// SCAN REPORT

MCP SSH Orchestrator

13 tools. 6 can modify or destroy data without limits.

6 write tools that can modify data. Rate limits recommended.

Last updated: 11 Jun 2026

6 can modify or destroy data

7 read-only

13 tools total

Community server · catalogue entry verified 11/06/2026

How to control MCP SSH Orchestrator ↓

TOOL MAP

What MCP SSH Orchestrator exposes to your agents

Read (7) Write / Execute (6) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous MCP SSH Orchestrator tools

Execute · Medium ssh_cancel Cancelling a running task triggers an external operation that interrupts an in-progress SSH task. Execute · Medium ssh_cancel_async_task Cancelling a running task is an active operation that interrupts execution mid-flight. Execute · High ssh_run This tool executes arbitrary SSH commands on remote server fleets. Execute · High ssh_run_async This tool executes commands on remote infrastructure via SSH.

6 of MCP SSH Orchestrator's 13 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control MCP SSH Orchestrator

PolicyLayer is an MCP gateway — it sits between your AI agents and MCP SSH Orchestrator, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "ssh_describe_host": {
    "limits": [
      {
        "counter": "ssh_describe_host_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register MCP SSH Orchestrator — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON MCP SSH ORCHESTRATOR →

Free to start. No card required.

FULL CATALOGUE

All 13 MCP SSH Orchestrator tools

EXECUTE 6 tools

Execute ssh_cancel Request cancellation for a running task. Execute ssh_cancel_async_task Cancel a running async task. Execute ssh_run Execute SSH command with policy, network checks, progress, timeout, and cancellation. Execute ssh_run_async Start SSH command asynchronously (SEP-1686 compliant). Execute ssh_run_on_tag Execute SSH command on all hosts with a tag (with network checks). Execute ssh_reload_config Reload configuration files.

READ 7 tools

Read ssh_describe_host Return host definition in JSON. Read ssh_get_task_output Get recent output lines from running or completed task. Read ssh_get_task_result Get final result of completed task (SEP-1686 compliant). Read ssh_get_task_status Get current status of an async task (SEP-1686 compliant). Read ssh_list_hosts List configured hosts. Read ssh_ping Health check. Read ssh_plan Show what would be executed and if policy allows.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about MCP SSH Orchestrator

Is the MCP SSH Orchestrator MCP server safe to use without restrictions? +

The MCP SSH Orchestrator server is primarily read-only with 7 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the MCP SSH Orchestrator MCP server expose? +

13 tools across 4 categories: Destructive, Execute, Read, Write. 7 are read-only. 6 can modify, create, or delete data.

How do I enforce a policy on MCP SSH Orchestrator? +

Register the MCP SSH Orchestrator MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every MCP SSH Orchestrator tool call.

Deterministic rules across all 13 MCP SSH Orchestrator tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON MCP SSH ORCHESTRATOR →

Free to start. No card required.

13 MCP SSH Orchestrator tools catalogued and risk-classified — across an index of 43,000+ MCP servers.