MCP server for secure SSH remote management — 337 tools across 74 groups for DevOps, Docker, Kubernetes, databases, systemd, Windows, cloud, compliance & more. Built in Rust.
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret in muchiny/bridge-mcp
- HIGH code analysis flagged committed secret ×5 in muchiny/bridge-mcp
- HIGH code analysis flagged committed secret ×4 in muchiny/bridge-mcp
- HIGH code analysis flagged committed secret ×4 in muchiny/bridge-mcp
- HIGH code analysis flagged committed secret ×4 in muchiny/bridge-mcp
transport stdio · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 1e95bd8 · analyzer v28 · 3h ago
skills & prompt files 9
- agent-rules muchiny-bridge-mcp-1e95bd8/CLAUDE.md
- skill muchiny-bridge-mcp-1e95bd8/config/claude-code/skills/bridge/SKILL.md
- skill muchiny-bridge-mcp-1e95bd8/contrib/claude-skills/ssh-audit/SKILL.md
- skill muchiny-bridge-mcp-1e95bd8/contrib/claude-skills/ssh-deploy/SKILL.md
- skill muchiny-bridge-mcp-1e95bd8/contrib/claude-skills/ssh-diagnose/SKILL.md
- skill muchiny-bridge-mcp-1e95bd8/contrib/claude-skills/ssh-discover/SKILL.md
- skill muchiny-bridge-mcp-1e95bd8/contrib/claude-skills/ssh-ops/SKILL.md
- skill muchiny-bridge-mcp-1e95bd8/plugin/skills/bridge/SKILL.md
- skill muchiny-bridge-mcp-1e95bd8/plugin/skills/discover/SKILL.md
danger signals3
- committed secret GitHub token muchiny-bridge-mcp-1e95bd8/fuzz/seeds/fuzz_sanitizer/api_keys.txt :1
ghp_16…(40 chars, redacted) - committed secret Anthropic key muchiny-bridge-mcp-1e95bd8/src/security/sanitizer.rs :1475
sk-ant…(99 chars, redacted) - committed secret Anthropic key muchiny-bridge-mcp-1e95bd8/tests/security_audit.rs :320
sk-ant…(99 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 770
declared dependencies 57
- tokio@1
- russh@0.62
- russh-sftp@2.1
- serde@1
- serde_json@1
- serde-saphyr@0.0.29
- thiserror@2
- anyhow@1
- tracing@0.1
- tracing-subscriber@0.3
- clap@4.5
- clap_complete@4.5
- tokio-util@0.7
- regex@1
- aho-corasick@1
- chrono@0.4
- dirs@6
- tokio-socks@0.5
- async-trait@0.1
- sha2@0.11
- const-hex@1
- zeroize@1
- uuid@1
- notify@8.2
- rayon@1
- axum@0.8
- tower@0.5
- tower-http@0.7
- hyper-util@0.1
- tokio-stream@0.1
- mimalloc@0.1
- winrm-rs@1.1
- psrp-rs@1.0
- reqwest@0.13
- kube@4.0
- k8s-openapi@0.28
- tokio-serial@5.4
- aws-sdk-ssm@1
- aws-config@1
- jaq-core@3
- jaq-std@3
- jaq-json@2
- opentelemetry@0.32
- opentelemetry_sdk@0.32
- opentelemetry-otlp@0.32
- tracing-opentelemetry@0.33
- similar@3
- inventory@0.3
- bridge-mcp-macros@0.1.0
- jsonwebtoken@10
- tempfile@3
- criterion@0.8
- filetime@0.2
- tracing-test@0.2
- proptest@1
- insta@1
- base64@0.22.1