1. Conduid
  2. Security
  3. Cred MCP
MCP server · Security

Cred MCP

by · github.com/raychao-oao/cred-mcp

Credential management MCP server for AI agents — bridges Vaultwarden/Bitwarden with Claude Code, with secrets that never leak into LLM context.

Unclaimed security
InstallView source
34Low

Scored a month ago · breakdown

About Cred MCP

Cred MCP is an MCP server published by raychao-oao in the Security category: credential management MCP server for AI agents — bridges Vaultwarden/Bitwarden with Claude Code, with secrets that never leak into LLM context.

The repository has 1 stars and 0 forks, with the last commit yesterday. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/raychao-oao/cred-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (11)

copy_stashRead stored secret by `name`, put on clipboard for `ttl_seconds` (default 30, max 600). Auto-restores prior clipboard contents after the TTL unless the user has paste-and-replaced it.

Parameters not published.

delete_stashRemove a stored secret by `name`.

Parameters not published.

list_stashList metadata for all stored secrets (`name`, `source`, `created_at`). Values are never returned. Useful for migration: see what has already been moved into safe storage.

Parameters not published.

pingHealth check. Returns server version + current time.

Parameters not published.

request_authorizationCheck consumer registry ACL and issue a single-use auth token bound to `(item_id, consumer_id, purpose)`. Triggers biometric prompt if `approval_mode: required`.

Parameters not published.

save_stashRead user's clipboard, store under `name` in OS keychain. Clipboard is left untouched after — manage it as your normal workflow.

Parameters not published.

vault_addAdd a new login item to the vault. Password sourced via `"dialog"` (native GUI, default) or `"clipboard"` — never via the chat.

Parameters not published.

vault_copyCopy a vault item's login password to the clipboard with a TTL.

Parameters not published.

vault_sealVerify the consumer bundle, consume the auth token, fetch plaintext from vault, HPKE-encrypt it for the consumer's session key, return a `SealedBox`. Plaintext never leaves cred-mcp.

Parameters not published.

vault_searchSearch your Vaultwarden vault by name, username, or URI. Returns item metadata (never passwords).

Parameters not published.

vault_updateUpdate fields on an existing vault item (name, username, URIs). Password update uses the same `"dialog"` / `"clipboard"` sources as `vault_add`.

Parameters not published.

Ask AI

✦

Ask AI about Cred MCP

Powered by Claude · Grounded in docs

I know everything about Cred MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Cred MCP

How do I install Cred MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Cred MCP safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Cred MCP still maintained?

Yes — the last commit was yesterday. The repository has 1 stars and 0 forks.