MCP access

An MCP server for your SSH hosts.

Streamable HTTP at /mcp with 17 tools. Sign in with OAuth from claude.ai and Claude desktop, or use an API key from Claude Code, Cursor, Codex and other clients.

What you get

17 tools

Commands, many-server runs, background jobs, interactive sessions, files, metrics, alerts, backups and passwords.

OAuth 2.1

Dynamic client registration and PKCE, with one-hour access tokens and rotating refresh tokens.

Policies

Full, allowlist or read-only, per key or app, scoped to the servers you choose.

Audit

Every call is logged with the key or app that made it; output can be kept sealed.

Pause when away

Optionally refuse agent commands unless your vault was unlocked recently.

Visible

Agent terminals show up live in Live sessions; recording depends on your settings.

How to set it up

claude.ai or Claude desktop

Add a custom connector with your MCP URL and approve it on the consent page.

https://your-k2shell-host/mcp

Claude Code

Create an API key, then add the server.

claude mcp add --transport http k2shell https://your-k2shell-host/mcp --header "Authorization: Bearer k2shell_..."