sonirico/mcp-shell

Implements a dual-security model: secure mode enforces an executable allowlist without shell interpretation to prevent injection, while legacy mode allows full shell execution with command-pattern filtering. Built as a Go-based MCP server using mark3labs/mcp-go, it integrates directly with Claude Desktop via stdio transport and supports granular controls like argument pattern blocking, execution timeouts, output size limits, and audit logging. Deployable via Docker, source, or as a standalone binary with configurable security policies through YAML.