diff --git a/README.md b/README.md
index 44dd9e155..ab2dd0fdf 100644
--- a/README.md
+++ b/README.md
@@ -815,6 +815,7 @@ Run commands, capture output and otherwise interact with shells and command line
 - [zb-ss/servonaut](https://github.com/zb-ss/servonaut) [![zb-ss/servonaut MCP server](https://glama.ai/mcp/servers/@zb-ss/servonaut/badges/score.svg)](https://glama.ai/mcp/servers/@zb-ss/servonaut) 🐍 🏠 🍎 🐧 - Manage AWS EC2, Hetzner, OVH and custom SSH servers: run commands, fetch logs, CloudWatch/CloudTrail queries, fleet health snapshots, IP banning, S3 — with readonly/standard/dangerous guard tiers and a JSONL audit trail.
 - [blinkingbit-oss/execkit](https://github.com/blinkingbit-oss/execkit) [![blinkingbit-oss/execkit MCP server](https://glama.ai/mcp/servers/blinkingbit-oss/execkit/badges/score.svg)](https://glama.ai/mcp/servers/blinkingbit-oss/execkit) 🦀 🏠 🍎 🐧 - Stateful, structured, auditable shell sessions for AI agents over local, SSH, and Docker. Secret redaction, output budgeting, SSH host-key verification, and a loopback read-only browser viewer that streams the live transcript.
 - [Easton-OU/rootpilot-mcp](https://github.com/Easton-OU/rootpilot-mcp) [![Easton-OU/rootpilot-mcp MCP server](https://glama.ai/mcp/servers/Easton-OU/rootpilot-mcp/badges/score.svg)](https://glama.ai/mcp/servers/Easton-OU/rootpilot-mcp) 📇 🏠 🍎 🪟 🐧 - Safe, read-only SSH diagnostics for Linux/Docker servers: a fixed 38-command whitelist (no arbitrary execution), secret redaction, per-command timeouts. Collects evidence; your model does the reasoning. `npx @rootpilot/mcp-ssh-diagnose`
+- [tarides/sudo-proxy](https://github.com/tarides/sudo-proxy) [![tarides/sudo-proxy MCP server](https://glama.ai/mcp/servers/tarides/sudo-proxy/badges/score.svg)](https://glama.ai/mcp/servers/tarides/sudo-proxy) 🦀 🏠 🐧 - Run privileged, mutating commands — locally or over SSH — with a mandatory single-keypress human approval on every one. The model calls `execute`; a TUI Y/N prompt gates the command, then `sudo` escalates, and no password is ever stored. Sanitized env allowlist, no-shell `argv` execution, replay protection, and audit logging. `cargo install sudo-proxy`.
 
 ### 💬 <a name="communication"></a>Communication