ShellGuard FAQs

Question 1

What is ShellGuard?

Accepted Answer

ShellGuard is an MCP server that grants LLM agents secure, read-only bash access to remote servers via SSH, enabling AI-driven diagnostics and troubleshooting without direct human intervention.

Question 2

How does ShellGuard ensure secure remote access for LLMs?

Accepted Answer

It enforces strictly read-only access, restricts commands to a curated allowlist, blocks destructive operations, and provides LLMs with actionable suggestions for self-correction on invalid commands.

Question 3

What kind of tasks can LLM agents perform using ShellGuard?

Accepted Answer

LLM agents can perform tasks such as running diagnostics, inspecting logs, querying databases, and troubleshooting issues across production, staging, or development servers, all in a hands-free manner.

Question 4

Is ShellGuard compatible with existing SSH configurations?

Accepted Answer

Yes, it supports flexible SSH configurations including native and system modes. This allows for full `~/.ssh/config` support, including `ProxyJump` and host key verification, adapting to various infrastructure needs.

Question 5

Does ShellGuard help if diagnostic tools are missing on remote servers?

Accepted Answer

Yes, ShellGuard automates the provisioning of essential diagnostic tools like `rg` (ripgrep), `jq`, and `yq` on remote hosts, ensuring LLM agents have the necessary utilities for effective analysis.

ShellGuard

ShellGuard

Key Features

Use Cases

Key Features

Use Cases