superuser MCP Server
Permission-gated superuser (sysadmin) MCP agent with enterprise guardrails and audit.
superuser scores 55 (Fair), with no SPDX license recorded. It installs as a local process. It does not declare tools yet. Filed under Uncategorized. Install configs are generated for 10 clients. Being listed in the registry is not the same as being vendor-official.
Fair trust
55 of 100 from six public signals. Nobody can buy a point.
- Listed in the official MCP registry.
- No license recorded.
Where the 55 comes from
22 + 20 + 0 + 0 + 10 + 3 = 55. Each factor is capped, so no single signal can carry a listing.
Active in the official MCP registry, plus a known vendor namespace.
Registry: 22 of 30 points.How recently the repository saw a commit or release.
Maintenance: 20 of 20 points.GitHub stars and weekly downloads, on a log scale.
Popularity: 0 of 20 points.A clear, OSI-style open-source license.
License: 0 of 10 points.Not archived, a secure install path, a pinned version.
Security: 10 of 10 points.A real summary, a README with depth, listed tools.
Docs: 3 of 10 points.Install
Pick your client, copy the config, paste it in.
{ "mcpServers": { "fitzyracing1-super": { "command": "uvx", "args": [ "superuser" ], "env": { "SUPERUSER_HUMAN_OWNER": "", "SUPERUSER_APPROVAL_AT": "", "AI_DEFENSE_INSPECTION_API_KEY": "YOUR_AI_DEFENSE_INSPECTION_API_KEY", "DUO_TOKEN_URL": "", "DUO_CLIENT_ID": "", "DUO_CLIENT_SECRET": "YOUR_DUO_CLIENT_SECRET", "STRIPE_API_KEY": "YOUR_STRIPE_API_KEY" } } }}
Environment variables
| Name | Required | Notes |
|---|---|---|
SUPERUSER_HUMAN_OWNER | Optional | Human accountable for the agent's actions (recorded in every audit entry). |
SUPERUSER_APPROVAL_AT | Optional | Minimum risk level that triggers the human-approval gate: LOW, MEDIUM, HIGH, or CRITICAL. |
AI_DEFENSE_INSPECTION_API_KEYSecret | Optional | Cisco AI Defense Inspection API key for runtime tool-call/response inspection. |
DUO_TOKEN_URL | Optional | Cisco Duo OAuth 2.1 token endpoint (client-credentials) for per-tool-call authorization. |
DUO_CLIENT_ID | Optional | Cisco Duo OAuth client ID for the agent's non-human identity. |
DUO_CLIENT_SECRETSecret | Optional | Cisco Duo OAuth client secret. |
STRIPE_API_KEYSecret | Optional | Stripe secret API key for usage-based (metered) billing. |
Tools
All capabilitiesTools show up when the registry metadata or the repository README lists them. GitHub enrichment fills this in when a token is configured.
About
Permission-gated superuser (sysadmin) MCP agent with enterprise guardrails and audit.
FAQ
- What is superuser?
- Permission-gated superuser (sysadmin) MCP agent with enterprise guardrails and audit.
- How do I install superuser?
- Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.
- Is superuser official?
- No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.
- How is the trust score calculated?
- This listing scores 55 (Fair). The formula is published on the methodology page.
Reviews
No average · 0 publishedNo reviews yet. Used it? Tell the next person how it went.
Sign into review this server.