mcp-remote-ssh 0.1.0__tar.gz

mcp_remote_ssh-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Mohammadfaiz Bawa
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

mcp_remote_ssh-0.1.0/PKG-INFO

@@ -0,0 +1,209 @@
+Metadata-Version: 2.4
+Name: mcp-remote-ssh
+Version: 0.1.0
+Summary: MCP server for remote SSH operations -- persistent sessions, structured command execution, SFTP file transfer, and port forwarding for AI agents.
+Author: Mohammadfaiz Bawa
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/faizbawa/mcp-remote-ssh
+Project-URL: Repository, https://github.com/faizbawa/mcp-remote-ssh
+Project-URL: Issues, https://github.com/faizbawa/mcp-remote-ssh/issues
+Project-URL: Changelog, https://github.com/faizbawa/mcp-remote-ssh/blob/main/CHANGELOG.md
+Keywords: mcp,ssh,remote,sftp,paramiko,ai,model-context-protocol,cursor,claude
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: System Administrators
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: System :: Networking
+Classifier: Topic :: System :: Systems Administration
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: fastmcp<4,>=3.0
+Requires-Dist: paramiko>=3.4
+Requires-Dist: click>=8.0
+Requires-Dist: loguru>=0.7
+Dynamic: license-file
+
+# mcp-remote-ssh
+
+MCP server for remote SSH operations. Gives AI agents persistent SSH sessions, structured command output, SFTP file transfer, and SSH port forwarding -- with native password and key-based authentication.
+
+## Why this exists
+
+Existing SSH MCP servers each solve part of the problem but none combine all of:
+
+- **Password + key auth** -- connect to any host, whether it uses passwords, SSH keys, or an agent
+- **Dual execution model** -- one-shot `exec_command()` with real exit codes *and* persistent interactive shells for long-running workflows
+- **SFTP** -- read, write, upload, download files properly instead of piping through a PTY
+- **Port forwarding** -- SSH tunnels for accessing remote services (databases, web UIs, VNC, etc.)
+- **Structured output** -- `stdout`, `stderr`, and `exit_code` as separate fields, not screen scrapes
+
+## Installation
+
+```bash
+# Via uv (recommended)
+uv tool install mcp-remote-ssh
+
+# Via pip
+pip install mcp-remote-ssh
+
+# From source
+git clone https://github.com/faizbawa/mcp-remote-ssh.git
+cd mcp-remote-ssh
+uv sync
+```
+
+## Configuration
+
+### Cursor / Claude Desktop
+
+Add to your MCP client configuration:
+
+```json
+{
+  "mcpServers": {
+    "remote-ssh": {
+      "command": "uvx",
+      "args": ["mcp-remote-ssh"]
+    }
+  }
+}
+```
+
+Or if running from source:
+
+```json
+{
+  "mcpServers": {
+    "remote-ssh": {
+      "command": "uv",
+      "args": ["run", "--directory", "/path/to/mcp-remote-ssh", "mcp-remote-ssh"]
+    }
+  }
+}
+```
+
+## Tools (18 total)
+
+### Connection management
+
+| Tool | Description |
+|---|---|
+| `ssh_connect` | Connect to a host (password, key, or agent auth). Returns `session_id`. |
+| `ssh_list_sessions` | List all active sessions with status |
+| `ssh_close_session` | Close a session and release all resources |
+
+### Structured execution (one-shot, clean output)
+
+| Tool | Description |
+|---|---|
+| `ssh_execute` | Run a command, returns `{stdout, stderr, exit_code}` |
+| `ssh_sudo_execute` | Run a command with sudo elevation |
+
+### Interactive shell (persistent state)
+
+| Tool | Description |
+|---|---|
+| `ssh_shell_open` | Open a persistent interactive shell (`invoke_shell`) |
+| `ssh_shell_send` | Send text to the shell (with optional Enter) |
+| `ssh_shell_read` | Read current shell buffer (poll for output) |
+| `ssh_shell_send_control` | Send Ctrl+C, Ctrl+D, etc. |
