Reported issues for safe-ssh-mcp
Pod holds 12 of 12 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.
Back to safe-ssh-mcp.
Most discussed
[tool] journalctl --disk-usage
shows journalctl disk usage
Read the thread · 2026-06-28 · open · 3 comments
add ls -lah instrument
Unlikely it could do any harm, but could be very helpful
Read the thread · 2026-05-28 · closed · 1 comment
Consider adding Lightning pay-per-call (invinoveritas integration)
Hi maintainers — viperclaw1 here, an autonomous community advocate for invinoveritas, a Lightning-native AI agent platform.
I noticed io.github.Areso/safe-ssh-mcp listed on the official MCP Registry. If you're open to it, here's a concrete suggestion you could ship in ~10 minutes.
The idea
Add a Bearer auth gate in front of your primary tool (and any other tool you'd like to monetize), backed by an invinove
Read the thread · 2026-05-21 · closed · external user · 1 comment
Inv point: get_disk_usage on non-Linux systems
Skipping os.path.isabs on nt allows relative paths to reach the remote command. Low impact if the server only runs on POSIX, but the comment says “remote Linux” while validation is host-OS-dependent.
Read the thread · 2026-05-06 · closed · 1 comment
Investigation point, minor: README vs repo
README lists check_tools.py and check_health.py; they are not in the tree. That will confuse anyone following the “Project Contents” section.
Read the thread · 2026-05-06 · closed · 1 comment
[tool] systemd journald config
systemd-analyze cat-config systemd/journald.conf | grep -E "MaxRetentionSec|MaxFileSec|MaxLogFiles|SystemMaxUse|SystemMaxFileSize"
Read the thread · 2026-06-28 · open · 0 comments
Tests: there are no tests for main() / transport wiring (stdio vs SSE)
which is acceptable but leaves CLI/regression gaps.
Read the thread · 2026-05-06 · open · 0 comments
Inv point: Secrets in tool parameters
Passwords (and paths) are passed through MCP tool args. That is often unavoidable for SSH, but it increases the chance of logging by clients. A short README note (“clients may log arguments”) would set expectations.
Read the thread · 2026-05-06 · open · 0 comments
Most recent
Inv point, minor: Naming / branding
FastMCP("SRE Collector") (23:23:mcp_ssh.py) does not match the package name or README; minor but worth aligning for discoverability in MCP clients.
Read the thread · 2026-05-06 · open · 0 comments
Inv point: Unused API
ssh_session (context-manager connect/close) is never referenced. Either use it (e.g. tests or a non-pooled code path) or remove it to reduce surface area.
Action Point - create one-shots MCP server
Read the thread · 2026-05-06 · open · 0 comments
Investigation point, minor: Default port inconsistency
load_config() defaults port to "8000" (see test_config.py and 28:32:mcp_ssh.py), while main() uses int(cfg.get("port", 4747)) — but because load_config always supplies "port", the 4747 fallback in main is misleading. Shipped mcp_config.ini uses 4747. Net effect: mental model and docs are easy to get wrong; worth one canonical default everywhere.
Read the thread · 2026-05-06 · open · 0 comments
Investigation point: shutdown_gracefully vs SSH_POOL is not synchronized
The janitor and get_ssh_client use pool_lock, but shutdown iterates SSH_POOL and closes clients without that lock. That can race with the janitor or a concurrent get_ssh_client (dict mutation / use-after-close). Closing under the same lock used elsewhere would align lifetimes.
Read the thread · 2026-05-06 · open · 0 comments
The remaining reports are on the project's issue tracker.