claude-ssh-daemon

A lightweight Go daemon that acts as a secure local intermediary for SSH connections. It exposes a Model Context Protocol server over a Unix socket, so an agent can run remote commands, read and write files, and use other SSH capabilities through a session it never owns.

The design decision that matters is where authentication lives: the human establishes and maintains the SSH ControlMaster session, and the daemon only borrows it. The agent never holds a credential, and closing the master connection revokes every capability at once — one obvious place to pull the plug.