MCP Directory

How to add MCP SSH Manager to Cursor

Manage multiple SSH servers from Claude Code or OpenAI Codex — execute commands, transfer files, backups, DB ops, health monitoring. Paste the config into ~/.cursor/mcp.json and restart Cursor.

Last updated June 14, 2026 · 278★ · stdio · no auth

Cursor config for MCP SSH Manager

npm install -g mcp-ssh-manager
{
  "mcpServers": {
    "mcp-ssh-manager": {
      "command": "node",
      "args": [
        "/path/to/mcp-ssh-manager/src/index.js"
      ]
    }
  }
}

Setup steps

  1. 1Open Cursor → Settings → MCP → Add new MCP server (or edit ~/.cursor/mcp.json directly).
  2. 2Paste the MCP SSH Manager config below into the "mcpServers" object.
  3. 3Fill in placeholder secrets, then save.
  4. 4Cursor reloads MCP servers automatically — check Settings → MCP for a green status dot.
  5. 5Ask Cursor to use one of MCP SSH Manager's tools to confirm it's connected.

Before you start

  • Node.js v18 or higher
  • npm
  • Claude Code CLI (for Claude Code) or Codex CLI (for OpenAI Codex)
  • Bash 4.0+ for the optional CLI management tools
  • rsync for file synchronization (ssh_sync)
  • sshpass (optional, for rsync with password authentication)
  • SSH access and credentials for the remote servers you want to manage

What MCP SSH Manager can do in Cursor

ssh_list_servers

List all configured SSH servers with their details.

ssh_execute

Execute a command on a remote server. Params: server, command, cwd (optional; falls back to the server's default directory).

ssh_upload

Upload a file to a remote server. Params: server, local_path, remote_path.

ssh_download

Download a file from a remote server. Params: server, remote_path, local_path.

ssh_sync

Bidirectional file synchronization between local and remote using rsync.

ssh_backup_create

Create a backup of a database (MySQL/PostgreSQL/MongoDB) or files on a remote server, with compression and metadata. Params: server, type, name, database, paths, retention.

ssh_backup_list

List available backups on a remote server with size, date, and retention info. Params: server, type (optional filter).

ssh_backup_restore

Restore from a previous backup, with cross-database support. Params: server, backupId, database, targetPath.

Security

Grants an AI assistant the ability to run arbitrary shell commands, transfer files, and operate databases over SSH on remote servers. Store SSH credentials in a `.env` file that is never committed; prefer SSH keys or ssh-agent over inline passwords. Use the optional per-server security modes (v3.5.0+): `readonly` blocks mutating tools and destructive commands, `restricted` requires every `ssh_execute` command to match an `ALLOW_PATTERNS` regex and no `DENY_PATTERNS` (DENY wins, fail-closed). An opt-in JSONL audit log records each invocation and redacts sensitive args (password, passphrase, sudoPassword, token, secret, apikey). `autoApprove` in the client config is all-or-nothing per tool, so enabling it for ssh_execute trusts any command.

MCP SSH Manager + Cursor FAQ

Where is the Cursor config file?

Cursor reads MCP servers from ~/.cursor/mcp.json. Paste the MCP SSH Manager config there under the "mcpServers" key and restart the client.

Is MCP SSH Manager safe to use with Cursor?

Grants an AI assistant the ability to run arbitrary shell commands, transfer files, and operate databases over SSH on remote servers. Store SSH credentials in a `.env` file that is never committed; prefer SSH keys or ssh-agent over inline passwords. Use the optional per-server security modes (v3.5.0+): `readonly` blocks mutating tools and destructive commands, `restricted` requires every `ssh_execute` command to match an `ALLOW_PATTERNS` regex and no `DENY_PATTERNS` (DENY wins, fail-closed). An opt-in JSONL audit log records each invocation and redacts sensitive args (password, passphrase, sudoPassword, token, secret, apikey). `autoApprove` in the client config is all-or-nothing per tool, so enabling it for ssh_execute trusts any command.

Which AI clients does it support?

Claude Code (configured via .env and `claude mcp add` / an mcpServers JSON block) and OpenAI Codex (configured via a `[mcp_servers.ssh-manager]` block in ~/.codex/config.toml plus a TOML ssh-config). Both expose the same set of MCP tools.

How are SSH servers configured?

For Claude Code, add `SSH_SERVER_<NAME>_HOST/_USER/_PASSWORD/_KEYPATH/_PASSPHRASE/_PORT/_DEFAULT_DIR/...` entries to a `.env` file. For Codex, define `[ssh_servers.<name>]` tables in a TOML file. The `ssh-manager` CLI can convert between the two formats, and config changes are hot-reloaded without restarting the server (v3.6.0+).

Can I limit which tools or commands the AI can run?

Yes. Tool activation lets you enable only specific tool groups (minimal mode is 5 tools, ~92% less context). Per-server security modes (v3.5.0+) add server-side filtering: `readonly` blocks mutating tools and destructive commands, and `restricted` requires each command to match an ALLOW_PATTERNS regex with DENY_PATTERNS taking precedence. An opt-in JSONL audit log records and redacts each invocation.

View repo Full MCP SSH Manager page