
Mcp Sudo
Let your coding agent run privileged shell commands on your dev machine without pasting your sudo password into chat every time.
Overview
io.github.KamaruSama/mcp-sudo is an Operate-phase MCP server that runs sudo commands for your agent using Fernet-encrypted passwords tied to machine-id and user.
What is this MCP server?
- Exposes MCP tools to run sudo-backed shell commands from Claude Code, Cursor, or other MCP clients
- Stores sudo credentials with Fernet encryption keyed to machine-id plus user identity
- Stdio transport PyPI package mcp-sudo v1.0.1
- Reduces repeated manual password entry during agent-driven local automation
- Registry version 1.0.1 on PyPI identifier mcp-sudo
- Fernet encryption with machine-id plus user binding
What problem does it solve?
Agents that need root on your laptop force you to either skip automation or leak sudo credentials into conversation logs.
Who is it for?
Solo developers on a dedicated Linux or macOS box who trust local agent automation and want scripted sudo without constant re-prompting.
Skip if: Shared CI runners, production servers, or anyone who refuses any local credential storage for privileged access.
What do I get? / Deliverables
After registration, your agent can invoke approved elevated commands through MCP while credentials stay encrypted locally instead of in chat.
- MCP tools that execute sudo-wrapped shell commands on the registered host
- Fernet-encrypted sudo secret bound to machine-id and user
- Repeatable elevated automation without passwords in chat
Recommended MCP Servers
Journey fit
Privileged local command execution is an ongoing ops concern when agents automate setup, deploy scripts, and host maintenance. Infra subphase covers machine-level administration and scripted maintenance that often requires elevated rights.
How it compares
Local sudo bridge MCP server, not a cloud secrets manager or a policy-only shell skill.
Common Questions / FAQ
Who is io.github.KamaruSama/mcp-sudo for?
It is for indie builders and power users who run AI agents against their own machine and need occasional sudo for setup or ops scripts.
When should I use io.github.KamaruSama/mcp-sudo?
Use it when agent-driven tasks routinely hit permission walls and you want encrypted local sudo handling instead of typing passwords into the model.
How do I add io.github.KamaruSama/mcp-sudo to my agent?
Install the PyPI package mcp-sudo, configure stdio MCP in Claude Code or Cursor with the server command, complete one-time sudo password setup per machine-user pair, then restart the client.