Shell Drop

Working Security A

sh.shelldrop/shelldropv0.1.0 Domain verified

Read-only help with SSH, tmux and Tailscale setup for running AI agents from an iPhone or iPad.

Cloud & DevOps

Watch Source Website

Registry entry

Open in the registry

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-10T03:31:09.03088Z",
      "publishedAt": "2026-11-10T03:31:09.03088Z",
      "statusChangedAt": "2026-11-10T03:31:09.03088Z"
    }
  },
  "server": {
    "name": "sh.shelldrop/shelldrop",
    "icons": [
      {
        "src": "https://shelldrop.sh/apple-touch-icon.png",
        "sizes": [
          "180x180"
        ],
        "mimeType": "image/png"
      }
    ],
    "title": "Shell Drop",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "remotes": [
      {
        "url": "https://mcp.shelldrop.sh/mcp",
        "type": "streamable-http"
      }
    ],
    "version": "0.1.0",
    "repository": {
      "id": "1449841878",
      "url": "https://github.com/shelldrop-sh/agent-skills",
      "source": "github",
      "subfolder": "mcp-server"
    },
    "websiteUrl": "https://shelldrop.sh/mcp/",
    "description": "Read-only help with SSH, tmux and Tailscale setup for running AI agents from an iPhone or iPad."
  }
}

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://mcp.shelldrop.sh/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

generate_tmux_conf Read-only

Return a phone-friendly ~/.tmux.conf snippet (session-name titles, mouse scrolling, OSC 52 clipboard, long history, optional Ctrl-a prefix) plus how to apply it.

mouseboolean

Mouse and touch scrolling (default true)

prefixstring

Prefix key (default stock C-b)

set_titlesboolean

Publish the session name as the terminal title (default true)

history_limitinteger

Scrollback lines per pane, clamped to 2000-1000000 (default 50000)

set_clipboardboolean

OSC 52 clipboard to the phone (default true)

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM Studio Add to Goose

Run in a terminal

claude mcp add --transport http shelldrop https://mcp.shelldrop.sh/mcp

Tools (4)

generate_tmux_conf

Return a phone-friendly ~/.tmux.conf snippet (session-name titles, mouse scrolling, OSC 52 clipboard, long history, optional Ctrl-a prefix) plus how to apply it.

read-only

Argument	Type	Description
mouse	boolean	Mouse and touch scrolling (default true)
prefix	string	Prefix key (default stock C-b)
set_titles	boolean	Publish the session name as the terminal title (default true)
history_limit	integer	Scrollback lines per pane, clamped to 2000-1000000 (default 50000)
set_clipboard	boolean	OSC 52 clipboard to the phone (default true)

Input schema (JSON)

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "mouse": {
      "type": "boolean",
      "description": "Mouse and touch scrolling (default true)"
    },
    "prefix": {
      "enum": [
        "C-b",
        "C-a"
      ],
      "type": "string",
      "description": "Prefix key (default stock C-b)"
    },
    "set_titles": {
      "type": "boolean",
      "description": "Publish the session name as the terminal title (default true)"
    },
    "history_limit": {
      "type": "integer",
      "maximum": 9007199254740991,
      "minimum": -9007199254740991,
      "description": "Scrollback lines per pane, clamped to 2000-1000000 (default 50000)"
    },
    "set_clipboard": {
      "type": "boolean",
      "description": "OSC 52 clipboard to the phone (default true)"
    }
  }
}

setup_guide

Step-by-step guide to set up a macOS or Linux machine so AI agents can be run and checked from an iPhone or iPad: SSH, tmux, Tailscale, keep-awake, SSH key, verify.

read-only

Argument	Type	Description
os*	string	The machine's operating system

Input schema (JSON)

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "os"
  ],
  "properties": {
    "os": {
      "enum": [
        "macos",
        "linux"
      ],
      "type": "string",
      "description": "The machine's operating system"
    }
  }
}

tmux_howto

Exact tmux commands for common tasks from a phone: attach, detach, list, kill, scrollback, mouse, copy, rename, new session, windows and panes.

read-only

Argument	Type	Description
task*	string	What the user wants to do, e.g. "detach without killing the agent"

Input schema (JSON)

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "task"
  ],
  "properties": {
    "task": {
      "type": "string",
      "maxLength": 200,
      "minLength": 1,
      "description": "What the user wants to do, e.g. \"detach without killing the agent\""
    }
  }
}

troubleshoot_connection

Fixes for common phone-to-machine problems: connection timeout, connection refused, tmux "can't find session", copy from tmux not reaching the phone.

read-only

Argument	Type	Description
symptom*	string	What goes wrong, e.g. "connection refused" or "copy not working"

Input schema (JSON)

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "symptom"
  ],
  "properties": {
    "symptom": {
      "type": "string",
      "maxLength": 200,
      "minLength": 1,
      "description": "What goes wrong, e.g. \"connection refused\" or \"copy not working\""
    }
  }
}

Security checkA100/100

We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 10, 2026.

Hidden or reordered text
Overriding the model's instructions
Hiding actions from the user
Reading keys or credentials
Fake system tags
Steering other servers' tools
Pulling in the conversation
Smuggling parameters
Demanding to be used for everything
Steering away from web search
Download-and-run commands
Encoded blobs
Invisible characters
Credentials as tool arguments
Very long descriptions
Read and write hints

How the security check works