English Français العربية

io.github.KamaruSama/mcp-sudo

Official registry Other

Run sudo commands with a Fernet-encrypted password bound to machine-id + user.

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

PYPI package mcp-sudo
Claude Code 
claude mcp add mcp-sudo -- uvx mcp-sudo==1.0.1
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "mcp-sudo": {
            "command": "uvx",
            "args": [
                "mcp-sudo==1.0.1"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. mcp-sudo
  2. Tools
  3. Security model
  4. Install
  5. Support the project ❤
  6. Contact

mcp-sudo

MCP server for running sudo commands with encrypted password storage.

Exposes 4 tools to persist a sudo password (encrypted with a machine-bound key) and invoke privileged commands without re-entering credentials. Designed for single-user Linux workstations.

📖 อ่านภาษาไทย →

Tools

ToolPurpose
store_passwordStore sudo password (encrypted, one-time)
sudo_execRun shell command with sudo
has_passwordCheck if password is stored
clear_passwordRemove stored password

Security model

  • Password is encrypted with Fernet (AES-128-CBC + HMAC-SHA256).
  • Encryption key is derived from machine-id + USER — never stored on disk.
  • Decryption only succeeds on the same machine with the same user.
  • Encrypted blob lives at ~/.config/claude-sudo-mcp/credential.enc (chmod 600).

This is not a secrets manager. Treat this as "remember my sudo password for this session on this box." If your machine-id is copied to another box or another user reads the MCP process, the password can be recovered.

Install

cd /path/to/mcp-sudo
uv venv --python 3.12 .venv
uv pip install --python .venv/bin/python mcp cryptography

claude mcp add sudo -s user -- \
  /path/to/mcp-sudo/.venv/bin/python /path/to/mcp-sudo/server.py

On first use, call store_password once to cache credentials.

Support the project ❤

Contact

  • Portfolio / general: k.kamarux@gmail.com
  • Commercial / licensing: contact@likezara.com

Copyright © 2026 likezara™. All rights reserved. Developed by Kamaru (pen name).

Frequently asked questions

What is io.github.KamaruSama/mcp-sudo?

Run sudo commands with a Fernet-encrypted password bound to machine-id + user.

How do I install io.github.KamaruSama/mcp-sudo?

It runs on your machine. In Claude Code: claude mcp add mcp-sudo -- uvx mcp-sudo==1.0.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.KamaruSama/mcp-sudo need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.KamaruSama/mcp-sudo open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains io.github.KamaruSama/mcp-sudo?

It is published by KamaruSama. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.