Install sudo-proxy in Claude Code
curl -LO https://github.com/tarides/sudo-proxy/releases/download/v1.2.0/sudo-proxy-mcp-v1.2.0-x86_64-linux.mcpbDownload sudo-proxy-mcp-v1.2.0-x86_64-linux.mcpb and double-click it to install in Claude Desktop.MCP Bundles install in one click in Claude Desktop. Download the file, then open it.
Frequently asked questions
What does the sudo-proxy MCP server do?
Run privileged commands locally or over SSH, each gated by a single-keypress human approval before sudo, with audit logging and no stored password.
Is the sudo-proxy MCP server free?
Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.
Does sudo-proxy run locally or remotely?
Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.
How do I add sudo-proxy to Claude Code?
Run: curl -LO https://github.com/tarides/sudo-proxy/releases/download/v1.2.0/sudo-proxy-mcp-v1.2.0-x86_64-linux.mcpb
More command line & os automation MCP servers
View allGlasswarp
glasswarp/mcp-server
See and control your own Windows PC locally or remotely: UIA and screenshot observation, clicking, typing, dragging, scrolling, launching apps and Live View.
Macos
dockndevai/mcp-macos
Read-only-by-default Mac control: files, processes, screenshots and clipboard, with opt-in allowlisted shell commands, AppleScript and GUI input.
Mac Control
dockndevai/mcp-mac-control
Full Mac control: shell, AppleScript, files, processes and human-like GUI input with a screenshot loop, plus an optional safe mode with read-only, gated access.
Heliograph
dbhq-uk/heliograph
Run commands on machines you cannot SSH into, such as air-gapped or bastion-only hosts, via git, file shares or S3, with timestamped run logs.
Execkit
blinkingbit-oss/execkit
Stateful, auditable shell sessions over local, SSH and Docker, with secret redaction, output budgeting and a read-only live transcript viewer.
Rootpilot
Easton-OU/rootpilot-mcp
Read-only SSH diagnostics for Linux and Docker servers using a fixed command allowlist, with secret redaction and per-command timeouts.