# Mish

> The LLM-native shell — five MCP tools for structured output, error diagnostics, and process control

- **Type:** MCP server
- **Install:** `agentstack add mcp-aetherwing-io-mish`
- **Verified:** Pending review
- **Seller:** [aetherwing-io](https://agentstack.voostack.com/s/aetherwing-io)
- **Installs:** 0
- **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [aetherwing-io](https://github.com/aetherwing-io)
- **Source:** https://github.com/aetherwing-io/mish
- **Website:** https://ohitsmish.com

## Install

```sh
agentstack add mcp-aetherwing-io-mish
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

Five MCP tools between your agent and the OS.
  Structured output · error diagnostics · process control · one binary

  ohitsmish.com · Releases · Architecture · Benchmarks

---

```
Before:  agent → Bash("cargo test")        → 1,319 lines raw output
After:   agent → sh_run("cargo test")      → 201 lines (6.6× reduction)

Before:  agent → Bash("cargo test") + watch → 1,319 lines raw output
After:   agent → sh_run watch="warning"     → 3 lines (440× reduction)

Before:  agent → Bash("cp missing dest/")  → "No such file" + 4 follow-up calls
After:   agent → sh_run("cp missing dest/") → error + path walk + permissions + nearest dirs
```

## Install

```bash
# macOS (Apple Silicon + Intel) and Linux
curl -fsSL https://ohitsmish.com/install.sh | sh

# or from source
cargo install --git https://github.com/aetherwing-io/mish
```

## Connect

```bash
# Claude Code
claude mcp add mish -- mish serve

# Cursor / Windsurf / any MCP client — add to your config:
"mish": { "command": "mish", "args": ["serve"] }
```

Restart your client. Five tools appear:

| Tool | What it does |
|------|-------------|
| **sh_run** | Run a command. Output is squashed, categorized, and enriched with diagnostics on failure. |
| **sh_spawn** | Start a background process. Wait-for-ready patterns, aliases, output spools. |
| **sh_interact** | Send input, read tail, signal, or kill a running process. |
| **sh_session** | Named PTY sessions with full lifecycle control. |
| **sh_help** | Self-documenting reference card. Your agent reads it, never needs a manual. |

## What it does

mish sits between the shell and its caller — whether that's an LLM agent, a human, or both — and returns structured, context-efficient responses. It categorizes every command and applies the right handler. Pure heuristics, no LLM in the loop. Every response includes exit code, timing, and command category. On failure, mish pre-walks paths, checks permissions, and lists nearby files — before your agent has to ask.

### Command routing

Every command is classified into one of six categories:

| Category | Commands | Behavior |
|----------|----------|----------|
| **Condense** | npm, cargo, docker, make, pytest | PTY capture → ANSI strip → dedup → Oreo truncation |
| **Narrate** | cp, mv, mkdir, rm, chmod | Inspect → execute → narrate what happened |
| **Passthrough** | cat, grep, ls, jq, diff | Output verbatim + metadata |
| **Structured** | git status, docker ps | Machine-readable parse |
| **Interactive** | vim, htop, psql, node REPL | Transparent passthrough with raw mode detection |
| **Dangerous** | rm -rf, force push, reset --hard | Warn before executing |

## Benchmarks

Same commands, same machine, same session. mish vs bare shell on a real Rust codebase.

| Scenario | Reduction | How |
|----------|-----------|-----|
| Full test suite | **6.6×** | Dedup + Oreo truncation — head and tail kept, repetitive middle dropped |
| Test suite + watch | **440×** | Only regex-matched lines return |
| Failed command | **5→1 round trips** | Path walks, permissions, nearest dirs — pre-fetched on failure |

Full benchmark data: [SHOWCASE.md](docs/SHOWCASE.md)

## How it works

mish is one binary with two interfaces:

**MCP server** (`mish serve`) — a process supervisor over JSON-RPC with ambient process state on every response, watch patterns for regex filtering, and operator handoff for auth/MFA.

**CLI proxy** (`mish `) — wraps individual commands with category-aware structured output. Works standalone or with any LLM tool.

Both share the same core: category router → squasher pipeline (VTE parse, progress removal, dedup, Oreo truncation) → error enrichment → grammar system (TOML tool grammars with dialect support).

See [ARCHITECTURE.md](docs/ARCHITECTURE.md) for the full execution model.

## Status

Active development. 1,400+ tests across unit, integration, CLI, grammar, fixture, and MCP layers. MCP server is live and battle-tested in daily use with Claude Code. macOS and Linux.

## License

[MIT](LICENSE)

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [aetherwing-io](https://github.com/aetherwing-io)
- **Source:** [aetherwing-io/mish](https://github.com/aetherwing-io/mish)
- **License:** MIT
- **Homepage:** https://ohitsmish.com

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** yes
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: flagged — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-aetherwing-io-mish
- Seller: https://agentstack.voostack.com/s/aetherwing-io
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.