io.github.KamaruSama/mcp-sudo

Run sudo commands with a Fernet-encrypted password bound to machine-id + user.

0 tools GitHub

No known CVEs

No license

Maintenance unknown

No commit data

Untested

Transport: stdio

0 tools

Grade F

Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Untested on Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-kamarusama-mcp-sudo": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-kamarusama-mcp-sudo)](https://mcppedia.org/s/io-github-kamarusama-mcp-sudo)

Read me

What io.github.KamaruSama/mcp-sudo does

Run sudo commands with a Fernet-encrypted password bound to machine-id + user.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

14/100across 5 weighted dimensions

How we score →

0255075100

−86

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.KamaruSama/mcp-sudo safe to use?: io.github.KamaruSama/mcp-sudo has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.KamaruSama/mcp-sudo?: io.github.KamaruSama/mcp-sudo can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.KamaruSama/mcp-sudo?: io.github.KamaruSama/mcp-sudo is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.

Similar servers

Others in security

View all →

io.github.xkumakichi/xaip-mcp-server92

AI agents get on-chain identity, credentials, reputation, escrow, and persistent memory on XRPL.

MCPpedia92

Search, evaluate, and compare 17,000+ MCP servers — each scored on security, maintenance, and efficiency.

1 5

Ggmcp88

MCP server for scanning and remediating hardcoded secrets using GitGuardian’s API. Detect over 500 secret types and prevent credential leaks before code goes public.

34 5

Remnux Mcp Server88

MCP server for using the REMnux malware analysis toolkit via AI assistants

64 5

MCP Security Weekly

Get CVE alerts and security updates for io.github.KamaruSama/mcp-sudo and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Tool

Purpose

store_password

Store sudo password (encrypted, one-time)

sudo_exec

Run shell command with sudo

has_password

Check if password is stored

clear_password

Remove stored password

Security model

Password is encrypted with Fernet (AES-128-CBC + HMAC-SHA256).

Encryption key is derived from machine-id + USER — never stored on disk.

Decryption only succeeds on the same machine with the same user.

Encrypted blob lives at ~/.config/claude-sudo-mcp/credential.enc (chmod 600).

This is not a secrets manager. Treat this as "remember my sudo password for this session on this box." If your machine-id is copied to another box or another user reads the MCP process, the password can be recovered.

cd /path/to/mcp-sudo uv venv --python 3.12 .venv uv pip install --python .venv/bin/python mcp cryptography claude mcp add sudo -s user -- \ /path/to/mcp-sudo/.venv/bin/python /path/to/mcp-sudo/server.py

Frequently Asked Questions

Is io.github.KamaruSama/mcp-sudo safe to use?

io.github.KamaruSama/mcp-sudo has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.KamaruSama/mcp-sudo?

io.github.KamaruSama/mcp-sudo can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with io.github.KamaruSama/mcp-sudo?

io.github.KamaruSama/mcp-sudo is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.

mcp-sudo

MCP server for running sudo commands with encrypted password storage.

Exposes 4 tools to persist a sudo password (encrypted with a machine-bound key) and invoke privileged commands without re-entering credentials. Designed for single-user Linux workstations.

📖 อ่านภาษาไทย →

Tools

Tool	Purpose
`store_password`	Store sudo password (encrypted, one-time)
`sudo_exec`	Run shell command with sudo
`has_password`	Check if password is stored
`clear_password`	Remove stored password

Security model

Password is encrypted with Fernet (AES-128-CBC + HMAC-SHA256).
Encryption key is derived from machine-id + USER — never stored on disk.
Decryption only succeeds on the same machine with the same user.
Encrypted blob lives at ~/.config/claude-sudo-mcp/credential.enc (chmod 600).

Install

cd /path/to/mcp-sudo
uv venv --python 3.12 .venv
uv pip install --python .venv/bin/python mcp cryptography

claude mcp add sudo -s user -- \
  /path/to/mcp-sudo/.venv/bin/python /path/to/mcp-sudo/server.py

On first use, call store_password once to cache credentials.

Support the project ❤

Ko-fi: https://ko-fi.com/kamaru

Contact

Portfolio / general: k.kamarux@gmail.com
Commercial / licensing: contact@likezara.com