CLI MCP Server
A secure Model Context Protocol (MCP) server implementation for executing controlled command-line operations with
comprehensive security features.
License
Python Version
MCP Protocol
<a href="https://glama.ai/mcp/servers/q89277vzl1"><img width="380" height="200" src="https://glama.ai/mcp/servers/q89277vzl1/badge" /></a>
Table of Contents
- Overview
- Features
- Configuration
- Available Tools
- Usage with Claude Desktop
- Security Features
- Error Handling
- Development
- License
Overview
This MCP server enables secure command-line execution with robust security measures including command whitelisting, path
validation, and execution controls. Perfect for providing controlled CLI access to LLM applications while maintaining security.
Features
- Secure command execution with strict validation
- Configurable command and flag whitelisting with 'all' option
- Path traversal prevention and validation
- Shell operator injection protection
- Execution timeouts and length limits
- Detailed error reporting
- Async operation support
- Working directory restriction and validation
Configuration
Configure the server using environment variables:
[object Object] | [object Object] | [object Object] |
[object Object] | [object Object] | [object Object] |
[object Object] | [object Object] | [object Object] |
[object Object] | [object Object] | [object Object] |
[object Object] | [object Object] | [object Object] |
[object Object] | [object Object] | [object Object] |
[object Object] | [object Object] | [object Object] |
Note: Setting
ALLOWED_COMMANDS or ALLOWED_FLAGS to 'all' will allow any command or flag respectively.Installation
To install CLI MCP Server for Claude Desktop automatically via Smithery:
Available Tools
run_command
Executes whitelisted CLI commands within allowed directories.
Input Schema:
Security Notes:
- Shell operators (&&, |, >, >>) are not supported by default, but can be enabled with
ALLOW_SHELL_OPERATORS=true
- Commands must be whitelisted unless ALLOWED_COMMANDS='all'
- Flags must be whitelisted unless ALLOWED_FLAGS='all'
- All paths are validated to be within ALLOWED_DIR
show_security_rules
Displays current security configuration and restrictions, including:
- Working directory
- Allowed commands
- Allowed flags
- Security limits (max command length and timeout)
Usage with Claude Desktop
Add to your
~/Library/Application\ Support/Claude/claude_desktop_config.json:Development/Unpublished Servers Configuration
Published Servers Configuration
In case it's not working or showing in the UI, clear your cache viauv clean.
Security Features
- Command whitelist enforcement with 'all' option
- Flag validation with 'all' option
- Path traversal prevention and normalization
- Shell operator blocking (with opt-in support via
ALLOW_SHELL_OPERATORS=true)
- Command length limits
- Execution timeouts
- Working directory restrictions
- Symlink resolution and validation
Error Handling
The server provides detailed error messages for:
- Security violations (CommandSecurityError)
- Command timeouts (CommandTimeoutError)
- Invalid command formats
- Path security violations
- Execution failures (CommandExecutionError)
- General command errors (CommandError)
Development
Prerequisites
- Python 3.10+
- MCP protocol library
Building and Publishing
To prepare the package for distribution:
- Sync dependencies and update lockfile:
- Build package distributions:
- Publish to PyPI:
Debugging
Since MCP servers run over stdio, debugging can be challenging. For the best debugging
experience, we strongly recommend using the MCP Inspector.
You can launch the MCP Inspector via `npm` with
this command:
Upon launching, the Inspector will display a URL that you can access in your browser to begin debugging.
License
This project is licensed under the MIT License - see the LICENSE file for details.
For more information or support, please open an issue on the project repository.
CLI MCP Server
A secure Model Context Protocol (MCP) server implementation for executing controlled command-line operations with
comprehensive security features.
License
Python Version
MCP Protocol
<a href="https://glama.ai/mcp/servers/q89277vzl1"><img width="380" height="200" src="https://glama.ai/mcp/servers/q89277vzl1/badge" /></a>
Table of Contents
- Overview
- Features
- Configuration
- Available Tools
- Usage with Claude Desktop
- Security Features
- Error Handling
- Development
- License
Overview
This MCP server enables secure command-line execution with robust security measures including command whitelisting, path
validation, and execution controls. Perfect for providing controlled CLI access to LLM applications while maintaining security.
Features
- Secure command execution with strict validation
- Configurable command and flag whitelisting with 'all' option
- Path traversal prevention and validation
- Shell operator injection protection
- Execution timeouts and length limits
- Detailed error reporting
- Async operation support
- Working directory restriction and validation
Configuration
Configure the server using environment variables:
[object Object] | [object Object] | [object Object] |
[object Object] | [object Object] | [object Object] |
[object Object] | [object Object] | [object Object] |
[object Object] | [object Object] | [object Object] |
[object Object] | [object Object] | [object Object] |
[object Object] | [object Object] | [object Object] |
[object Object] | [object Object] | [object Object] |
Note: Setting
ALLOWED_COMMANDS or ALLOWED_FLAGS to 'all' will allow any command or flag respectively.Installation
To install CLI MCP Server for Claude Desktop automatically via Smithery:
Available Tools
run_command
Executes whitelisted CLI commands within allowed directories.
Input Schema:
Security Notes:
- Shell operators (&&, |, >, >>) are not supported by default, but can be enabled with
ALLOW_SHELL_OPERATORS=true
- Commands must be whitelisted unless ALLOWED_COMMANDS='all'
- Flags must be whitelisted unless ALLOWED_FLAGS='all'
- All paths are validated to be within ALLOWED_DIR
show_security_rules
Displays current security configuration and restrictions, including:
- Working directory
- Allowed commands
- Allowed flags
- Security limits (max command length and timeout)
Usage with Claude Desktop
Add to your
~/Library/Application\ Support/Claude/claude_desktop_config.json:Development/Unpublished Servers Configuration
Published Servers Configuration
In case it's not working or showing in the UI, clear your cache viauv clean.
Security Features
- Command whitelist enforcement with 'all' option
- Flag validation with 'all' option
- Path traversal prevention and normalization
- Shell operator blocking (with opt-in support via
ALLOW_SHELL_OPERATORS=true)
- Command length limits
- Execution timeouts
- Working directory restrictions
- Symlink resolution and validation
Error Handling
The server provides detailed error messages for:
- Security violations (CommandSecurityError)
- Command timeouts (CommandTimeoutError)
- Invalid command formats
- Path security violations
- Execution failures (CommandExecutionError)
- General command errors (CommandError)
Development
Prerequisites
- Python 3.10+
- MCP protocol library
Building and Publishing
To prepare the package for distribution:
- Sync dependencies and update lockfile:
- Build package distributions:
- Publish to PyPI:
Debugging
Since MCP servers run over stdio, debugging can be challenging. For the best debugging
experience, we strongly recommend using the MCP Inspector.
You can launch the MCP Inspector via `npm` with
this command:
Upon launching, the Inspector will display a URL that you can access in your browser to begin debugging.
License
This project is licensed under the MIT License - see the LICENSE file for details.
For more information or support, please open an issue on the project repository.