bash-vet-mcp

MCP server that vets LLM-emitted shell commands BEFORE execution — detects rm -rf in chains, package-glob removal, dd/mkfs, chmod 777, curl|bash, chained shutdown, git destructive ops. 24 rules / 8 families / sub-second / no API key. Defensive complement to MCPShell/mcp-shell/mcp-bash.

{
  "mcpServers": {
    "bash-vet-mcp": {
      "command": "uvx",
      "args": [
        "bash-vet-mcp"
      ]
    }
  }
}

claude mcp add bash-vet-mcp uvx bash-vet-mcp

{
  "mcpServers": {
    "bash-vet-mcp": {
      "command": "uvx",
      "args": [
        "bash-vet-mcp"
      ]
    }
  }
}