What is Mcp Nyc

The Shell MCP Server is a Node.js implementation of the Model Context Protocol (MCP) that enables secure shell command execution for AI models. It allows safe interaction with the shell while maintaining a controlled environment with robust security measures.

Use cases

This server is ideal for integrating AI models that require shell command execution while ensuring safety and security. Applications include automated tasks, system monitoring, and any situation where controlled command execution is necessary without risking critical system integrity.

How to use

To get started, install the server using the command npx mcp-shell. To configure it for use with Claude Desktop, run npx mcp-shell config or add npx -y mcp-shell to your configuration manually. Restart Claude Desktop to see the MCP tool available for use.

Key features

Key features include compliance with MCP, secure command execution with blacklist protection, command existence validation, standard I/O transport, and comprehensive error handling to ensure safe and reliable operations within a controlled environment.

Where to use

This server is designed for use in environments where AI models interact with the shell, such as development tools, AI assistants, and automation frameworks, particularly in scenarios requiring enforced security protocols.

MCP NYC

Hey Hackathon People!

Here’s how to get this working:

1. bun install or npm install
2. bun run prepare or npm run prepare
3. node build/index.js config --debug

Now restart your Claude app and it should be working.

Am i still dxren? Hello
HELLO

Shell MCP Server

A Node.js implementation of the Model Context Protocol (MCP) that provides secure shell command execution capabilities. This server allows AI models to execute shell commands in a controlled environment with built-in security measures. Easily integrates with Claude Desktop for connecting Claude with your shell.

Features

• MCP-compliant server implementation
• Secure command execution with blacklist protection
• Command existence validation
• Standard I/O based transport
• Error handling and graceful shutdown

Installation

Run npx mcp-shell.

To add it to Claude Desktop, run npx mcp-shell config. Or add npx -y mcp-shell to your config manually.

Start (or restart) Claude Desktop and you should see the MCP tool listed on the landing page.

Security Features

The server implements several security measures:

1. Command Blacklisting

   • Prevents execution of dangerous system commands
   • Blocks access to critical system modifications
   • Protects against file system destruction
   • Prevents privilege escalation

2. Command Validation

   • Verifies command existence before execution
   • Validates against the blacklist
   • Returns clear error messages for invalid commands

Available Tools

The server provides one tool:

run_command

Executes a shell command and returns its output.

Input Schema:

{
  "type": "object",
  "properties": {
    "command": {
      "type": "string"
    }
  }
}

Response:

• Success: Command output as plain text
• Error: Error message as plain text

Blacklisted Commands

The following command categories are blocked for security:

• File System Destruction Commands (rm, rmdir, del)
• Disk/Filesystem Commands (format, mkfs, dd)
• Permission/Ownership Commands (chmod, chown)
• Privilege Escalation Commands (sudo, su)
• Code Execution Commands (exec, eval)
• System Communication Commands (write, wall)
• System Control Commands (shutdown, reboot, init)

Error Handling

The server includes comprehensive error handling:

• Command not found errors
• Blacklisted command errors
• Execution errors
• MCP protocol errors
• Graceful shutdown on SIGINT

Implementation Details

The server is built using:

• Model Context Protocol SDK
• StdioServerTransport for communication
• execa for command execution
• command-exists for command validation

Development

To modify the security settings, you can:

1. Edit the BLACKLISTED_COMMANDS set to adjust blocked commands
2. Modify the validateCommand function to add additional validation rules
3. Enhance the command parsing logic in the CallToolRequestSchema handler