From 657a43cff4b0d16b720ceb32bfbdb3f656576191 Mon Sep 17 00:00:00 2001 From: Cuihtlauac ALVARADO Date: Tue, 8 Sep 2026 09:30:32 +0200 Subject: [PATCH] Add tarides/sudo-proxy to Command Line MCP server that runs privileged, mutating commands (local or over SSH) with a mandatory single-keypress human approval on every one; escalates via sudo, stores no password. Rust, MIT, Linux, local. Already indexed on Glama. --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 44dd9e155..ab2dd0fdf 100644 --- a/README.md +++ b/README.md @@ -815,6 +815,7 @@ Run commands, capture output and otherwise interact with shells and command line - [zb-ss/servonaut](https://github.com/zb-ss/servonaut) [![zb-ss/servonaut MCP server](https://glama.ai/mcp/servers/@zb-ss/servonaut/badges/score.svg)](https://glama.ai/mcp/servers/@zb-ss/servonaut) 🐍 🏠 🍎 🐧 - Manage AWS EC2, Hetzner, OVH and custom SSH servers: run commands, fetch logs, CloudWatch/CloudTrail queries, fleet health snapshots, IP banning, S3 — with readonly/standard/dangerous guard tiers and a JSONL audit trail. - [blinkingbit-oss/execkit](https://github.com/blinkingbit-oss/execkit) [![blinkingbit-oss/execkit MCP server](https://glama.ai/mcp/servers/blinkingbit-oss/execkit/badges/score.svg)](https://glama.ai/mcp/servers/blinkingbit-oss/execkit) 🦀 🏠 🍎 🐧 - Stateful, structured, auditable shell sessions for AI agents over local, SSH, and Docker. Secret redaction, output budgeting, SSH host-key verification, and a loopback read-only browser viewer that streams the live transcript. - [Easton-OU/rootpilot-mcp](https://github.com/Easton-OU/rootpilot-mcp) [![Easton-OU/rootpilot-mcp MCP server](https://glama.ai/mcp/servers/Easton-OU/rootpilot-mcp/badges/score.svg)](https://glama.ai/mcp/servers/Easton-OU/rootpilot-mcp) 📇 🏠 🍎 🪟 🐧 - Safe, read-only SSH diagnostics for Linux/Docker servers: a fixed 38-command whitelist (no arbitrary execution), secret redaction, per-command timeouts. Collects evidence; your model does the reasoning. `npx @rootpilot/mcp-ssh-diagnose` +- [tarides/sudo-proxy](https://github.com/tarides/sudo-proxy) [![tarides/sudo-proxy MCP server](https://glama.ai/mcp/servers/tarides/sudo-proxy/badges/score.svg)](https://glama.ai/mcp/servers/tarides/sudo-proxy) 🦀 🏠 🐧 - Run privileged, mutating commands — locally or over SSH — with a mandatory single-keypress human approval on every one. The model calls `execute`; a TUI Y/N prompt gates the command, then `sudo` escalates, and no password is ever stored. Sanitized env allowlist, no-shell `argv` execution, replay protection, and audit logging. `cargo install sudo-proxy`. ### 💬 Communication