Permission-gated superuser (sysadmin) MCP agent with enterprise guardrails and audit.
Connect Runs on your machine
claude mcp add superuser -e SUPERUSER_HUMAN_OWNER=<SUPERUSER_HUMAN_OWNER> -e SUPERUSER_APPROVAL_AT=<SUPERUSER_APPROVAL_AT> -e AI_DEFENSE_INSPECTION_API_KEY=<AI_DEFENSE_INSPECTION_API_KEY> -e DUO_TOKEN_URL=<DUO_TOKEN_URL> -e DUO_CLIENT_ID=<DUO_CLIENT_ID> -e DUO_CLIENT_SECRET=<DUO_CLIENT_SECRET> -e STRIPE_API_KEY=<STRIPE_API_KEY> -- uvx superuser==0.1.0{
"mcpServers": {
"superuser": {
"command": "uvx",
"args": [
"superuser==0.1.0"
],
"env": {
"SUPERUSER_HUMAN_OWNER": "<SUPERUSER_HUMAN_OWNER>",
"SUPERUSER_APPROVAL_AT": "<SUPERUSER_APPROVAL_AT>",
"AI_DEFENSE_INSPECTION_API_KEY": "<AI_DEFENSE_INSPECTION_API_KEY>",
"DUO_TOKEN_URL": "<DUO_TOKEN_URL>",
"DUO_CLIENT_ID": "<DUO_CLIENT_ID>",
"DUO_CLIENT_SECRET": "<DUO_CLIENT_SECRET>",
"STRIPE_API_KEY": "<STRIPE_API_KEY>"
}
}
}
}{
"mcpServers": {
"superuser": {
"command": "uvx",
"args": [
"superuser==0.1.0"
],
"env": {
"SUPERUSER_HUMAN_OWNER": "<SUPERUSER_HUMAN_OWNER>",
"SUPERUSER_APPROVAL_AT": "<SUPERUSER_APPROVAL_AT>",
"AI_DEFENSE_INSPECTION_API_KEY": "<AI_DEFENSE_INSPECTION_API_KEY>",
"DUO_TOKEN_URL": "<DUO_TOKEN_URL>",
"DUO_CLIENT_ID": "<DUO_CLIENT_ID>",
"DUO_CLIENT_SECRET": "<DUO_CLIENT_SECRET>",
"STRIPE_API_KEY": "<STRIPE_API_KEY>"
}
}
}
}{
"servers": {
"superuser": {
"type": "stdio",
"command": "uvx",
"args": [
"superuser==0.1.0"
],
"env": {
"SUPERUSER_HUMAN_OWNER": "<SUPERUSER_HUMAN_OWNER>",
"SUPERUSER_APPROVAL_AT": "<SUPERUSER_APPROVAL_AT>",
"AI_DEFENSE_INSPECTION_API_KEY": "<AI_DEFENSE_INSPECTION_API_KEY>",
"DUO_TOKEN_URL": "<DUO_TOKEN_URL>",
"DUO_CLIENT_ID": "<DUO_CLIENT_ID>",
"DUO_CLIENT_SECRET": "<DUO_CLIENT_SECRET>",
"STRIPE_API_KEY": "<STRIPE_API_KEY>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
SUPERUSER_HUMAN_OWNEROptional | Human accountable for the agent's actions (recorded in every audit entry). |
SUPERUSER_APPROVAL_ATOptional | Minimum risk level that triggers the human-approval gate: LOW, MEDIUM, HIGH, or CRITICAL. |
AI_DEFENSE_INSPECTION_API_KEYOptional, secret | Cisco AI Defense Inspection API key for runtime tool-call/response inspection. |
DUO_TOKEN_URLOptional | Cisco Duo OAuth 2.1 token endpoint (client-credentials) for per-tool-call authorization. |
DUO_CLIENT_IDOptional | Cisco Duo OAuth client ID for the agent's non-human identity. |
DUO_CLIENT_SECRETOptional, secret | Cisco Duo OAuth client secret. |
STRIPE_API_KEYOptional, secret | Stripe secret API key for usage-based (metered) billing. |
Details
| Package | [email protected] (PYPI, stdio) |
| First published | 22 Oct 2026 |
| Last updated | 22 Oct 2026 |
| Registry name | io.github.fitzyracing1/superuser |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.