{
  "markdown": "# mcp-sudo\n\n<!-- mcp-name: io.github.KamaruSama/mcp-sudo -->\n\n**MCP server for running `sudo` commands with encrypted password storage.**\n\nExposes 4 tools to persist a sudo password (encrypted with a machine-bound key) and invoke privileged commands without re-entering credentials. Designed for single-user Linux workstations.\n\n📖 **[อ่านภาษาไทย →](README.th.md)**\n\n---\n\n## Tools\n\n| Tool | Purpose |\n|---|---|\n| [`store_password`](docs/en/tools/store_password.md) | Store sudo password (encrypted, one-time) |\n| [`sudo_exec`](docs/en/tools/sudo_exec.md) | Run shell command with sudo |\n| [`has_password`](docs/en/tools/has_password.md) | Check if password is stored |\n| [`clear_password`](docs/en/tools/clear_password.md) | Remove stored password |\n\n---\n\n## Security model\n\n- Password is encrypted with **Fernet** (AES-128-CBC + HMAC-SHA256).\n- Encryption key is **derived** from `machine-id` + `USER` — never stored on disk.\n- Decryption only succeeds on the same machine with the same user.\n- Encrypted blob lives at `~/.config/claude-sudo-mcp/credential.enc` (chmod 600).\n\nThis is **not a secrets manager**. Treat this as \"remember my sudo password for this session on this box.\" If your machine-id is copied to another box or another user reads the MCP process, the password can be recovered.\n\n---\n\n## Install\n\n```bash\ncd /path/to/mcp-sudo\nuv venv --python 3.12 .venv\nuv pip install --python .venv/bin/python mcp cryptography\n\nclaude mcp add sudo -s user -- \\\n  /path/to/mcp-sudo/.venv/bin/python /path/to/mcp-sudo/server.py\n```\n\nOn first use, call `store_password` once to cache credentials.\n\n---\n\n## Support the project ❤\n\n- **Ko-fi:** https://ko-fi.com/kamaru\n\n---\n\n## Contact\n\n- **Portfolio / general:** k.kamarux@gmail.com\n- **Commercial / licensing:** contact@likezara.com\n\n---\n\nCopyright © 2026 **likezara™**. All rights reserved.\nDeveloped by **Kamaru** (pen name).\n",
  "bytes": 1879,
  "sha": "36e6b294714a8ea0f4e9db5c2aec77cafc7974ba54ab176d4cf4c7a53d731363",
  "repo_slug": "kamarusama/mcp-sudo",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_kamarusama_mcp_sudo_4124913a/readme"
}