Awesome MCP › Software Development

sonirico/mcp-shell

⭐ 106 Go repository created 2025-05-24

mcp-shell gives a model a shell tool while keeping the operator in control of what may actually run. Its defining choice is the default: with no configuration file it boots in secure mode restricted to a narrow allowlist of read-only utilities such as ls, cat, grep, find, head and tail. A configuration file is needed only to widen or change that policy, and running fully unrestricted requires explicitly setting MCP_SHELL_ALLOW_UNSAFE, which the README states disables all validation and should not be used in production. That inversion matters, because the common failure mode for shell-execution servers is unrestricted access by default that nobody notices until something is deleted. Execution is auditable, so what the model ran is recorded rather than inferred, and commands run on demand rather than through a persistent session. It is written in Go on the mark3labs/mcp-go library, so it ships as a static binary, and the easiest deployment is a Docker image with a workspace directory mounted — which adds container isolation on top of the allowlist. Installation from source is a clone and make install. The audience is people who want an agent able to inspect a system or run build commands, and who want the boundary of that ability written down explicitly rather than assumed.

https://github.com/sonirico/mcp-shell

mcpshellgolangcommand-executionallowlistdockersecurityaudit