interactive-process-mcp

mcp
Security Audit
Warn
Health Warn
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 5 GitHub stars
Code Pass
  • Code scan — Scanned 1 files during light audit, no dangerous patterns found
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose

This MCP server gives AI agents the ability to launch, control, and interact with long-running terminal processes (such as SSH sessions, REPLs, and interactive CLI tools) across multiple conversational turns.

Security Assessment

Risk Rating: High. By design, this tool explicitly executes shell commands and interactive processes on the host machine. It also features built-in network capabilities, allowing remote deployment over HTTP/SSE so that the agent and the server can run on entirely different machines. While the automated code scan found no hardcoded secrets or explicitly dangerous code patterns, the core functionality of delegating interactive shell control to an AI agent naturally introduces severe risks. It must be heavily restricted to trusted, isolated environments.

Quality Assessment

The codebase is released under the permissive MIT license and appears to be actively maintained, with repository activity logged as recently as today. However, community adoption and visibility are currently very low, with only 5 stars on GitHub. Because of this, the project has not undergone broad peer review or extensive real-world testing.

Verdict

Use with caution — only deploy this in highly isolated environments (like sandboxed containers) due to the inherent risks of granting an AI agent interactive shell and remote network access.
SUMMARY

Give AI Agents Interactive Terminal Capabilities

README.md

interactive-process-mcp

Give AI Agents Interactive Terminal Capabilities

Go 1.21+ macOS / Linux MCP SSE MIT License

linux.do 中文

中文 | English


Introduction

interactive-process-mcp is an MCP (Model Context Protocol) server that enables AI Agents (like Claude Code) to start, control, and manage long-running interactive processes.

Why Do You Need It?

AI Agents can natively only execute one-shot commands — they run and immediately return results. But many real-world scenarios require multi-turn interaction:

  • SSH into a remote server, enter a password first, then run commands
  • Debug code line by line in a Python REPL
  • Answer [Y/n] prompts in interactive installers
  • Use terminal-dependent commands like top, htop
  • Run security tools (e.g., impacket) for multi-step operations

In these scenarios, the process keeps running, and the AI Agent needs to repeatedly read and write the process's I/O across multiple conversation turns. interactive-process-mcp is the bridge designed precisely for this purpose.

Key Features

Feature Description
Multi-agent session sharing Multiple AI agents read from the same session simultaneously, each with an independent cursor — no output stealing
PTY and Pipe dual mode PTY mode emulates a real terminal; Pipe mode for simple stdin/stdout interaction
Remote deployment SSE over HTTP transport — Agent and Server can run on different machines
Multi-session management Manage multiple independent processes simultaneously without interference
Message persistence Session records and I/O messages persisted to local JSON files
ANSI escape code stripping Optional automatic removal of terminal control sequences for clean text output
Blocking reads with timeout Agents wait for new output up to a configurable timeout; returns promptly via sync.Cond
Atomic send-and-read send_and_read combines sending + reading in one step
Graceful termination SIGTERM first, then SIGKILL after a configurable grace period
PTY resize Dynamically adjust terminal rows and columns at runtime
Session cleanup Delete exited sessions to prevent resource accumulation

Architecture

┌──────┐  SSE/HTTP  ┌──────────────┐  Internal SSH  ┌──────────┐
│Agent │ ──────────> │ Go Server    │ ──────────────> │ PTY/     │
│(MCP) │             │ - MCP API    │  (localhost)    │ Process  │
└──────┘             │ - SSH Server │                 └──────────┘
                     └──────────────┘
                            │
                            ▼
                     ┌──────────────┐
                     │ JSON Storage │
                     │ - sessions   │
                     │ - messages   │
                     └──────────────┘

Project Structure

.
├── cmd/server/main.go           # Entry point
├── internal/
│   ├── config/config.go         # Configuration with validation
│   ├── mcp/
│   │   ├── server.go            # MCP SSE server & tool registration
│   │   └── handlers.go          # 13 tool handlers
│   ├── sshserver/server.go      # Internal SSH server (gliderlabs/ssh)
│   ├── sshclient/client.go      # Internal SSH client (crypto/ssh)
│   ├── session/
│   │   ├── session.go           # Session lifecycle (goroutine-safe)
│   │   └── manager.go           # Thread-safe session registry
│   ├── buffer/buffer.go         # Multi-reader ring buffer (1MB per reader)
│   ├── storage/store.go         # Atomic JSON file persistence
│   ├── message/message.go       # Message management (per-session mutex)
│   └── ansi/strip.go            # ANSI escape code removal
├── pkg/api/types.go             # Public types (Session, Message, SessionMode)
├── go.mod
└── go.sum

Key Design Decisions

  1. Multi-Reader Ring Buffer: Each agent registers as an independent reader with its own ringbuffer.RingBuffer instance. Writes broadcast to all readers. Slow readers lose oldest data (overwrite mode) rather than blocking the writer.

  2. Internal SSH Architecture: The server starts a gliderlabs/SSH server on localhost. Each start_process creates an SSH session via crypto/ssh client, leveraging SSH's mature PTY allocation, window resize, signal forwarding, and environment variable passing.

  3. SSE over HTTP Transport: Unlike traditional stdio-based MCP servers, this server exposes an HTTP endpoint supporting MCP SSE transport. Agents connect remotely, enabling cross-machine deployment.

  4. Atomic JSON Persistence: Session metadata and I/O messages are stored via temp-file + fsync + rename, preventing half-written files on crash:

    • data/sessions.json — Session list
    • data/messages/{session_id}/index.json — Message index
    • data/messages/{session_id}/messages/{msg_id}.json — Message content
  5. Session Lifecycle Safety: Exit goroutine is the single authority for Status/ExitCode (via sync.Once). Terminate is idempotent. Stdin writes are serialized via a dedicated mutex.


