Download Latest Version
v1.1.2 source code.zip (207.8 kB)
Get an email when there's a new version of MCP Shell Server
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| mcp_shell_server-1.0.4-py3-none-any.whl | 2026-06-16 | 24.6 kB | |
| mcp_shell_server-1.0.4.tar.gz | 2026-06-16 | 133.7 kB | |
| README.md | 2026-06-16 | 801 Bytes | |
| v1.0.4 source code.tar.gz | 2026-06-16 | 134.5 kB | |
| v1.0.4 source code.zip | 2026-06-16 | 191.9 kB | |
| Totals: 5 Items | 485.6 kB | 0 | |
Security release for MCP Shell Server.
Security
- Replaced shell-string subprocess execution with argv-based
create_subprocess_exec()for normal commands and pipelines. - Hardened
ALLOW_PATTERNSto use full command-name matching and reject unsafe shell metacharacter forms. - Rejected default exec-capable bypass vectors including shells/interpreters,
env,xargs,find -exec,awk system(),tar --checkpoint-action=exec, and git external aliases. - Enforced redirection containment under the validated working directory before file open side effects.
- Isolated child process environments from parent secrets unless variables are explicitly allowlisted.
- Added default/max timeout handling, output byte caps, and structured redacted audit logging.
PyPI: mcp-shell-server==1.0.4