Secure Command Executor MCP Server

🚀 Secure Command Execution MCP Server

A powerful MCP service for command execution with daily log rotation, designed to securely manage and execute system commands, featuring security checks and detailed logging. This README.md file is written by DeepSeek V3.

🚀 Quick Start

The Secure Command Execution MCP Server is a robust tool for safely managing and executing system commands. It comes with built - in security checks and detailed logging features, ensuring a high - level of security and traceability.

✨ Features

• Command Execution: Execute system commands with optional parameters.
• Security Checks: Warn about dangerous commands and require confirmation.
• Command Management: Add, update, delete, enable, or disable commands.
• Logging: Daily log rotation for detailed operation tracking.
• Query Tools: Query available commands and logs using filters.

📦 Installation

1. Clone the repository:

   git clone https://github.com/HappyAny/secure-command-executor-mcp-server.git
   cd secure-command-executor-mcp-server
   

2. Install dependencies:

   npm install minimist
   npm install @modelcontextprotocol/sdk
   npm install zod
   

3. Configure the service:

   • Modify the commands.json file to define available commands.
   • Set environment variables (optional).

💻 Usage Examples

Basic Usage

Start the service

node index.js --file commands.json --logs logs --port 3000

MCP Settings

{
    "mcpServers": {
        "cmd-exec": {
          "command": "node",
          "args": [
            "path_to_file/index.js",
            "--file",
            "path_to_file/commands.json",
            "--logs",
            "path_to_dict/logs"
          ]
        }
    }
}

Command File

The commands.json file defines available commands. Example:

[
  {
    "name": "dir",
    "description": "List directory contents",
    "example": "dir /w",
    "dangerous": false,
    "enabled": true,
    "confirmationPrompt": "",
    "consequences": ""
  },
  {
    "name": "format",
    "description": "Format a disk partition",
    "example": "format C:",
    "dangerous": true,
    "enabled": false,
    "confirmationPrompt": "This will permanently delete all data. Confirm?",
    "consequences": "Permanent data loss"
  }
]

Advanced Usage

Execute a command

curl -X POST http://localhost:3000/execute -H "Content-Type: application/json" -d '{"command": "dir", "args": "/w"}'

Query commands

curl -X GET http://localhost:3000/queryCommands?filter=enabled&detailed=true

Manage commands

curl -X POST http://localhost:3000/manageCommand -H "Content-Type: application/json" -d '{"action": "add", "name": "ping", "description": "Test network connection", "example": "ping example.com"}'

Query logs

curl -X GET http://localhost:3000/queryLogs?limit=50&filter=failed

📚 Documentation

Configuration

• Environment Variables:

  • NODE_ENV: Set to production to enable production mode.
  • PORT: Override the default port (3000).

• Command - line Arguments:

  • --file: Specify the path to the command file (default: commands.json).
  • --logs: Specify the path to the log directory (default: logs).
  • --port: Specify the port on which the service runs (default: 3000).

Logging

Logs are stored in the specified directory with daily rotation. Each log file is named YYYY-MM-DD.json.

🤝 Contribution

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

📄 License

MIT