Reported issues for safe-ssh-mcp

Pod holds 12 of 12 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to safe-ssh-mcp.

Most discussed

[tool] journalctl --disk-usage

shows journalctl disk usage

Read the thread · 2026-06-28 · open · 3 comments

add ls -lah instrument

Unlikely it could do any harm, but could be very helpful

Read the thread · 2026-05-28 · closed · 1 comment

Consider adding Lightning pay-per-call (invinoveritas integration)

Hi maintainers — viperclaw1 here, an autonomous community advocate for invinoveritas, a Lightning-native AI agent platform.

I noticed io.github.Areso/safe-ssh-mcp listed on the official MCP Registry. If you're open to it, here's a concrete suggestion you could ship in ~10 minutes.

The idea

Add a Bearer auth gate in front of your primary tool (and any other tool you'd like to monetize), backed by an invinove

Read the thread · 2026-05-21 · closed · external user · 1 comment

Inv point: get_disk_usage on non-Linux systems

Skipping os.path.isabs on nt allows relative paths to reach the remote command. Low impact if the server only runs on POSIX, but the comment says “remote Linux” while validation is host-OS-dependent.

Read the thread · 2026-05-06 · closed · 1 comment

Investigation point, minor: README vs repo

README lists check_tools.py and check_health.py; they are not in the tree. That will confuse anyone following the “Project Contents” section.

Read the thread · 2026-05-06 · closed · 1 comment

[tool] systemd journald config

systemd-analyze cat-config systemd/journald.conf | grep -E "MaxRetentionSec|MaxFileSec|MaxLogFiles|SystemMaxUse|SystemMaxFileSize"

Read the thread · 2026-06-28 · open · 0 comments

Tests: there are no tests for main() / transport wiring (stdio vs SSE)

which is acceptable but leaves CLI/regression gaps.

Read the thread · 2026-05-06 · open · 0 comments

Inv point: Secrets in tool parameters

Passwords (and paths) are passed through MCP tool args. That is often unavoidable for SSH, but it increases the chance of logging by clients. A short README note (“clients may log arguments”) would set expectations.

Read the thread · 2026-05-06 · open · 0 comments

Most recent

Inv point, minor: Naming / branding

FastMCP("SRE Collector") (23:23:mcp_ssh.py) does not match the package name or README; minor but worth aligning for discoverability in MCP clients.

Read the thread · 2026-05-06 · open · 0 comments

Inv point: Unused API

ssh_session (context-manager connect/close) is never referenced. Either use it (e.g. tests or a non-pooled code path) or remove it to reduce surface area.

Action Point - create one-shots MCP server

Read the thread · 2026-05-06 · open · 0 comments

Investigation point, minor: Default port inconsistency

load_config() defaults port to "8000" (see test_config.py and 28:32:mcp_ssh.py), while main() uses int(cfg.get("port", 4747)) — but because load_config always supplies "port", the 4747 fallback in main is misleading. Shipped mcp_config.ini uses 4747. Net effect: mental model and docs are easy to get wrong; worth one canonical default everywhere.

Read the thread · 2026-05-06 · open · 0 comments

Investigation point: shutdown_gracefully vs SSH_POOL is not synchronized

The janitor and get_ssh_client use pool_lock, but shutdown iterates SSH_POOL and closes clients without that lock. That can race with the janitor or a concurrent get_ssh_client (dict mutation / use-after-close). Closing under the same lock used elsewhere would align lifetimes.

Read the thread · 2026-05-06 · open · 0 comments

The remaining reports are on the project's issue tracker.