# cli-mcp-server

> A command line MCP Server offering secure execution and customizable security policies. Directly relevant to MCP server implementations for command line environments.

- **URL:** https://github.com/MladenSU/cli-mcp-server
- **Category:** Code Execution Automation MCP Servers
- **Tags:** Mcp, Cli, Code Execution, Security
- **Updated:** 2025-05-14 00:34
- **Canonical page:** https://mcpserver.ever.works/nl/items/cli-mcp-server

## Details

# cli-mcp-server

**Source:** [GitHub - MladenSU/cli-mcp-server](https://github.com/MladenSU/cli-mcp-server)

A secure Model Context Protocol (MCP) server for executing controlled command-line operations, with comprehensive security features for CLI environments.

---

## Features
- **Secure Command Execution**: Executes commands with strict validation.
- **Command and Flag Whitelisting**: Supports configurable whitelists for commands and flags, with an 'all' option to allow any.
- **Path Traversal Prevention**: Validates and normalizes paths to prevent unauthorized access.
- **Shell Operator Protection**: Blocks shell operators (e.g., `&&`, `|`, `>`, `>>`).
- **Execution Timeouts and Length Limits**: Enforces maximum command string length and execution timeouts.
- **Detailed Error Reporting**: Provides comprehensive error messages for security violations and failures.
- **Async Operation Support**: Supports asynchronous command execution.
- **Working Directory Restriction**: Restricts execution to a specified directory, including symlink validation.
- **Environment-based Configuration**:
    - `ALLOWED_DIR`: Required base directory for execution.
    - `ALLOWED_COMMANDS`: Comma-separated allowed commands or 'all'.
    - `ALLOWED_FLAGS`: Comma-separated allowed flags or 'all'.
    - `MAX_COMMAND_LENGTH`: Maximum command length (default 1024).
    - `COMMAND_TIMEOUT`: Timeout in seconds (default 30).
- **Available Tools**:
    - `run_command`: Executes whitelisted commands within allowed directories.
    - `show_security_rules`: Displays current security settings and restrictions.
- **Error Handling**:
    - Detailed errors for security violations, timeouts, invalid formats, path issues, and execution failures.
- **Development Features**:
    - Python 3.10+ support.
    - Easy build and publish commands.
    - Integrated debugging with MCP Inspector.
- **MIT License**

---

## Pricing
- No pricing information provided. The project is open-source and available under the MIT license.

---

## Tags
`mcp` `cli` `code-execution` `security`

---

_This Markdown mirror is generated by Ever Works for AI agents. The canonical HTML page is at https://mcpserver.ever.works/nl/items/cli-mcp-server._