AI Ops MCP v0.1.0
Initial open source release of AI Ops MCP, a local SSH credential broker and stdio MCP server.
Highlights
- SSH Agent, system credential store password, and encrypted private-key authentication
- Trusted SSH Host key enrollment and mismatch rejection
- Six MCP tools for server discovery, connection tests, commands, transfers, and directory listings
- Local and remote path boundaries, timeouts, output/file limits, connection reuse, and concurrency controls
- Structured audit logging and stable public error codes
- English and Simplified Chinese documentation
- Cross-platform CI for Windows, Ubuntu, and macOS on Node.js 22 and 24
- CodeQL, Dependabot, Secret scanning, Push protection, and private vulnerability reporting
Validation
Windows with Node.js 24 has completed live SSH and system credential store validation. The release candidate passed all six CI matrix jobs, CodeQL with no open alerts, npm audit --audit-level=low with zero vulnerabilities, and npm pack --dry-run.
macOS Keychain and Linux Secret Service support are implemented but still need broader community validation on real machines. Please report platform-specific behavior through GitHub Issues, with all credentials and server details removed.
Distribution
This release is distributed as source code only. It is not published to npm and includes no additional binary artifacts.
AI Ops MCP isolates SSH authentication credentials but does not classify or block remote commands. Use dedicated, least-privilege SSH accounts and server-side authorization controls.