Lets Claude run privileged Linux commands without prompting for your sudo password every time. You call store_password once to encrypt and cache your credentials using Fernet with a key derived from your machine ID and username, then use sudo_exec to run any shell command as root. The encrypted blob lives in your config directory with restrictive permissions. The security model assumes you trust the machine and user account. It's designed for single-user workstations where you want Claude to install packages, modify system files, or restart services without breaking flow. Also includes has_password and clear_password for credential lifecycle management.
claude mcp add --transport stdio kamarusama-mcp-sudo uvx mcp-sudo