Examples

Example 1: SSH Remote Operations

AI Agent Flow                                   Process Output
─────────────────                              ────────────────

start_process(
  command="ssh",
  args=["[email protected]"],
  mode="pty"
)
                                    ←    "[email protected]'s password: "

send_and_read(
  text="my_secret_pass",
  press_enter=true
)
                                    ←    "Welcome to Ubuntu 22.04 LTS
                                          deploy@web-server:~$ "

send_and_read(
  text="df -h",
  press_enter=true
)
                                    ←    "Filesystem      Size  Used Avail Use% Mounted on
                                          /dev/sda1       100G   45G   55G  45% /
                                          deploy@web-server:~$ "

terminate_process(session_id="abc123")

Example 2: Python REPL Debugging

start_process(command="python3", mode="pty")
                                    ←    "Python 3.10.12\n>>> "

send_and_read(text="data = [1, 2, 3, 4, 5]", press_enter=true)
                                    ←    ">>> "

send_and_read(text="sum(data)", press_enter=true)
                                    ←    "15\n>>> "

Example 3: Multi-Agent Collaboration

# Agent A starts a monitoring process
start_process(command="top", mode="pty")
  → session_id: "sess-001"

# Agent B joins the same session without stealing output
register_reader(session_id="sess-001")
  → reader_id: 2

# Agent A reads its own cursor
read_output(session_id="sess-001", reader_id=1)
  → "PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEM   TIME+ COMMAND..."

# Agent B reads from the beginning independently
read_output(session_id="sess-001", reader_id=2)
  → "top - 14:32:10 up 3 days,  2:15,  1 user,  load average: 0.52, 0.58, 0.59..."

# Agent B is done
unregister_reader(session_id="sess-001", reader_id=2)

# Agent A terminates the session
terminate_process(session_id="sess-001")
delete_session(session_id="sess-001")

Example 4: Multi-session Parallel Management

start_process(command="ping", args=["-c", "5", "google.com"], name="ping-test")
  → session_id: "a1b2c3"

start_process(command="python3", args=["-m", "http.server", "8080"], name="web-server")
  → session_id: "d4e5f6"

list_sessions()
  → [{id: "a1b2c3", status: "running"}, {id: "d4e5f6", status: "running"}]

read_output(session_id="a1b2c3")  → ping statistics

terminate_process(session_id="a1b2c3")
terminate_process(session_id="d4e5f6")

Tool Reference

start_process

Start an interactive process.

Parameter Type Required Default Description
command string Yes Command to execute
args string[] No [] Command arguments
mode "pty" | "pipe" No "pty" I/O mode
name string No Auto-generated Session name
rows integer No 24 PTY row count (1–1000)
cols integer No 80 PTY column count (1–1000)

Returns: { session_id, pid, initial_output }

send_input

Send text to a process.

Parameter Type Required Default Description
session_id string Yes Session ID
text string Yes Text to send
press_enter boolean No false Whether to append a newline

read_output

Read new output since the last read for the given reader.

Parameter Type Required Default Description
session_id string Yes Session ID
reader_id integer No 0 Reader ID (0 = default)
strip_ansi boolean No true Strip ANSI escape codes
timeout number No 5 Wait time in seconds (0.1–60)
max_lines integer No 0 Max lines (0 = unlimited)

Returns: { output, has_more, lines_returned, bytes_returned }

send_and_read

Atomic operation: send input + wait + read output. Parameters are the union of send_input and read_output.

list_sessions

List all sessions. Returns: { sessions: [...] }

get_session_info

Get session details. Returns: { id, name, command, args, mode, status, exit_code, pid, created_at }

terminate_process

Terminate a process.

Parameter Type Required Default Description
session_id string Yes Session ID
force boolean No false Use SIGKILL directly
grace_period number No 5 Seconds to wait after SIGTERM (0–60)

delete_session

Remove an exited session from the registry.

Parameter Type Required Default Description
session_id string Yes Session ID

resize_pty

Resize PTY dimensions (PTY mode only).

Parameter Type Required Default Description
session_id string Yes Session ID
rows integer No 24 Row count
cols integer No 80 Column count

register_reader

Register a new independent reader for a session.

Parameter Type Required Default Description
session_id string Yes Session ID

Returns: { reader_id }

unregister_reader

Unregister a reader to free resources.

Parameter Type Required Default Description
session_id string Yes Session ID
reader_id integer Yes Reader ID

list_messages

List the message index for a session.

Parameter Type Required Default Description
session_id string Yes Session ID

Returns: { messages: [{id, type, created_at, byte_size}, ...] }

get_message

Get the content of one or more messages.

Parameter Type Required Default Description
session_id string Yes Session ID
message_ids string[] No Message IDs to retrieve

Returns: { messages: [{id, session_id, type, content, created_at, byte_size}, ...] }


Installation

Build from source

go build -o server ./cmd/server

Requirements: Go >= 1.21 / macOS or Linux

Run

./server --host 127.0.0.1 --port 8080 --data-dir ./data

Options:

Flag Default Description
--host 127.0.0.1 HTTP server host
--port 8080 HTTP server port
--data-dir ./data JSON storage directory
--ssh-host 127.0.0.1 Internal SSH server host
--ssh-port 0 (random) Internal SSH server port

Configuration

Claude Code

In .claude/settings.json or .mcp.json:

{
  "mcpServers": {
    "interactive-process": {
      "type": "sse",
      "url": "http://your-server:8080/sse"
    }
  }
}

Or via CLI:

claude mcp add --transport sse interactive-process http://localhost:8080/sse

Other MCP Clients

Any MCP client that supports SSE transport can connect to http://<host>:<port>/sse.


Community


License

MIT

Reviews (0)

No results found