mcp-ssh-manager

What changed

Changed 2026-10-08 13:21 UTC

1 description rewritten.

--- pinned/ssh_db_query
+++ observed/ssh_db_query
  {
-   "description": "Runs a read-only query against a remote database. For mysql and postgresql it is strictly limited to SELECT: the query must begin with SELECT and any insert, update, delete, drop, create, alter, truncate, grant, revoke, or exec keyword is rejected before execution. For mongodb it runs a find() and requires the collection parameter. Returns the raw command output as text.",
+   "description": "Runs a read-only query against a remote database. For mysql and postgresql it is strictly limited to one SELECT statement: the query must begin with SELECT, and INTO, file functions, and any insert, update, delete, drop, create, alter, truncate, grant, revoke, or exec keyword are rejected before execution; it then runs inside a read-only transaction, so the database itself refuses any write. For mongodb it runs a find() and requires the collection parameter; the query must be a filter document (JSON or mongo shell syntax such as ObjectId(\"…\")), and $where, $function and $accumulator are refused. Returns the raw command output as text.",
    "execution": {
      "taskSupport": "forbidden"
    },

Current tools

Watch this server yourself

If you run this server, put the proxy in front of it. It pins these exact fingerprints on first connect and stops the session if they move.

npx -y mcp-pin@0.2.3 -- <your mcp-ssh-manager command>

Or subscribe to this page's RSS feed to be told when it changes.

Badge

The badge states one fact about time and nothing else. It never claims a server is safe.

[![mcp-pin](https://mcp-pin.gautamkhosla.com/badge/1b00fa493e45d281.svg)](https://mcp-pin.gautamkhosla.com/servers/1b00fa493e45d281.html)