MCP Bash

@patrickomatik

About MCP Bash

A simple model context protocol (MCP) server that allows Claude Desktop or other MCP aware clients to run Bash commands on your local machine.

#mcp-bash #bash-server #mcp-client

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-bash": {
      "command": "python",
      "args": [
        "-m",
        "venv",
        ".venv"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is MCP Bash?

MCP Bash is a Model-Context-Protocol server that allows client applications to execute arbitrary bash commands and receive stdout/stderr output. It wraps command execution in a controlled environment, supports setting and maintaining a working directory across invocations, and is designed for use with AI assistants like Claude Desktop to automate code testing and file operations.

How to use MCP Bash?

Install Python 3.10+, clone the repository, create a virtual environment, and install with pip install -e .. Start the server with python -m mcp.cli.server --module server. For Claude Desktop, add the provided JSON configuration to claude_desktop_config.json. Use the set_cwd(path) and execute_bash(cmd) functions via the MCP client API.

Key features of MCP Bash

Execute arbitrary bash commands
Set and maintain a working directory across command executions
Clean interface through the Model-Context-Protocol
Simple to deploy and extend

Use cases of MCP Bash

Run tests, assess results, and fix code issues in one pass with Claude Desktop
List files or perform file system operations from an AI assistant
Automate system administration tasks via a controlled MCP interface
Integrate bash command execution into custom MCP client applications

FAQ from MCP Bash

What can MCP Bash do?

It executes bash commands and returns both stdout and stderr. You can also change the working directory so subsequent commands run in the same context.

What are the security risks?

The server executes bash commands directly, which can be dangerous (e.g., rm -rf /). The README recommends running in a container or restricted environment, adding command validation, or limiting filesystem access.

What are the runtime requirements?

Python 3.10 or higher and pip. For Claude Desktop, the uv package manager is used in the provided configuration.

How do I configure MCP Bash for Claude Desktop?

Add the JSON snippet from the README to your Claude Desktop configuration file (claude_desktop_config.json), replacing paths with your own. Then ask Claude: "List the files in my current directory using the Bash MCP tool."

Are there any built-in command restrictions?

No. The server has no built-in allowlist or validation; it executes any bash command as given. All security measures must be implemented externally.

Frequently asked questions

What can MCP Bash do?

It executes bash commands and returns both stdout and stderr. You can also change the working directory so subsequent commands run in the same context.

What are the security risks?

The server executes bash commands directly, which can be dangerous (e.g., `rm -rf /`). The README recommends running in a container or restricted environment, adding command validation, or limiting filesystem access.

What are the runtime requirements?

Python 3.10 or higher and pip. For Claude Desktop, the `uv` package manager is used in the provided configuration.

How do I configure MCP Bash for Claude Desktop?

Add the JSON snippet from the README to your Claude Desktop configuration file (`claude_desktop_config.json`), replacing paths with your own. Then ask Claude: "List the files in my current directory using the Bash MCP tool."

Are there any built-in command restrictions?

No. The server has no built-in allowlist or validation; it executes any bash command as given. All security measures must be implemented externally.

Comments

Basic information

More Developer Tools MCP servers

Skycloak

Manage your Skycloak-hosted Keycloak: clusters, realms, apps, SSO and users, from any MCP client.

LocalCan

Gives AI agents public URLs (tunnels) for localhost, live HTTP traffic inspection, snapshot publishing, and access control. Part of LocalCan, the ngrok alternative for Mac, Windows and Linux. Free plan.

extentos

Asger mølgaard

Extentos is a multi-vendor development platform for adding smart-glasses capabilities to existing iOS and Android apps. The simplest analogy is Stripe for smart glasses:

CircleCI MCP Server

CircleCI

Manage CI/CD pipelines, debug failed builds, and optimize test suites directly from your AI agents - no terminal required. The CircleCI MCP Server is a remote server hosted by CircleCI that connects AI tools and agents

directree

coburn2716

directree MCP server — query the honest software directory from any AI assistant