Skip to content
mcp/harbor
Gemini CLI

superuser for Gemini CLI

io.github.fitzyracing1/superuser

Permission-gated superuser (sysadmin) MCP agent with enterprise guardrails and audit.

client:Gemini CLI transport:stdio runtime:pypi

Install superuser in Gemini CLI

~/.gemini/settings.json · windows: %USERPROFILE%\.gemini\settings.json

Held in this page only — never stored, logged, or sent anywhere but back to your screen. 

{
  "mcpServers": {
    "superuser": {
      "command": "uvx",
      "args": [
        "superuser"
      ],
      "env": {
        "SUPERUSER_HUMAN_OWNER": "<SUPERUSER_HUMAN_OWNER>",
        "SUPERUSER_APPROVAL_AT": "<SUPERUSER_APPROVAL_AT>",
        "AI_DEFENSE_INSPECTION_API_KEY": "<AI_DEFENSE_INSPECTION_API_KEY>",
        "DUO_TOKEN_URL": "<DUO_TOKEN_URL>",
        "DUO_CLIENT_ID": "<DUO_CLIENT_ID>",
        "DUO_CLIENT_SECRET": "<DUO_CLIENT_SECRET>",
        "STRIPE_API_KEY": "<STRIPE_API_KEY>"
      }
    }
  }
}

Gemini expands $VAR and ${VAR} inside env values, so a secret can live in your shell rather than this file. Gemini CLI docs

superuser in other clients

superuser MCP server