← Back to search

io.github.KamaruSama/mcp-sudo

KamaruSama Scanned 1d ago

Run sudo commands with a Fernet-encrypted password bound to machine-id + user.

MCP Registry ↗
B
76.7 / 100

Versions

1.0.1latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 4

store_password
annotations: none low

Store sudo password encrypted. Only needs to be done once.

password str
sudo_exec
annotations: none low

Execute a command with sudo using the stored password. Args: command: The shell command to run with sudo. timeout: Timeout in seconds (default 120).

command str timeout int
has_password
annotations: none low

Check if a sudo password is already stored.

clear_password
annotations: none low

Remove the stored sudo password.

Permissions 3

filesystem low
Server uses filesystem capabilities via: os, pathlib
shell high
Server uses shell capabilities via: subprocess
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 34

low
Tool 'store_password' has no annotations annotation_checker · 100%
low
Tool 'sudo_exec' has no annotations annotation_checker · 100%
low
Tool 'has_password' has no annotations annotation_checker · 100%
low
Tool 'clear_password' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.27.0 (GHSA-hvrp-rf83-w775) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.27.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.27.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.27.0 (PYSEC-2026-3481) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.27.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.27.0 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@43.0.0 (GHSA-537c-gmf6-5ccf) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@43.0.0 (GHSA-79v4-65xg-pq4g) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@43.0.0 (GHSA-h4gh-qq45-vh27) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@43.0.0 (GHSA-jwv3-5hgf-82ww) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@43.0.0 (GHSA-m2h6-j472-rp4c) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@43.0.0 (GHSA-m959-cc7f-wv43) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@43.0.0 (GHSA-r6ph-v2qm-q3c2) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@43.0.0 (PYSEC-2026-1284) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@43.0.0 (PYSEC-2026-2141) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@43.0.0 (PYSEC-2026-35) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@43.0.0 (PYSEC-2026-3553) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@43.0.0 (PYSEC-2026-3554) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: store_password manifest_parser · 90%
info
Tool: sudo_exec manifest_parser · 90%
info
Tool: has_password manifest_parser · 90%
info
Tool: clear_password manifest_parser · 90%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%