Back to Browse

Shell Exec MCP Server

Developer ToolsUse Caution0.5MCP RegistryLocal
Free

Server data from the Official MCP Registry

Execute bash commands with background job support.

About

Execute bash commands with background job support.

Security Report

0.5
Use Caution0.5Critical Risk

This MCP server provides unrestricted bash command execution with no authentication, authorization, or input validation. Any user or AI assistant with access can execute arbitrary shell commands with the full permissions of the process owner, including file operations, system modifications, and potentially data exfiltration. The server explicitly exposes dangerous operations (rm, mv, etc.) as documented use cases without any sandboxing or restrictions. Supply chain analysis found 5 known vulnerabilities in dependencies (1 critical, 2 high severity). Package verification found 1 issue.

7 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

file_delete

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

system_info

Check that this permission is expected for this type of plugin.

Unverified package source

We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.

What You'll Need

Set these up before or after installing:

Transport type.Optional

Environment variable: MCP_TRANSPORT

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-domdomegg-shell-exec-mcp": {
      "env": {
        "MCP_TRANSPORT": "your-mcp-transport-here"
      },
      "args": [
        "-y",
        "shell-exec-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

shell-exec-mcp

MCP server for executing bash commands with background job support.

Use Cases

Run build commands: Execute npm run build, make, or other build tools and get the output.

File operations: Use find, grep, mv, rm, mkdir -p, stat etc. for file management.

Long-running tasks: Start servers or watch processes in background mode, check on them later.

System info: Run df -h, ps aux, env etc. to inspect the system state.

Setup

Follow the instructions on install-mcp, which generates the right config for your MCP client (Claude Code, Claude Desktop, Cursor, Cline, VS Code, and more).

Tools

ToolDescription
executeRun a bash command (with optional timeout and background mode)
get_job_statusCheck status of a background job

Contributing

Pull requests are welcomed on GitHub! To get started:

  1. Install Git and Node.js
  2. Clone the repository
  3. Install dependencies with npm install
  4. Run npm run test to run tests
  5. Build with npm run build

Releases

Versions follow the semantic versioning spec.

To release:

  1. Use npm version <major | minor | patch> to bump the version
  2. Run git push --follow-tags to push with tags
  3. Wait for GitHub Actions to publish to the NPM registry.

Reviews

No reviews yet

Be the first to review this server!