Secure MCP server for whitelisted shell command execution with stdin, argv pipelines, timeouts, and structured audit logging.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 30
filesystem 6
- fs tumf-mcp-shell-server-b0404b1/src/mcp_shell_server/io_redirection_handler.py :143
file = open(path, "r") - fs (weak) tumf-mcp-shell-server-b0404b1/tests/test_directory_manager.py :33
with open(test_file, "w") as f: - fs (weak) tumf-mcp-shell-server-b0404b1/tests/test_project_metadata.py :4
from pathlib import Path - fs (weak) tumf-mcp-shell-server-b0404b1/tests/test_server.py :201
with open(test_file, "w") as f: - fs (weak) tumf-mcp-shell-server-b0404b1/tests/test_shell_executor.py :297
with open(test_file, "w") as f: - fs (weak) tumf-mcp-shell-server-b0404b1/tests/test_shell_executor_more_coverage.py :167
os.unlink(temp_file_path)
shell / exec 2
- shell (weak) tumf-mcp-shell-server-b0404b1/tests/test_process_manager_macos.py :4
import subprocess - shell (weak) tumf-mcp-shell-server-b0404b1/tests/test_shell_executor.py :4
import subprocess
secrets 1
- secrets (weak) tumf-mcp-shell-server-b0404b1/tests/test_process_manager.py :130
script = "import os; print(os.getenv('SECRET_TOKEN', ''))"
declared dependencies 12
- mcp@>=1.28.1,<2
- h11@>=0.16.0
- pytest@>=7.4.0
- pytest-asyncio@>=0.23.0
- pytest-env@>=1.1.0
- pytest-cov@>=6.0.0
- pytest-mock@>=3.12.0
- ruff@>=0.0.262
- black@>=23.3.0
- isort@>=5.12.0
- mypy@>=1.2.0
- pre-commit@>=3.2.2