server

A Model Context Protocol server for securely executing pre-approved commands.

🚀 Quick Start

A Model Context Protocol server is used to securely execute pre-approved commands.

🎥 Demo

https://github.com/user-attachments/assets/ed763a12-b685-4e0b-b9a5-bc948a590f51

✨ Features

• Secure command execution using a pre-approved command list.
• Configure allowed commands via environment variables.
• Built with TypeScript and the MCP SDK.
• Communicate via stdio for seamless integration.
• Feature error handling and security verification.
• Provide real-time command output streaming.

📦 Installation

Install dependencies:

npm install

Build the server:

npm run build

Development mode (auto-rebuild):

npm run watch

📚 Documentation

🔒 Allowed Commands

By default, the following commands are allowed:

• git
• ls
• mkdir
• cd
• npm
• npx
• python

You can customize the allowed commands by setting the ALLOWED_COMMANDS environment variable:

export ALLOWED_COMMANDS=git,ls,mkdir,python

🔌 Claude Desktop Integration

To use it with Claude Desktop, add the server configuration:

On MacOS:

~/Library/Application Support/Claude/claude_desktop_config.json

On Windows:

%APPDATA%/Claude/claude_desktop_config.json

Configuration example:

{
  "mcpServers": {
    "command-executor": {
      "command": "/path/to/command-executor/build/index.js"
    }
  }
}

🔧 Technical Details

The command executor server implements multiple security measures:

1. Pre-approved command list

   • Only explicitly allowed commands can be executed.
   • The default list is strict and security-focused.
   • Commands are verified by prefix to prevent injection.

2. Command verification

   • Command prefix verification prevents command injection.
   • It does not use shell execution to enhance security.
   • Environment variables are properly sanitized.

3. Runtime security

   • Use CAP (Containerized Application Protection) policies to limit process permissions.
   • Run as a non-root user.
   • Prevent path traversal attacks.

🛠️ Building

To build the command executor, use Node.js and npm:

npm install
npm run build

🤝 Contributing

1. Fork and clone the repository.
2. Create a feature branch.
3. Commit your changes.
4. Push to the branch.
5. Create a new pull request.

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.