confirm_command
Confirm dangerous command execution
Read a WSL distribution's state — system, environment, processes, disk, directories — and run commands in it, with dangerous ones held behind a separate confirmation call.
LABSCO SUMMARY
The read tools cover exactly what you would look at before running anything — system information, environment, processes, disk usage, directory contents — and execute_command's own description points the caller at them first. Dangerous execution routes through confirm_command with a confirmation_id and an explicit confirm, so a badly worded single call does not reach the shell. What does run, runs with whatever the WSL session already has; the gate governs the second call, not the permissions.
A WSL command surface with the inspection tools on one side, execute_command on the other, and a confirmation step in between for anything dangerous.
A WSL distribution on the host for the tools to read and run inside. Nothing is configured — no account, no key.
One command — npx -y mcp-wsl-exec
USE CASES
Pull the system information, read the environment the commands would inherit, and see what is already running.
Check the space on the path that matters, then walk the directory with details on to find what grew.
Issue the command with its working directory and timeout; when it comes back flagged as dangerous, confirm it by id rather than by rephrasing.
Counted once with only startup setup. Other versions, modes or optional credentials may expose a different list.
confirm_commandConfirm dangerous command execution
execute_commandExecute a command in WSL (use read-only tools when possible)
get_directory_infoGet directory contents and info
get_disk_usageGet disk space information
get_environmentGet WSL environment variables
get_system_infoGet WSL system information
list_processesList running processes in WSL
BEFORE YOU INSTALL
7 tools when we connected.
npx on PATH
CONTEXT COST
Rated by the size of the 7 tool definitions that ride along on every turn, not by how many there are
INSTALLATION
Add the block to your client, or run the command directly.
{
"mcpServers": {
"mcp-wsl-exec": {
"command": "npx",
"args": [
"-y",
"mcp-wsl-exec"
]
}
}
}npx -y mcp-wsl-exec