+| `ssh_shell_wait` | Wait for a pattern or output to stabilize |
+
+### File transfer (SFTP)
+
+| Tool | Description |
+|---|---|
+| `ssh_upload_file` | Upload a local file to the remote host |
+| `ssh_download_file` | Download a remote file to local machine |
+| `ssh_read_remote_file` | Read a text file on the remote host |
+| `ssh_write_remote_file` | Write text to a remote file (create or append) |
+| `ssh_list_remote_dir` | List directory contents with metadata |
+
+### Port forwarding
+
+| Tool | Description |
+|---|---|
+| `ssh_forward_port` | Create an SSH tunnel (local port -> remote port) |
+| `ssh_list_forwards` | List active port forwards for a session |
+| `ssh_close_forward` | Close a specific port forward |
+
+## Quick start
+
+```text
+# Connect with password
+ssh_connect(host="myserver.example.com", username="admin", password="secret")
+→ {"session_id": "a1b2c3d4", "connected": true, ...}
+
+# Run a structured command
+ssh_execute(session_id="a1b2c3d4", command="df -h /")
+→ {"stdout": "Filesystem  Size  Used ...", "stderr": "", "exit_code": 0}
+
+# Open a persistent shell for interactive work
+ssh_shell_open(session_id="a1b2c3d4")
+ssh_shell_send(session_id="a1b2c3d4", data="cd /opt && make -j$(nproc)")
+ssh_shell_wait(session_id="a1b2c3d4", pattern="$ ", timeout=600)
+
+# Transfer files via SFTP
+ssh_upload_file(session_id="a1b2c3d4", local_path="config.yaml", remote_path="/etc/app/config.yaml")
+ssh_read_remote_file(session_id="a1b2c3d4", remote_path="/var/log/app.log")
+
+# Set up an SSH tunnel
+ssh_forward_port(session_id="a1b2c3d4", remote_port=5432, local_port=15432)
+# Now connect to localhost:15432 to reach the remote PostgreSQL
+```
+
+## Architecture
+
+```
+src/mcp_remote_ssh/
+├── __init__.py          # CLI entry point (click)
+├── lifespan.py          # FastMCP lifespan (session cleanup)
+├── session.py           # SSHSession, SessionStore, PortForward
+└── server/
+    ├── __init__.py      # FastMCP app + tool registration
+    ├── helpers.py       # get_session, require_connected, require_shell
+    ├── connection.py    # ssh_connect, ssh_list_sessions, ssh_close_session
+    ├── execute.py       # ssh_execute, ssh_sudo_execute
+    ├── shell.py         # ssh_shell_open/send/read/control/wait
+    ├── sftp.py          # upload, download, read, write, list_dir
+    └── forward.py       # forward_port, list_forwards, close_forward
+```
+
+### Key design decisions
+
+- **[Paramiko](https://www.paramiko.org/)** for SSH -- mature, pure-Python, supports password auth, SFTP, channels, and port forwarding natively
+- **[FastMCP](https://github.com/PrefectHQ/fastmcp)** for MCP protocol
+- **Dual execution model** -- `exec_command()` for structured one-shot commands (returns exit codes), `invoke_shell()` for persistent interactive sessions
+- **Async wrappers** -- all blocking Paramiko calls run in `run_in_executor` to avoid blocking the event loop
+- **Shell buffer management** -- interactive shell keeps a 500KB rolling buffer for `shell_read` polling
+
+## Transport options
+
+```bash
+# stdio (default, for Cursor/Claude Desktop)
+mcp-remote-ssh
+
+# SSE
+mcp-remote-ssh --transport sse --host 0.0.0.0 --port 9810
+
+# Streamable HTTP
+mcp-remote-ssh --transport streamable-http --host 0.0.0.0 --port 9810
+```
+
+## Dependencies
+
+| Package | Purpose |
+|---|---|
+| [FastMCP](https://github.com/PrefectHQ/fastmcp) | MCP protocol handling |
+| [Paramiko](https://www.paramiko.org/) | SSH2 protocol (connections, channels, SFTP) |
+| [Click](https://click.palletsprojects.com/) | CLI interface |
+| [Loguru](https://loguru.readthedocs.io/) | Logging |
+
+## License
+
+MIT

