Acp Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Acp Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for remote machine operations via SSH. Provides a single, powerful tool for executing any shell command on remote machines with real-time progress streaming.
npm install @prmichaelsen/acp-mcpnpm install
npm run devnpm run buildAdd to your Claude Desktop configuration:
{
"mcpServers": {
"acp-mcp": {
"command": "node",
"args": ["/absolute/path/to/acp-mcp/dist/server.js"]
}
}
}import { createServer } from '@prmichaelsen/acp-mcp/factory';
import { readFileSync } from 'fs';
const server = await createServer({
userId: 'user-123',
ssh: {
host: 'remote.example.com',
port: 22,
username: 'remote-user',
privateKey: readFileSync('/path/to/private/key', 'utf-8'),
},
});acp-mcp v1.0.0 provides a single, powerful tool for all remote operations:
Execute any shell command on the remote machine with optional progress streaming.
Parameters:
command (required): Shell command to executecwd (optional): Working directory for command executiontimeout (optional): Timeout in seconds (default: 30, ignored if progress streaming)Returns: { stdout, stderr, exitCode, timedOut, streamed? }
Features:
~/.zshrc, ~/.bashrc, or ~/.profile before executing commands$PATH and environment variables are properly loadedprogressToken in request _metaonprogress callbackprogressToken providednpm run build, npm test, npm run dev# Basic listing
acp_remote_execute_command({ command: "ls -la ~/project" })
# Recursive listing
acp_remote_execute_command({ command: "find ~/project -type f" })
# With tree (if installed)
acp_remote_execute_command({ command: "tree ~/project" })
# Only directories
acp_remote_execute_command({ command: "ls -d */ ~/project" })# Read entire file
acp_remote_execute_command({ command: "cat ~/project/package.json" })
# Read first 100 lines
acp_remote_execute_command({ command: "head -n 100 ~/project/large-file.txt" })
# Read last 50 lines
acp_remote_execute_command({ command: "tail -n 50 ~/project/log.txt" })
# Search in file
acp_remote_execute_command({ command: "grep 'pattern' ~/project/file.txt" })# Write simple content
acp_remote_execute_command({ command: "echo 'hello world' > ~/project/file.txt" })
# Write multi-line content
acp_remote_execute_command({
command: "cat > ~/project/file.txt << 'EOF'\nline 1\nline 2\nline 3\nEOF"
})
# Append to file
acp_remote_execute_command({ command: "echo 'new line' >> ~/project/file.txt" })
# Create directories
acp_remote_execute_command({ command: "mkdir -p ~/project/new/nested/dir" })# Copy files
acp_remote_execute_command({ command: "cp ~/source.txt ~/dest.txt" })
# Move files
acp_remote_execute_command({ command: "mv ~/old.txt ~/new.txt" })
# Delete files
acp_remote_execute_command({ command: "rm ~/file.txt" })
# Change permissions
acp_remote_execute_command({ command: "chmod 755 ~/script.sh" })# Git operations
acp_remote_execute_command({ command: "git status", cwd: "~/project" })
acp_remote_execute_command({ command: "git commit -m 'message'", cwd: "~/project" })
# Package management
acp_remote_execute_command({ command: "npm install", cwd: "~/project" })
acp_remote_execute_command({ command: "npm run build", cwd: "~/project" })
# Process management
acp_remote_execute_command({ command: "ps aux | grep node" })
acp_remote_execute_command({ command: "kill -9 12345" })v1.0.0 removed specialized tools (list_files, read_file, write_file) in favor of execute_command:
✅ Properly expands `~` and environment variables - SFTP-based tools didn't ✅ Maximum flexibility - Use any shell command or tool ✅ Simpler codebase - One tool instead of four ✅ More reliable - No SFTP edge cases or limitations ✅ Consistent behavior - Works exactly like interactive SSH ✅ Easier to maintain - Single code path to test and debug
Copy .env.example to .env and configure SSH credentials:
cp .env.example .envEdit .env with your SSH connection details:
# SSH Configuration (required)
SSH_HOST=your-remote-server.com
SSH_PORT=22
SSH_USERNAME=your-username
SSH_PRIVATE_KEY_PATH=/path/to/your/ssh/private/keyWhen using with mcp-auth, SSH credentials are provided programmatically:
import { createServer } from '@prmichaelsen/acp-mcp/factory';
import { readFileSync } from 'fs';
// SSH credentials provided by mcp-auth wrapper
const server = await createServer({
userId: 'user-123',
ssh: {
host: process.env.REMOTE_HOST,
port: parseInt(process.env.REMOTE_PORT || '22'),
username: process.env.REMOTE_USERNAME,
privateKey: readFileSync(process.env.REMOTE_KEY_PATH, 'utf-8'),
},
});npm run dev - Start development server with hot reloadnpm run build - Build for productionnpm run build:watch - Build and watch for changesnpm start - Run production buildnpm test - Run testsnpm run typecheck - Type check without emittingnpm run clean - Remove build outputMIT
Patrick Michaelsen
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.