{"id":"ssh-mcp-server-copilot","name":"ssh-mcp-server-copilot","af_score":53.3,"security_score":77.2,"reliability_score":26.2,"what_it_does":"Provides an MCP server (stdio transport) that lets VS Code Copilot Chat manage remote Linux hosts over SSH using natural-language queries mapped to a fixed set of template-based, policy-scoped tools (read-only, controlled mutation, and privileged operations requiring approval).","best_when":"When you want an LLM/agent workflow to operate remote servers under strict guardrails (no raw shell, parameter validation, path policies, and auditable/approvable privileged actions).","avoid_when":"When you cannot restrict templates and roles appropriately, or when operational procedures for approvals and audit review are not feasible.","last_evaluated":"2026-04-04T21:43:49.725765+00:00","has_mcp":true,"has_api":false,"auth_methods":["SSH key/ssh-agent usage for SSH connectivity","Optional bearer token via SSH_MCP_AUTH_TOKEN (not clearly production-grade in docs)","Two-party approval workflow for Tier 2 (request/approve/consume approval tokens)"],"has_free_tier":false,"known_gotchas":["MCP tools only work when Copilot Chat is switched to \"Agent\" mode (explicitly called out).","Long-running work uses background jobs and polling/cancellation; agents may need guidance to choose sync vs background tools.","Approval tokens appear one-time/consumed; agents must not retry Tier 2 tool calls without re-issuing approval if token is expired/consumed.","Template-only execution means agents must select/fit requests to existing templates/regex constraints; otherwise operations may fail due to validation/path policy restrictions."],"error_quality":0.0}