Skip to content
mcp/harbor
Windsurf

superuser for Windsurf

io.github.fitzyracing1/superuser

Permission-gated superuser (sysadmin) MCP agent with enterprise guardrails and audit.

client:Windsurf transport:stdio runtime:pypi

Install superuser in Windsurf

~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json

Held in this page only — never stored, logged, or sent anywhere but back to your screen. 

{
  "mcpServers": {
    "superuser": {
      "command": "uvx",
      "args": [
        "superuser"
      ],
      "env": {
        "SUPERUSER_HUMAN_OWNER": "<SUPERUSER_HUMAN_OWNER>",
        "SUPERUSER_APPROVAL_AT": "<SUPERUSER_APPROVAL_AT>",
        "AI_DEFENSE_INSPECTION_API_KEY": "<AI_DEFENSE_INSPECTION_API_KEY>",
        "DUO_TOKEN_URL": "<DUO_TOKEN_URL>",
        "DUO_CLIENT_ID": "<DUO_CLIENT_ID>",
        "DUO_CLIENT_SECRET": "<DUO_CLIENT_SECRET>",
        "STRIPE_API_KEY": "<STRIPE_API_KEY>"
      }
    }
  }
}

Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs

superuser in other clients

superuser MCP server