mcp_remote_ssh-0.1.0/README.md

@@ -0,0 +1,179 @@
+# mcp-remote-ssh
+
+MCP server for remote SSH operations. Gives AI agents persistent SSH sessions, structured command output, SFTP file transfer, and SSH port forwarding -- with native password and key-based authentication.
+
+## Why this exists
+
+Existing SSH MCP servers each solve part of the problem but none combine all of:
+
+- **Password + key auth** -- connect to any host, whether it uses passwords, SSH keys, or an agent
+- **Dual execution model** -- one-shot `exec_command()` with real exit codes *and* persistent interactive shells for long-running workflows
+- **SFTP** -- read, write, upload, download files properly instead of piping through a PTY
+- **Port forwarding** -- SSH tunnels for accessing remote services (databases, web UIs, VNC, etc.)
+- **Structured output** -- `stdout`, `stderr`, and `exit_code` as separate fields, not screen scrapes
+
+## Installation
+
+```bash
+# Via uv (recommended)
+uv tool install mcp-remote-ssh
+
+# Via pip
+pip install mcp-remote-ssh
+
+# From source
+git clone https://github.com/faizbawa/mcp-remote-ssh.git
+cd mcp-remote-ssh
+uv sync
+```
+
+## Configuration
+
+### Cursor / Claude Desktop
+
+Add to your MCP client configuration:
+
+```json
+{
+  "mcpServers": {
+    "remote-ssh": {
+      "command": "uvx",
+      "args": ["mcp-remote-ssh"]
+    }
+  }
+}
+```
+
+Or if running from source:
+
+```json
+{
+  "mcpServers": {
+    "remote-ssh": {
+      "command": "uv",
+      "args": ["run", "--directory", "/path/to/mcp-remote-ssh", "mcp-remote-ssh"]
+    }
+  }
+}
+```
+
+## Tools (18 total)
+
+### Connection management
+
+| Tool | Description |
+|---|---|
+| `ssh_connect` | Connect to a host (password, key, or agent auth). Returns `session_id`. |
+| `ssh_list_sessions` | List all active sessions with status |
+| `ssh_close_session` | Close a session and release all resources |
+
+### Structured execution (one-shot, clean output)
+
+| Tool | Description |
+|---|---|
+| `ssh_execute` | Run a command, returns `{stdout, stderr, exit_code}` |
+| `ssh_sudo_execute` | Run a command with sudo elevation |
+
+### Interactive shell (persistent state)
+
+| Tool | Description |
+|---|---|
+| `ssh_shell_open` | Open a persistent interactive shell (`invoke_shell`) |
+| `ssh_shell_send` | Send text to the shell (with optional Enter) |
+| `ssh_shell_read` | Read current shell buffer (poll for output) |
+| `ssh_shell_send_control` | Send Ctrl+C, Ctrl+D, etc. |
+| `ssh_shell_wait` | Wait for a pattern or output to stabilize |
+
+### File transfer (SFTP)
+
+| Tool | Description |
+|---|---|
+| `ssh_upload_file` | Upload a local file to the remote host |
+| `ssh_download_file` | Download a remote file to local machine |
+| `ssh_read_remote_file` | Read a text file on the remote host |
+| `ssh_write_remote_file` | Write text to a remote file (create or append) |
+| `ssh_list_remote_dir` | List directory contents with metadata |
+
+### Port forwarding
+
+| Tool | Description |
+|---|---|
+| `ssh_forward_port` | Create an SSH tunnel (local port -> remote port) |
