Shell Access

Scoped shell access MCP server with allowlist-based command control and TOML-configured safety rules.

Shell Access is a Rust-based MCP server that provides controlled shell execution for AI clients, enforcing an allowlist-driven safety model. Commands are permitted only through explicit TOML configuration files that walk up the directory tree, similar to git. It exposes two tools: one for describing the current allowlist and environment, and one for executing approved shell commands. The server rejects shell metacharacters and maintains a hard denylist of dangerous operations like sudo.