SSH Fleet MCP
An MCP server providing two tools for managing a fleet of SSH hosts: ssh_probe for read-only diagnostics (uptime, disk, memory, logs) on tagged hosts, and ssh_exec for running arbitrary non-interactive commands on specific inventory hosts. It enforces security via allowlisted inventories, mounted SSH keys, output caps, and timeouts.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Run read-only diagnostics like uptime or disk usage on hosts with specific tags
- Execute a single non-interactive command on a specific host in the inventory
- Monitor fleet health using curated probe checks
- Manage SSH access with allowlisted hosts and mounted secrets
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
ghcr.io/inhuman/mcp-ssh-fleet:0.1.5
{
"transport": "stdio",
"identifier": "ghcr.io/inhuman/mcp-ssh-fleet:0.1.5",
"runtimeHint": "docker",
"registryType": "oci",
"runtimeArguments": [
{
"name": "-v",
"type": "named",
"value": "{inventory_path}:/etc/ssh-fleet/inventory.yaml:ro",
"variables": {
"inventory_path": {
"format": "filepath",
"isRequired": true,
"description": "Absolute path to your inventory.yaml on the host (see deploy/inventory.example.yaml)."
}
},
"isRequired": true,
"description": "Mount the host inventory allowlist (YAML), read-only."
},
{
"name": "-v",
"type": "named",
"value": "{key_path}:/etc/ssh-fleet/id_ed25519:ro",
"variables": {
"key_path": {
"format": "filepath",
"isRequired": true,
"description": "Absolute path to the private SSH key on the host."
}
},
"isRequired": true,
"description": "Mount the private SSH key, read-only."
}
],
"environmentVariables": [
{
"name": "SSH_FLEET_TRANSPORT",
"default": "stdio",
"description": "MCP transport. Must be 'stdio' for direct docker/stdio use."
},
{
"name": "SSH_FLEET_CMD_TIMEOUT_SECONDS",
"default": "20",
"description": "Per-host command timeout in seconds (1..600)."
},
{
"name": "SSH_FLEET_OUTPUT_CAP_BYTES",
"default": "8192",
"description": "Cap on output bytes per host section (>=256)."
},
{
"name": "SSH_FLEET_PROBE_CONCURRENCY",
"default": "8",
"description": "Parallelism for ssh_probe."
},
{
"name": "SSH_FLEET_PROBE_MAX_HOSTS",
"default": "50",
"description": "Safety cap on the number of hosts in one probe."
},
{
"name": "SSH_FLEET_AUTH_TOKEN",
"description": "Optional X-MCP-AUTH bearer token (only used by the http/sse transports)."
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"ssh-fleet-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"SSH_FLEET_TRANSPORT=<YOUR_SSH_FLEET_TRANSPORT>",
"-e",
"SSH_FLEET_CMD_TIMEOUT_SECONDS=<YOUR_SSH_FLEET_CMD_TIMEOUT_SECONDS>",
"-e",
"SSH_FLEET_OUTPUT_CAP_BYTES=<YOUR_SSH_FLEET_OUTPUT_CAP_BYTES>",
"-e",
"SSH_FLEET_PROBE_CONCURRENCY=<YOUR_SSH_FLEET_PROBE_CONCURRENCY>",
"-e",
"SSH_FLEET_PROBE_MAX_HOSTS=<YOUR_SSH_FLEET_PROBE_MAX_HOSTS>",
"-e",
"SSH_FLEET_AUTH_TOKEN=<YOUR_SSH_FLEET_AUTH_TOKEN>",
"ghcr.io/inhuman/mcp-ssh-fleet:0.1.5"
],
"env": {
"SSH_FLEET_TRANSPORT": "<YOUR_SSH_FLEET_TRANSPORT>",
"SSH_FLEET_CMD_TIMEOUT_SECONDS": "<YOUR_SSH_FLEET_CMD_TIMEOUT_SECONDS>",
"SSH_FLEET_OUTPUT_CAP_BYTES": "<YOUR_SSH_FLEET_OUTPUT_CAP_BYTES>",