+| `ssh_list_forwards` | List active port forwards for a session |
+| `ssh_close_forward` | Close a specific port forward |
+
+## Quick start
+
+```text
+# Connect with password
+ssh_connect(host="myserver.example.com", username="admin", password="secret")
+→ {"session_id": "a1b2c3d4", "connected": true, ...}
+
+# Run a structured command
+ssh_execute(session_id="a1b2c3d4", command="df -h /")
+→ {"stdout": "Filesystem  Size  Used ...", "stderr": "", "exit_code": 0}
+
+# Open a persistent shell for interactive work
+ssh_shell_open(session_id="a1b2c3d4")
+ssh_shell_send(session_id="a1b2c3d4", data="cd /opt && make -j$(nproc)")
+ssh_shell_wait(session_id="a1b2c3d4", pattern="$ ", timeout=600)
+
+# Transfer files via SFTP
+ssh_upload_file(session_id="a1b2c3d4", local_path="config.yaml", remote_path="/etc/app/config.yaml")
+ssh_read_remote_file(session_id="a1b2c3d4", remote_path="/var/log/app.log")
+
+# Set up an SSH tunnel
+ssh_forward_port(session_id="a1b2c3d4", remote_port=5432, local_port=15432)
+# Now connect to localhost:15432 to reach the remote PostgreSQL
+```
+
+## Architecture
+
+```
+src/mcp_remote_ssh/
+├── __init__.py          # CLI entry point (click)
+├── lifespan.py          # FastMCP lifespan (session cleanup)
+├── session.py           # SSHSession, SessionStore, PortForward
+└── server/
+    ├── __init__.py      # FastMCP app + tool registration
+    ├── helpers.py       # get_session, require_connected, require_shell
+    ├── connection.py    # ssh_connect, ssh_list_sessions, ssh_close_session
+    ├── execute.py       # ssh_execute, ssh_sudo_execute
+    ├── shell.py         # ssh_shell_open/send/read/control/wait
+    ├── sftp.py          # upload, download, read, write, list_dir
+    └── forward.py       # forward_port, list_forwards, close_forward
+```
+
+### Key design decisions
+
+- **[Paramiko](https://www.paramiko.org/)** for SSH -- mature, pure-Python, supports password auth, SFTP, channels, and port forwarding natively
+- **[FastMCP](https://github.com/PrefectHQ/fastmcp)** for MCP protocol
+- **Dual execution model** -- `exec_command()` for structured one-shot commands (returns exit codes), `invoke_shell()` for persistent interactive sessions
+- **Async wrappers** -- all blocking Paramiko calls run in `run_in_executor` to avoid blocking the event loop
+- **Shell buffer management** -- interactive shell keeps a 500KB rolling buffer for `shell_read` polling
+
+## Transport options
+
+```bash
+# stdio (default, for Cursor/Claude Desktop)
+mcp-remote-ssh
+
+# SSE
+mcp-remote-ssh --transport sse --host 0.0.0.0 --port 9810
+
+# Streamable HTTP
+mcp-remote-ssh --transport streamable-http --host 0.0.0.0 --port 9810
+```
+
+## Dependencies
+
+| Package | Purpose |
+|---|---|
+| [FastMCP](https://github.com/PrefectHQ/fastmcp) | MCP protocol handling |
+| [Paramiko](https://www.paramiko.org/) | SSH2 protocol (connections, channels, SFTP) |
+| [Click](https://click.palletsprojects.com/) | CLI interface |
+| [Loguru](https://loguru.readthedocs.io/) | Logging |
+
+## License
+
+MIT

