Shellquote Mcp

io.github.MukundaKattaPublished by GitHub account MukundaKattav0.1.0Updated Oct 24, 2026

Safe shell argument escaping for bash, cmd.exe, and PowerShell.

VerifiedSTDIODesktop onlyDeveloper Tools

Overview

AI-generated overview

A local MCP server that escapes shell arguments for bash, cmd.exe and PowerShell so assistant-generated commands survive quotes, spaces and variables.

What you can do
Escape a single argument for bash/sh/zsh, suppressing metacharacter expansion and variable interpolation, and escape a list of arguments joined with spaces for bash-style shells. Escape a single argument for Windows cmd.exe, with noted limits around delayed expansion. Escape a single argument as a single-quoted PowerShell string. Return strings the shell accepts verbatim, avoiding broken commands caused by quotes, spaces, backslashes and $VAR.
When to use it
Useful when an assistant drafts shell commands that embed user-supplied text, filenames with spaces, or literal dollar signs, and you want the arguments escaped correctly before running them. It is a small helper rather than a command executor.
Requirements
Runs as a local process over stdio, installed from the npm package @mukundakatta/shellquote-mcp, typically launched with npx, so Node.js and npm are needed. No authentication, environment variables or headers are declared. Desktop clients only.
Before you install
It only produces escaped strings; it does not run commands, so the assistant still decides what to execute. The README warns that cmd.exe has unfixable delayed-expansion corners, so cmd escaping is not fully reliable. Verify output before using it in destructive commands.

Installation

In SourceWeft

  1. Open Shellquote Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@mukundakatta/shellquote-mcp

MCP server for safe shell argument escaping. Stops LLM-generated shell commands from breaking (or worse) on quotes, spaces, $VAR interpolation, and backslashes.

Tools

  • quote_bash(arg) — single-quote escape for bash/sh/zsh. Suppresses all metacharacter expansion.
  • quote_bash_argv(args) — escape a list and join with spaces.
  • quote_cmd(arg) — Windows cmd.exe (caveat: cmd has unfixable delayed-expansion corners).
  • quote_powershell(arg) — single-quoted PS string.

Why this exists

LLMs constantly get shell escaping wrong:

  • bash -c "echo $HOME" interpolates the variable instead of passing it literal
  • cmd /c "del file.txt" breaks if the filename has spaces
  • Embedded single quotes in bash require the awkward '\'' dance the LLM forgets

This tool returns a string the shell will accept verbatim, with no metacharacter surprises.

Install — Claude Desktop

json
{  "mcpServers": {    "shellquote": { "command": "npx", "args": ["-y", "@mukundakatta/shellquote-mcp"] }  }}

Same shape for Cursor / Cline / Windsurf / Zed.

License

MIT OR Apache-2.0.

Source: packages/shellquote-mcp/README.md at commit 6fad5bb

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts