Shell Terminal

Capabilities

• • Run one command with arguments and capture the output
• • Transfer files to and from the host over SFTP
• • Start and stop background jobs listed in the configuration
• • Manage a git repository: clone, branch, pull, commit, push
• • Apply environment variables from the secret vault
• • Check the command against the allowlist before it runs

Constraints

• • Only allowlist commands run without a pause.
• • Stop on any command outside the allowlist and ask the user.
• • Never include a secret value in output or logs. Report the vault key name.
• • Use the host granted to the session. No others.

MCP schema

{
  "name": "shell_terminal",
  "input": {
    "type": "object",
    "required": [
      "command"
    ],
    "properties": {
      "cwd": {
        "type": "string"
      },
      "host": {
        "type": "string"
      },
      "command": {
        "type": "string"
      },
      "vault_keys": {
        "type": "array",
        "items": {
          "type": "string"
        }
      },
      "timeout_seconds": {
        "type": "integer"
      }
    }
  },
  "output": {
    "type": "object",
    "properties": {
      "host": {
        "type": "string"
      },
      "stderr": {
        "type": "string"
      },
      "stdout": {
        "type": "string"
      },
      "exit_code": {
        "type": "integer"
      },
      "duration_ms": {
        "type": "integer"
      }
    }
  },
  "description": "Executes a restricted command on an approved host with a full run report."
}