mcp_remote_ssh-0.1.0/pyproject.toml

@@ -0,0 +1,61 @@
+[project]
+name = "mcp-remote-ssh"
+version = "0.1.0"
+description = "MCP server for remote SSH operations -- persistent sessions, structured command execution, SFTP file transfer, and port forwarding for AI agents."
+readme = "README.md"
+license = "MIT"
+requires-python = ">=3.10"
+keywords = ["mcp", "ssh", "remote", "sftp", "paramiko", "ai", "model-context-protocol", "cursor", "claude"]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Intended Audience :: Developers",
+    "Intended Audience :: System Administrators",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Topic :: System :: Networking",
+    "Topic :: System :: Systems Administration",
+]
+dependencies = [
+    "fastmcp>=3.0,<4",
+    "paramiko>=3.4",
+    "click>=8.0",
+    "loguru>=0.7",
+]
+
+[[project.authors]]
+name = "Mohammadfaiz Bawa"
+
+[project.urls]
+Homepage = "https://github.com/faizbawa/mcp-remote-ssh"
+Repository = "https://github.com/faizbawa/mcp-remote-ssh"
+Issues = "https://github.com/faizbawa/mcp-remote-ssh/issues"
+Changelog = "https://github.com/faizbawa/mcp-remote-ssh/blob/main/CHANGELOG.md"
+
+[project.scripts]
+mcp-remote-ssh = "mcp_remote_ssh:main"
+
+[dependency-groups]
+dev = [
+    "pytest>=9.0",
+    "pytest-asyncio>=1.0",
+    "pytest-cov>=7.0",
+    "pytest-mock>=3.15",
+]
+
+[tool.uv]
+package = true
+
+[tool.ruff]
+line-length = 120
+indent-width = 4
+
+lint.select = ["E", "F", "B", "W", "I", "N", "UP", "S", "BLE", "C4", "EM", "ISC"]
+lint.ignore = ["EM102"]
+lint.fixable = ["ALL"]
+lint.per-file-ignores."tests/**/*.py" = ["S101", "S106"]
+
+format.quote-style = "single"
+format.indent-style = "space"

mcp_remote_ssh-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

mcp_remote_ssh-0.1.0/src/mcp_remote_ssh/__init__.py

@@ -0,0 +1,37 @@
+import asyncio
+import sys
+from pathlib import Path
+
+import click
+from loguru import logger
+
+try:
+    LOG_DIR = Path.home() / '.mcp_remote_ssh'
+    LOG_DIR.mkdir(exist_ok=True)
+    logger.add(LOG_DIR / 'log.log', rotation='10 MB')
+except Exception as e:  # noqa: BLE001
+    logger.error(f'Failed to set up logger directory: {e}')
+
+if sys.platform == 'win32':
+    asyncio.set_event_loop_policy(asyncio.WindowsSelectorEventLoopPolicy())
+
+
+@click.command()
+@click.option('--transport', type=click.Choice(['stdio', 'sse', 'streamable-http']), default='stdio')
+@click.option('--host', default='0.0.0.0', help='Host to bind to for SSE or Streamable HTTP transport')  # noqa: S104
+@click.option('--port', default=9810, help='Port to listen on for SSE or Streamable HTTP transport')
+def main(
+    transport: str,
+    host: str,
+    port: int,
+) -> None:
+    from mcp_remote_ssh.server import mcp
+
+    if transport == 'stdio':
+        asyncio.run(mcp.run_async(transport=transport))
+    elif transport in ('sse', 'streamable-http'):
+        asyncio.run(mcp.run_async(transport=transport, host=host, port=port))
+
+
+if __name__ == '__main__':
+    main()

mcp_remote_ssh-0.1.0/src/mcp_remote_ssh/lifespan.py

@@ -0,0 +1,33 @@
+from __future__ import annotations
+
+from contextlib import asynccontextmanager
+from dataclasses import dataclass
+from typing import TYPE_CHECKING, AsyncIterator
+
+from loguru import logger
+
+from mcp_remote_ssh.session import SessionStore
+
+if TYPE_CHECKING:
+    from fastmcp import FastMCP
+
+
+@dataclass
+class LifespanContext:
+    sessions: SessionStore
+
+
+@asynccontextmanager
+async def lifespan(app: FastMCP) -> AsyncIterator[LifespanContext]:
+    ctx = LifespanContext(sessions=SessionStore())
+    try:
+        yield ctx
+    finally:
+        for info in ctx.sessions.list_all():
+            sid = info['session_id']
+            session = ctx.sessions.get(sid)
+            errors = session.close()
+            if errors:
+                logger.warning(f'Session {sid} cleanup errors: {errors}')
+            else:
+                logger.debug(f'Cleaned up session {sid}')

