MCP server for running sudo commands with encrypted password storage. Part of likezara™ MCP suite.
SaferSkills independently audited Mcp Sudo (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<!-- mcp-name: io.github.KamaruSama/mcp-sudo -->
MCP server for running `sudo` commands with encrypted password storage.
Exposes 4 tools to persist a sudo password (encrypted with a machine-bound key) and invoke privileged commands without re-entering credentials. Designed for single-user Linux workstations.
📖 [อ่านภาษาไทย →](README.th.md)
| Tool | Purpose |
|---|---|
store_password | Store sudo password (encrypted, one-time) |
sudo_exec | Run shell command with sudo |
has_password | Check if password is stored |
clear_password | Remove stored password |
machine-id + USER — never stored on disk.~/.config/claude-sudo-mcp/credential.enc (chmod 600).This is not a secrets manager. Treat this as "remember my sudo password for this session on this box." If your machine-id is copied to another box or another user reads the MCP process, the password can be recovered.
cd /path/to/mcp-sudo
uv venv --python 3.12 .venv
uv pip install --python .venv/bin/python mcp cryptography
claude mcp add sudo -s user -- \
/path/to/mcp-sudo/.venv/bin/python /path/to/mcp-sudo/server.pyOn first use, call store_password once to cache credentials.
Copyright © 2026 likezara™. All rights reserved. Developed by Kamaru (pen name).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.