Quick answer: MCP Express is a hosted SSH MCP server for Claude — you connect your server once, define an allowlist of commands the AI can run, and manage production servers in plain English from any device. No Node.js, no local config files, no plaintext passwords sitting in a .ssh/config file. Setup takes about 5 minutes.
Server management has always been tethered to a desk. SSH into a box, remember the right flags, paste the command, hope you got the syntax right.
And when something breaks at 2 AM? You're either dragging yourself to a laptop or waiting until morning and hoping the alert resolves itself. Neither's great when it's a client's production environment.
An SSH MCP server changes that: it gives Claude a controlled bridge into your servers, so you can check status, pull logs, or restart a service from your phone — without opening a terminal.
What an SSH MCP server actually is
A Model Context Protocol (MCP) server for SSH gives an AI model like Claude a defined set of commands it's allowed to run against your remote servers, translating your plain-English request into the right shell command and back. Most implementations you'll find are self-hosted: you run a local MCP server (usually Node.js) that connects to Claude Desktop and executes whatever SSH command the AI sends.
MCP Express takes a different approach — it's a hosted SSH MCP server. Instead of running the bridge yourself, you connect your server through MCP Express, define exactly what commands are pre-approved, and expose that to Claude (or any MCP-compatible AI) without deploying or maintaining anything.
Prerequisites
Before you begin, ensure you have:
- Claude — Claude.ai (web) or Claude Desktop
- MCP Express account — Free tier, no credit card required
- SSH access to your server — IP/hostname, port, username, and either an SSH private key or password
Estimated time: 5 minutes from signup to first query.
Get Started in 5 Minutes
Step 1: Create an MCP Express account
Sign up at mcp-express.com and log in to the dashboard.
Step 2: Add your SSH server
In the dashboard, create a new server.
Give it a name and description.
Go to Tools > Add New Tools.
Select SSH Command Executor. You'll need to enter the credentials to connect to your SSH server. You can either enter them manually:
- Your server's IP address or hostname
- SSH port (default: 22)
- Username
- SSH private key or password
Or paste your SSH URL to auto-fill all settings.
Credentials are stored using AWS KMS encryption — the same standard used in banking infrastructure. Rotate your credentials, and nothing needs to be redeployed.
This is the critical step. Define what the AI is allowed to run. Every command is pre-approved — the AI can only execute what you explicitly allow, giving you full control over what happens on your server.
Start conservatively with read-only monitoring scripts:
# Example: read-only monitoring scripts
df -h
free -m
uptime
systemctl status nginx
systemctl status mysql
docker ps
cat /var/log/app/error.log | tail -100
If you need the AI to execute arbitrary commands based on your prompt rather than a fixed list, you can add {{query}} to the script field instead.
Use {{query}} with caution
Adding {{query}} removes the allowlist constraint entirely — the AI will execute commands based directly on your prompts, with no restrictions. This is an advanced option suitable only for trusted, controlled environments. For most setups, a fixed allowlist is the safer choice.
Step 4: Connect Claude to MCP Express
In Claude, go to Customize → Connectors and click Add new Connector. Give it a name and set the URL to:
https://api.mcp-express.com/gateway/mcp
Claude will redirect you to MCP Express to complete the OAuth flow. Log in, grant access, and select the MCP server you just configured.
For a detailed walkthrough, see our guide on connecting MCP servers to AI via OAuth.
Once connected, you can manage your servers from any device where you're signed into Claude — laptop, phone, or tablet. No terminal app needed.
Step 5: Start managing your server with natural language
Open a conversation with Claude and try:
- "Check the system health of my server."
- "Are there any errors in the application log from the past hour?"
- "What's the current disk usage?"
Claude uses the MCP Express SSH connection to fetch real-time answers from your server.
What you can actually ask Claude to do
Claude doesn't just execute commands — it interprets the output and tells you what it means.
- Diagnostics: "Check CPU, memory, and disk on the web server and tell me if anything looks concerning." Claude runs
top, free, and df, then flags anything unusual instead of dumping raw numbers at you. - Log analysis: "Look at the last 100 lines of the error log and summarize any patterns." You get a summary, not a wall of text.
- Service management: "Restart the app service and confirm it came back up cleanly." Claude sequences the restart and status check in one turn.
- Deployment: "Pull the latest code and restart the app server." Multi-step, handled in one request.
- Exploratory: "What processes are using the most memory right now?" No need to remember
ps aux --sort=-%mem | head -20.
Claude also confirms intent before anything that looks destructive — a real safeguard when you're working against a client's production box.
MCP-Powered SSH vs. Traditional SSH
| Traditional SSH | MCP-Powered SSH |
|---|
| Access method | Terminal client | Natural language via AI |
| Command syntax recall | Required | Describe intent — AI handles the syntax |
| Multi-step operations | Manual, sequential | AI sequences automatically |
| Output interpretation | You parse it | AI summarizes it |
| Setup per server | SSH config, key management | Once via MCP Express |
| Works on mobile | Rarely | Yes, via any Claude interface |
Traditional SSH isn't going anywhere — power users and complex automation will always benefit from direct shell access. But for the majority of day-to-day interactions — checking status, reviewing logs, running routine scripts — MCP-powered SSH significantly reduces the friction.
Frequently Asked Questions
- What is an SSH MCP server?
It's a Model Context Protocol server that lets an AI model like Claude run pre-approved shell commands against a remote server via SSH, translating plain-English requests into the right syntax.
- Can I SSH from my phone using Claude?
Yes. As long as you're signed into Claude on your phone, you can check and manage your servers with no terminal app required.
- Can Claude run destructive commands like
rm -rf?
Only if you explicitly add them to your allowlist. If a command isn't listed, Claude cannot run it — it isn't a matter of the AI declining; the command simply doesn't exist as an available tool.
- Is this safe from prompt injection?
The allowlist is the safeguard: even if a prompt injection attempt tried to get Claude to run something malicious, it can only execute commands you've pre-approved. Enabling {{query}} removes this protection, so it's meant for trusted, controlled environments only.
- Is my SSH key stored securely?
Yes — AWS KMS encryption at rest, never exposed in plain text.
Manage your servers without the desk
You've connected Claude to your server in about 5 minutes — check status, pull logs, restart services, all in plain English, from wherever you are.
[Get started free] — no credit card required, connect your first server today.
