1. Conduid
  2. Security
  3. io.github.KamaruSama/mcp-sudo
MCP server · Security

io.github.KamaruSama/mcp-sudo

· github.com/KamaruSama/mcp-sudo

Run sudo commands with a Fernet-encrypted password bound to machine-id + user.

Unclaimed security
InstallView source
37Low

Scored 4 months ago · breakdown

About io.github.KamaruSama/mcp-sudo

io.github.KamaruSama/mcp-sudo is an MCP server in the Security category: run sudo commands with a Fernet-encrypted password bound to machine-id + user. It has been installed 0 times through Conduid.

Install

uvx
uvx mcp-sudo
pip
pip install mcp-sudo

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about io.github.KamaruSama/mcp-sudo

Powered by Claude · Grounded in docs

I know everything about io.github.KamaruSama/mcp-sudo. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • ·Scoped permissionsNot checked yet.

README

mcp-sudo

MCP server for running sudo commands with encrypted password storage.

Exposes 4 tools to persist a sudo password (encrypted with a machine-bound key) and invoke privileged commands without re-entering credentials. Designed for single-user Linux workstations.

📖 อ่านภาษาไทย →

Tools

Tool Purpose
store_password Store sudo password (encrypted, one-time)
sudo_exec Run shell command with sudo
has_password Check if password is stored
clear_password Remove stored password

Security model

  • Password is encrypted with Fernet (AES-128-CBC + HMAC-SHA256).
  • Encryption key is derived from machine-id + USER — never stored on disk.
  • Decryption only succeeds on the same machine with the same user.
  • Encrypted blob lives at ~/.config/claude-sudo-mcp/credential.enc (chmod 600).

This is not a secrets manager. Treat this as "remember my sudo password for this session on this box." If your machine-id is copied to another box or another user reads the MCP process, the password can be recovered.

Install

cd /path/to/mcp-sudo
uv venv --python 3.12 .venv
uv pip install --python .venv/bin/python mcp cryptography

claude mcp add sudo -s user -- \
  /path/to/mcp-sudo/.venv/bin/python /path/to/mcp-sudo/server.py

On first use, call store_password once to cache credentials.

Support the project ❤

Contact

Copyright © 2026 likezara™. All rights reserved. Developed by Kamaru (pen name).

README mirrored from the source repository 4 months ago. The original is authoritative.

Questions

About io.github.KamaruSama/mcp-sudo

How do I install io.github.KamaruSama/mcp-sudo?

Run uvx mcp-sudo, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is io.github.KamaruSama/mcp-sudo safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is io.github.KamaruSama/mcp-sudo still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.