app.py

from flask import Flask
from flask import request
import subprocess

app = Flask('flaskshell')

@app.route('/create')
def get_status():
        command_ls = "touch fichero_touch"

        try:
            result_ls = subprocess.check_output(
                [command_ls], shell=True)
        except Exception as e:
            print (e)
            return 'Fail'

        return 'Success'

if __name__ == '__main__':
    app.run()

levantamos el servidor:

python app.py

Si lanzamos este comando, ejecuta el comando, en este caso touch

curl http://127.0.0.1:5000/create

app_post.py

from flask import Flask
from flask import request
import subprocess

app = Flask('flaskshell')

@app.route('/usuario' , methods = ['POST'])
def get_variables():
        user=request.form.get('user')
        password=request.form.get('password')

        command = "touch " + user

        try:
            result_ls = subprocess.check_output(
                [command], shell=True)
        except Exception as e:
            print (e)
            return result_ls

        return 'Success'

if __name__ == '__main__':
    app.run()

python3 app_post.py

curl -X POST http://127.0.0.1:5000/usuario -d "user=hola&password=adiios"