Cygnus Ssh MCP Server

This is a mature, well-architected SSH MCP server with thoughtful security design and comprehensive functionality. Credentials are properly stored in TOML config files (not hardcoded), authentication is mandatory for all operations, and permissions are appropriate for an infrastructure automation tool. However, several code quality concerns and a minor authentication bypass risk prevent a higher score: some error handling is overly broad, logging of command output could expose sensitive data, plaintext credential storage in config files is a documented but inherent risk, and a potential sudo auth bypass (when password auth is used for sudo fallback without explicit configuration) requires user awareness. Supply chain analysis found 7 known vulnerabilities in dependencies (1 critical, 3 high severity). Package verification found 1 issue.

4 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.