ssh_disconnect · SSH Linux Control MCP: Risk & Policy

WHAT IT DOES

What ssh_disconnect does on SSH Linux Control

AI agents call ssh_disconnect as a supporting operation in SSH Linux Control workflows.

WHY IT NEEDS A POLICY

Why ssh_disconnect needs a policy

Disconnecting an SSH session is a connection-management action with no data side effects. It does not read, write, delete, execute, or move money. The worst-case misuse is dropping an active session prematurely, which is a minor operational nuisance rather than a destructive or harmful action.

From the tool's definition 'Disconnect from the current SSH session' — terminates a network connection, no data is read, written, deleted, or executed

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

ssh_disconnect Rate-limited

ssh_disconnect gets a rate cap, and everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "ssh_disconnect": {
      "limits": [
        {
          "counter": "ssh_disconnect_rate",
          "window": "minute",
          "max": 60,
          "scope": "grant"
        }
      ]
    }
  }
}

SET A RULE FOR THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches SSH Linux Control, so you can run agents against it safely.

FAQ

Questions about ssh_disconnect

What does the ssh_disconnect tool do? +

Disconnect from the current SSH session. It is categorised as a Other tool in the SSH Linux Control MCP Server, which means it performs auxiliary operations.

How do I enforce a policy on ssh_disconnect? +

Register the SSH Linux Control MCP server in PolicyLayer and add a rule for ssh_disconnect: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches SSH Linux Control. Nothing to install.

What risk level is ssh_disconnect? +

ssh_disconnect is a Other tool with low risk. Read-only tools are generally safe to allow by default.

Can I rate-limit ssh_disconnect? +

Yes. Add a rate_limit block to the ssh_disconnect rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block ssh_disconnect completely? +

Set action: deny in the PolicyLayer policy for ssh_disconnect. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides ssh_disconnect? +

ssh_disconnect is provided by the SSH Linux Control MCP server (yutooop/mcp_linux_administration_ssh-openwebui_tool). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

// THE FULL RECORD

ssh_disconnect is one line of SSH Linux Control's registry record.

The record carries the whole server: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →