How do I install MCP Sudo?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does MCP Sudo need an API key?

No required environment variable is listed on this record.

What transport does MCP Sudo use?

MCP Sudo runs locally over stdio.

MCP Sudo

by io.github.KamaruSama

Run sudo commands with a Fernet-encrypted password bound to machine-id + user.

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Local command

uvx mcp-sudo==1.0.1

Provider

Claude Code

claude mcp add io.github.kamarusama-mcp-sudo -- uvx mcp-sudo==1.0.1

Run in a terminal.

Claude Desktop

{
  "mcpServers": {
    "io.github.kamarusama-mcp-sudo": {
      "command": "uvx",
      "args": [
        "mcp-sudo==1.0.1"
      ]
    }
  }
}

claude_desktop_config.json

Step-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Related MCP

Related skills

View all

Questions

How do I install MCP Sudo?: Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.
Does MCP Sudo need an API key?: No required environment variable is listed on this record.
What transport does MCP Sudo use?: MCP Sudo runs locally over stdio.
When was MCP Sudo last checked?: Last checked 2026-10-16. Run sudo commands with a Fernet-encrypted password bound to machine-id + user.

mcp-sudo

MCP server for running sudo commands with encrypted password storage.

Exposes 4 tools to persist a sudo password (encrypted with a machine-bound key) and invoke privileged commands without re-entering credentials. Designed for single-user Linux workstations.

📖 อ่านภาษาไทย →

Tools

Tool	Purpose
`store_password`	Store sudo password (encrypted, one-time)
`sudo_exec`	Run shell command with sudo
`has_password`	Check if password is stored
`clear_password`	Remove stored password

Security model

Password is encrypted with Fernet (AES-128-CBC + HMAC-SHA256).
Encryption key is derived from machine-id + USER — never stored on disk.
Decryption only succeeds on the same machine with the same user.
Encrypted blob lives at ~/.config/claude-sudo-mcp/credential.enc (chmod 600).

This is not a secrets manager. Treat this as "remember my sudo password for this session on this box." If your machine-id is copied to another box or another user reads the MCP process, the password can be recovered.

Install

cd /path/to/mcp-sudo
uv venv --python 3.12 .venv
uv pip install --python .venv/bin/python mcp cryptography

claude mcp add sudo -s user -- \
  /path/to/mcp-sudo/.venv/bin/python /path/to/mcp-sudo/server.py

On first use, call store_password once to cache credentials.

Support the project ❤

Ko-fi: https://ko-fi.com/kamaru

Contact

Portfolio / general: [email protected]
Commercial / licensing: [email protected]