"SSH_FLEET_PROBE_CONCURRENCY": "<YOUR_SSH_FLEET_PROBE_CONCURRENCY>",
"SSH_FLEET_PROBE_MAX_HOSTS": "<YOUR_SSH_FLEET_PROBE_MAX_HOSTS>",
"SSH_FLEET_AUTH_TOKEN": "<YOUR_SSH_FLEET_AUTH_TOKEN>"
}
}
}
}Cline
{
"mcpServers": {
"ssh-fleet-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"SSH_FLEET_TRANSPORT=<YOUR_SSH_FLEET_TRANSPORT>",
"-e",
"SSH_FLEET_CMD_TIMEOUT_SECONDS=<YOUR_SSH_FLEET_CMD_TIMEOUT_SECONDS>",
"-e",
"SSH_FLEET_OUTPUT_CAP_BYTES=<YOUR_SSH_FLEET_OUTPUT_CAP_BYTES>",
"-e",
"SSH_FLEET_PROBE_CONCURRENCY=<YOUR_SSH_FLEET_PROBE_CONCURRENCY>",
"-e",
"SSH_FLEET_PROBE_MAX_HOSTS=<YOUR_SSH_FLEET_PROBE_MAX_HOSTS>",
"-e",
"SSH_FLEET_AUTH_TOKEN=<YOUR_SSH_FLEET_AUTH_TOKEN>",
"ghcr.io/inhuman/mcp-ssh-fleet:0.1.5"
],
"env": {
"SSH_FLEET_TRANSPORT": "<YOUR_SSH_FLEET_TRANSPORT>",
"SSH_FLEET_CMD_TIMEOUT_SECONDS": "<YOUR_SSH_FLEET_CMD_TIMEOUT_SECONDS>",
"SSH_FLEET_OUTPUT_CAP_BYTES": "<YOUR_SSH_FLEET_OUTPUT_CAP_BYTES>",
"SSH_FLEET_PROBE_CONCURRENCY": "<YOUR_SSH_FLEET_PROBE_CONCURRENCY>",
"SSH_FLEET_PROBE_MAX_HOSTS": "<YOUR_SSH_FLEET_PROBE_MAX_HOSTS>",
"SSH_FLEET_AUTH_TOKEN": "<YOUR_SSH_FLEET_AUTH_TOKEN>"
}
}
}
}VS Code
{
"servers": {
"ssh-fleet-mcp": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"SSH_FLEET_TRANSPORT=<YOUR_SSH_FLEET_TRANSPORT>",
"-e",
"SSH_FLEET_CMD_TIMEOUT_SECONDS=<YOUR_SSH_FLEET_CMD_TIMEOUT_SECONDS>",
"-e",
"SSH_FLEET_OUTPUT_CAP_BYTES=<YOUR_SSH_FLEET_OUTPUT_CAP_BYTES>",
"-e",
"SSH_FLEET_PROBE_CONCURRENCY=<YOUR_SSH_FLEET_PROBE_CONCURRENCY>",
"-e",
"SSH_FLEET_PROBE_MAX_HOSTS=<YOUR_SSH_FLEET_PROBE_MAX_HOSTS>",
"-e",
"SSH_FLEET_AUTH_TOKEN=<YOUR_SSH_FLEET_AUTH_TOKEN>",
"ghcr.io/inhuman/mcp-ssh-fleet:0.1.5"
],
"env": {
"SSH_FLEET_TRANSPORT": "<YOUR_SSH_FLEET_TRANSPORT>",
"SSH_FLEET_CMD_TIMEOUT_SECONDS": "<YOUR_SSH_FLEET_CMD_TIMEOUT_SECONDS>",
"SSH_FLEET_OUTPUT_CAP_BYTES": "<YOUR_SSH_FLEET_OUTPUT_CAP_BYTES>",
"SSH_FLEET_PROBE_CONCURRENCY": "<YOUR_SSH_FLEET_PROBE_CONCURRENCY>",
"SSH_FLEET_PROBE_MAX_HOSTS": "<YOUR_SSH_FLEET_PROBE_MAX_HOSTS>",
"SSH_FLEET_AUTH_TOKEN": "<YOUR_SSH_FLEET_AUTH_TOKEN>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"ssh-fleet-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"SSH_FLEET_TRANSPORT=<YOUR_SSH_FLEET_TRANSPORT>",
"-e",
"SSH_FLEET_CMD_TIMEOUT_SECONDS=<YOUR_SSH_FLEET_CMD_TIMEOUT_SECONDS>",
"-e",
"SSH_FLEET_OUTPUT_CAP_BYTES=<YOUR_SSH_FLEET_OUTPUT_CAP_BYTES>",
"-e",
"SSH_FLEET_PROBE_CONCURRENCY=<YOUR_SSH_FLEET_PROBE_CONCURRENCY>",
"-e",
"SSH_FLEET_PROBE_MAX_HOSTS=<YOUR_SSH_FLEET_PROBE_MAX_HOSTS>",
"-e",
"SSH_FLEET_AUTH_TOKEN=<YOUR_SSH_FLEET_AUTH_TOKEN>",
"ghcr.io/inhuman/mcp-ssh-fleet:0.1.5"
],
"env": {
"SSH_FLEET_TRANSPORT": "<YOUR_SSH_FLEET_TRANSPORT>",
"SSH_FLEET_CMD_TIMEOUT_SECONDS": "<YOUR_SSH_FLEET_CMD_TIMEOUT_SECONDS>",
"SSH_FLEET_OUTPUT_CAP_BYTES": "<YOUR_SSH_FLEET_OUTPUT_CAP_BYTES>",
"SSH_FLEET_PROBE_CONCURRENCY": "<YOUR_SSH_FLEET_PROBE_CONCURRENCY>",
"SSH_FLEET_PROBE_MAX_HOSTS": "<YOUR_SSH_FLEET_PROBE_MAX_HOSTS>",
"SSH_FLEET_AUTH_TOKEN": "<YOUR_SSH_FLEET_AUTH_TOKEN>"
}
}
}
}Let your agent find its tools
Find servers like SSH Fleet MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.