Secure Ubuntu MCP Server

What it is

A hardened server for Ubuntu operations — file reads and writes, command execution and system info — with path allowlisting, command filtering and audit logging.

What you get

• read_file, write_file and list_directory with permission validation
• execute_command with a command whitelist and shell-injection-safe argument parsing
• get_system_info for OS details, memory and disk usage; search_packages for APT search and listing
• Path traversal protection with symlink resolution against allow and deny lists
• Resource limits on file size, execution time and output; all operations audit-logged
• Selectable policies — a secure default and a more permissive dev policy

Requirements

Ubuntu 18.04+ and Python 3.9 or higher. Clone, create a venv, install requirements, then launch main.py with a policy — the client passes --policy secure or --policy dev. The secure policy allows ~/, /tmp and /var/tmp, whitelists commands like ls, cat and grep, caps files at 1MB with 15s timeouts, and disables sudo and shell execution.

Setup effort

Build from source — git clone https://github.com/pazuzu1w/ubuntu_mcp_server

Tools you get

7 tools named in the project's documentation. install_package only checks package availability; it does not install. --policy secure allows nine commands, so execute_command refuses far more than under --policy dev.

Requires

• Python 3.9 or higher
• Standard Unix utilities (ls, cat, echo, etc.)

Where it runs

The documented client runs the server on your machine.