1. Conduid
  2. Security
  3. io.github.KamaruSama/mcp-sudo
MCP server · Security

io.github.KamaruSama/mcp-sudo

· github.com/KamaruSama/mcp-sudo

Run sudo commands with a Fernet-encrypted password bound to machine-id + user.

Unclaimed security
InstallView source
37Low

Scored 6 months ago · breakdown

About io.github.KamaruSama/mcp-sudo

io.github.KamaruSama/mcp-sudo is an MCP server in the Security category: run sudo commands with a Fernet-encrypted password bound to machine-id + user.

Install

uvx
uvx mcp-sudo
pip
pip install mcp-sudo

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about io.github.KamaruSama/mcp-sudo

Powered by Claude · Grounded in docs

I know everything about io.github.KamaruSama/mcp-sudo. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.

5 checks have not been run yet.

README

mcp-sudo

MCP server for running sudo commands with encrypted password storage.

Exposes 4 tools to persist a sudo password (encrypted with a machine-bound key) and invoke privileged commands without re-entering credentials. Designed for single-user Linux workstations.

📖 อ่านภาษาไทย →

Tools

Tool Purpose
store_password Store sudo password (encrypted, one-time)
sudo_exec Run shell command with sudo
has_password Check if password is stored
clear_password Remove stored password

Security model

  • Password is encrypted with Fernet (AES-128-CBC + HMAC-SHA256).
  • Encryption key is derived from machine-id + USER — never stored on disk.
  • Decryption only succeeds on the same machine with the same user.
  • Encrypted blob lives at ~/.config/claude-sudo-mcp/credential.enc (chmod 600).

This is not a secrets manager. Treat this as "remember my sudo password for this session on this box." If your machine-id is copied to another box or another user reads the MCP process, the password can be recovered.

Install

cd /path/to/mcp-sudo
uv venv --python 3.12 .venv
uv pip install --python .venv/bin/python mcp cryptography

claude mcp add sudo -s user -- \
  /path/to/mcp-sudo/.venv/bin/python /path/to/mcp-sudo/server.py

On first use, call store_password once to cache credentials.

Support the project ❤

Contact

Copyright © 2026 likezara™. All rights reserved. Developed by Kamaru (pen name).

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About io.github.KamaruSama/mcp-sudo

How do I install io.github.KamaruSama/mcp-sudo?

Run uvx mcp-sudo, then add the server to your MCP client's configuration.

Is io.github.KamaruSama/mcp-sudo safe to use with an AI agent?

Its trust score is 37 out of 100 (low). It passes 1 of the 1 static security checks run so far. It has no ConduID identity yet, so agent calls to it are not receipted.

Is io.github.KamaruSama/mcp-sudo still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.