Sudo MCP server
Run sudo commands with a Fernet-encrypted password bound to machine-id + user.
0 stars26 downloads/wk
Reviews
Write oneNobody has reviewed Sudo yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Sudo tools (4, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
clear_passwordwrite actionRemove the stored sudo password.
has_passwordCheck if a sudo password is already stored.
store_passwordStore sudo password encrypted. Only needs to be done once.
sudo_execwrite actionExecute a command with sudo using the stored password.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 161 days ago8/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Sudo compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 82/100
- higher than 63% of 48,255 servers
- Tools
- 4
- the typical server has 7
- Tools that change things
- 50%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 26
- more than 13% of 12,191 servers with a package
What its tools let an agent do: 2 read · 2 change
Install Sudo in Claude Code, Cursor or VS Code
claude mcp add mcp-sudo -- uvx mcp-sudo
What the publisher says
From the Sudo repository's README, as published. We do not edit it. Read it on GitHub
mcp-sudo
<!-- mcp-name: io.github.KamaruSama/mcp-sudo -->
MCP server for running sudo commands with encrypted password storage.
Exposes 4 tools to persist a sudo password (encrypted with a machine-bound key) and invoke privileged commands without re-entering credentials. Designed for single-user Linux workstations.
📖 อ่านภาษาไทย →
Tools
Security model
- Password is encrypted with Fernet (AES-128-CBC + HMAC-SHA256).
- Encryption key is derived from machine-id + USER — never stored on disk.
- Decryption only succeeds on the same machine with the same user.
- Encrypted blob lives at ~/.config/claude-sudo-mcp/credential.enc (chmod 600).
This is not a secrets manager. Treat this as "remember my sudo password for this session on this box." If your machine-id is copied to another box or another user reads the MCP process, the password can be recovered.
Install
cd /path/to/mcp-sudo
uv venv --python 3.12 .venv
uv pip install --python .venv/bin/python mcp cryptography
claude mcp add sudo -s user -- \
/path/to/mcp-sudo/.venv/bin/python /path/to/mcp-sudo/server.pyOn first use, call store_password once to cache credentials.
Support the project ❤
- Ko-fi: https://ko-fi.com/kamaru
Contact
- Portfolio / general: k.kamarux@gmail.com
- Commercial / licensing: contact@likezara.com
Copyright © 2026 likezara™. All rights reserved. Developed by Kamaru (pen name).
Nothing above is checked by us. What we check is on the safety report.
Sudo: common questions
- Is Sudo MCP server safe?
- Mostly: it is graded B (82/100). Read the Sudo safety report
- How do I install Sudo?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Sudo need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Sudo maintained?
- The last commit was 199 days ago (2026-04-19). The latest release is v1.0.1.
- How does Sudo compare with other MCP servers?
- safety score 82/100 (higher than 63% of 48,255 servers); tools 4 (the typical server has 7); tools that change things 50% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.