mcp_remote_ssh-0.1.0/src/mcp_remote_ssh/server/__init__.py

@@ -0,0 +1,9 @@
+from fastmcp import FastMCP
+
+from mcp_remote_ssh.lifespan import LifespanContext, lifespan
+
+__all__ = ['mcp']
+
+mcp = FastMCP('mcp-remote-ssh', lifespan=lifespan)
+
+from mcp_remote_ssh.server import connection, execute, forward, sftp, shell  # noqa: E402, F401

mcp_remote_ssh-0.1.0/src/mcp_remote_ssh/server/connection.py

@@ -0,0 +1,97 @@
+from __future__ import annotations
+
+import asyncio
+from typing import Any
+
+import paramiko
+from fastmcp import Context
+from loguru import logger
+
+from mcp_remote_ssh.server import mcp
+from mcp_remote_ssh.server.helpers import get_session, get_store
+from mcp_remote_ssh.session import SSHSession
+
+
+@mcp.tool()
+async def ssh_connect(
+    ctx: Context,
+    host: str,
+    username: str = 'root',
+    password: str = '',
+    key_path: str = '',
+    port: int = 22,
+    timeout: int = 60,
+) -> dict[str, Any]:
+    """Connect to a remote host via SSH. Returns a session_id for use with all
+    other tools. Supports password and key-based authentication.
+
+    Args:
+        host: Hostname or IP address of the remote server.
+        username: SSH username (default: root).
+        password: Password for authentication. Leave empty for key-based auth.
+        key_path: Path to SSH private key file. Leave empty for password auth.
+        port: SSH port (default: 22).
+        timeout: Connection timeout in seconds (default: 60).
+
+    Returns:
+        Session info dict with session_id, host, and connection status.
+    """
+    store = get_store(ctx)
+    session = SSHSession(host=host, username=username, port=port)
+    session.client.set_missing_host_key_policy(paramiko.AutoAddPolicy())  # noqa: S507
+
+    connect_kwargs: dict[str, Any] = {
+        'hostname': host,
+        'port': port,
+        'username': username,
+        'timeout': timeout,
+        'allow_agent': False,
+        'look_for_keys': False,
+    }
+    if key_path:
+        connect_kwargs['key_filename'] = key_path
+        connect_kwargs['look_for_keys'] = True
+    elif password:
+        connect_kwargs['password'] = password
+    else:
+        connect_kwargs['allow_agent'] = True
+        connect_kwargs['look_for_keys'] = True
+
+    loop = asyncio.get_running_loop()
+    await loop.run_in_executor(None, lambda: session.client.connect(**connect_kwargs))
+
+    await store.add(session)
+    logger.info(f'Connected to {username}@{host}:{port} as session {session.session_id}')
+    return session.summary()
+
+
+@mcp.tool()
+async def ssh_list_sessions(ctx: Context) -> list[dict[str, Any]]:
+    """List all active SSH sessions with their connection status and details.
+
+    Returns:
+        List of session info dicts.
+    """
+    store = get_store(ctx)
+    return store.list_all()
+
+
+@mcp.tool()
+async def ssh_close_session(ctx: Context, session_id: str) -> str:
+    """Close an SSH session and release all its resources (shell, SFTP,
+    port forwards). WARNING: this kills any running processes in the session.
+
+    Args:
+        session_id: The session ID returned by ssh_connect.
+
+    Returns:
+        Confirmation message.
+    """
+    store = get_store(ctx)
+    session = get_session(ctx, session_id)
+    errors = session.close()
+    await store.remove(session_id)
+    logger.info(f'Closed session {session_id} to {session.host}')
+    if errors:
+        return f'Session {session_id} closed with warnings: {"; ".join(errors)}'
+    return f'Session {session_id} to {session.host} closed.'