MCPInstall
Command Security Layer logo

Command Security Layer

by Andrew-Beniash Andrew-Beniash/mcp-command-server

Implements a robust security layer for command processing, utilizing multi-step verification and auditing to enable high-security use cases like critical infrastructure management.

View on GitHub
READMEmain

MCP Command Server

A secure Model Context Protocol (MCP) server for executing system commands through LLM applications like Claude.

Quick Start

  1. Install the package:
uv pip install mcp-command-server
  1. Configure allowed commands:
export ALLOWED_COMMANDS="ls,pwd,echo"
  1. Add to Claude Desktop configuration:
{
  "mcpServers": {
    "command-server": {
      "command": "uv",
      "args": ["run", "python", "-m", "mcp_command_server"],
      "env": {
        "ALLOWED_COMMANDS": "ls,pwd,echo"
      }
    }
  }
}

Features

  • 🔒 Secure command execution with whitelist
  • ✅ User confirmation for all commands
  • 📝 Comprehensive audit logging
  • 🔍 Input validation and sanitization
  • 🤖 Claude Desktop integration

Documentation

For complete documentation, see the docs/ directory:

Development

Setup

# Clone repository
git clone https://github.com/yourusername/mcp-command-server.git
cd mcp-command-server

# Create virtual environment
uv venv
source .venv/bin/activate  # On Unix/macOS
.venv\Scripts\activate     # On Windows

# Install development dependencies
uv pip install -e ".[dev]"

Testing

# Run all tests
pytest

# Run specific test file
pytest tests/unit/security/test_validator.py

# Run with coverage
pytest --cov=mcp_command_server

Contributing

  1. Fork the repository
  2. Create your feature branch
  3. Run tests and linting
  4. Submit a pull request

License

MIT License - see LICENSE for details.

More Security & Testing MCP servers

Similar servers from the same category.

Proofly (Deepfake Detection)

proofly-ai

Enables deepfake detection in images through Proofly API integration, providing detailed analysis results including real/fake probability scores and individual model results for each detected face.

Security & Testing

Cloudflare One CASB

cloudflare

CASB provides comprehensive visibility and control over your SaaS applications, so you can easily eliminate the risk of compromise, prevent data loss, and avoid compliance violations.

Security & Testing

Cloudflare Audit Logs

cloudflare

Audit logs summarize the history of changes made within your Cloudflare account. Audit logs include account level actions like zone configuration changes.

Security & Testing

YaraFlux

threatflux

Provides YARA-based malware scanning capabilities with support for local and MinIO storage backends, enabling security professionals to manage rules, scan files/URLs, and analyze results for threat detection.

filesystemstorage