#secrets

proxykey is a credential proxy and vault for API keys. Your real keys (OpenAI, Anthropic, Telegram, Stripe and 25+ providers) are encrypted with AES-256-GCM and never leave the server. Apps and AI agents authenticate with revocable "passes" (vlt_...) that carry per-pass IP binding, rate limits and full request logs. This MCP server lets an agent manage those passes: list_providers, list_secrets, create_pass, create_pending_pass, update_pass, rotate_pass, revoke_pass, delete_pass, rebind_pass_ip, get_pass_logs, get_pass_stats and more (13 tools). A "read the real key" operation does not exist in the toolset — only a human can enter the original key, in the panel. A leaked pass is a non-event: wrong IP is denied, limits cap abuse, and revocation is one click without touching the original. Hosted endpoint: https://mcp.proxykey.org/mcp (Streamable HTTP). Auth: a Bearer mcp_... token minted in the panel at https://app.proxykey.org. Docs: https://app.proxykey.org/docs.html

Real security scanners for AI coding agents: SAST (441 rules), secret detection (419+ patterns), dependency CVEs, MCP/skill vetting, MITRE ATT&CK. Real scanners, not the model guessing. Rust, Apache-2.0, free.

MCP server giving AI agents full SSH access with secret-safe environment variable injection. Supports persistent sessions, structured command execution, SFTP file transfer, port forwarding, and automatic output redaction that prevents secrets from reaching the LLM.

Conduit is a local-first gateway that puts every MCP server behind one endpoint shared by all your AI coding tools (Claude, Cursor, VS Code, Codex, and more). Set up and authenticate each server once, then connect every client to Conduit instead of re-adding servers everywhere. Keys stay in your OS keychain (never in client configs), lazy discovery exposes just 3 meta-tools so your agent's context stays small no matter how many servers you add, and you can toggle servers on/off live without restarting the client. Proxies both local (stdio) and remote (http/SSE) servers, with a built-in audit log and tool playground. No Docker, no cloud, no account. Free and open source (MIT). Windows, macOS, and Linux.

MCP server for Wundervault zero-knowledge secret management. Exposes vault secrets to AI agents via the Model Context Protocol — secrets are decrypted server-side and never returned to the agent in plaintext.

Find every leaked secret on your machine. Scans .env files, shell history, and config directories for API keys, tokens, and credentials. 35+ patterns including AWS, Stripe, GitHub, OpenAI, and more. Everything runs locally. Zero network calls.

Share encrypted, self-destructing secrets directly from Claude, Cursor, or Windsurf. Zero-knowledge E2E encryption. Agent-blind input (env:, file:, dotenv:) — secrets never enter LLM context.

Share encrypted, self-destructing secrets directly from Claude, Cursor, or Windsurf. Zero-knowledge E2E encryption. Agent-blind input sources (env:, file:, dotenv:) — secrets never pass through LLM context.

Burn-after-read encrypted notes for AI agents. Share secrets with users without them appearing in chat history — create a one-time URL, send it, they read it once and it's gone. AES-256-GCM E2E encrypted, decryption key never sent to any server.

The guardian layer for AI agents. Scoped sessions with spend limits (Gate), AES-encrypted secrets (Vault), immutable audit trail with anomaly detection (Watch), and proxy mode that intercepts every MCP tool call for policy enforcement. Human-in-the-loop approvals, webhooks, 10 MCP tools, REST API. Works with Claude, Cursor, Windsurf, and any MCP client.

Secrets vault for Claude Code. Encrypt API keys, tokens and passwords with AES-256. Full audit logs, MCP access rules, and zero-knowledge mode. Secrets never appear in chat.

Security scanner MCP server that protects AI coding agents from generating vulnerable code. Uses tree-sitter AST analysis to detect OWASP Top 10 vulnerabilities, hardcoded secrets, and prompt injection attacks. Includes package hallucination detection across 4.3M packages (npm, PyPI, RubyGems, crates.io, pub.dev, CPAN, Raku). Works with Claude Desktop, Claude Code, Cursor, Cline, and any MCP-compatible client. Full feature list (for detailed descriptions): • 275+ security rules covering Python, JavaScript, TypeScript, Java, Go, Ruby, PHP, C/C++, Rust, C#, Terraform, Kubernetes • AST-based detection with tree-sitter (falls back to regex when unavailable) • Taint analysis for tracking user input to dangerous sinks • Package hallucination detection: verifies 4.3M+ packages across 7 ecosystems • Prompt injection detection: blocks exfiltration, jailbreaks, and malicious instructions • Automatic fix suggestions for common vulnerabilities • Zero config: works instantly with npx • CWE/OWASP metadata for compliance reporting

Store and retrieve API keys and secrets locally for Claude Code. No cloud services, no .env files scattered across projects. Secrets are stored in a SQLite database on your machine and accessed via MCP tools. Supports add, get, list, search, update, and delete operations with category organization.

Provides a bridge for scripts and AI agents to interact with a self-hosted Vaultwarden instance.

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning

Keeper Secrets Manager - MCP (Model Context Protocol) server implementation

Nody provides a powerful MCP Composer for creating and managing custom MCP servers. It enables you to personalize each tool's name and description to add context, helping agents use them with fewer tokens. It manages the configurations and secrets of MCP servers in one secure place, making it easier to deploy and scale your AI toolsets efficiently.

A lightweight way to use environment variables in your Cursor MCP server definitions.

A lightweight way to use environment variables in your Cursor MCP server definitions.

A lightweight utility that securely loads API keys for Cursor MCP servers from your home directory, preventing accidental exposure of secrets in repositories. Keep your credentials safe while maintaining seamless integration with AI coding assistants.