Enables Claude to read files and run allowlisted commands on any Linux machine that can dial out, without inbound SSH or port forwarding.