Secure MCP server for whitelisted shell command execution with stdin, argv pipelines, timeouts, and structured audit logging.
tumf/mcp-shell-server is an MCP server distributed on github, maintained by tumf, tracked here since May 2026. It has shipped 13 releases. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict. 11 known CVEs on file.
11 advisories published against this server still applies to the version it ships, the most severe rated high, most recently 2026-08-08.
full security breakdown →No tools recorded for this server yet.
06-15 00:00 07-29 00:00 now
| version | date | src |
|---|---|---|
| v1.1.9 | 2026-08-15 | github |
| v1.1.8 | 2026-08-08 | github |
| v1.1.7 | 2026-08-04 | github |
| v1.1.6 | 2026-08-04 | github |
| v1.1.5 | 2026-08-02 | github |
| v1.1.4 | 2026-08-01 | github |
| v1.1.3 | 2026-07-27 | github |
| v1.1.2 | 2026-07-18 | github |
| v1.1.1 | 2026-07-02 | github |
| v1.1.0 | 2026-06-17 | github |