1. Conduid
  2. Blockchain
  3. Locksmith
MCP server · Blockchain

Locksmith

by · github.com/lorem-dev/locksmith

Secure middleware that gives AI agents access to secrets stored in vault providers (macOS Keychain, gopass, 1Password), with per-session caching and vault-delegated authorization (Keychain, GPG passphrase, 1Password desktop app).

Unclaimed aiai-agentsclaude-codecodexmcpmcp-servers
InstallView source
34Low

Scored a month ago · breakdown

About Locksmith

Locksmith is an MCP server published by lorem-dev in the Blockchain category: secure middleware that gives AI agents access to secrets stored in vault providers (macOS Keychain, gopass, 1Password), with per-session caching and vault-delegated authorization (Keychain, GPG passphrase, 1Password desktop app).

The repository has 4 stars and 0 forks, with the last commit 5 months ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/lorem-dev/locksmith

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Locksmith

Powered by Claude · Grounded in docs

I know everything about Locksmith. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.4.0v0.4.0 · 24 May 2026Features `locksmith mcp run --url` now resolves templated headers on JSON-RPC `error` or tool-level `result.isError`, not only on HTTP `401/403`; one retry per session, structural-only detection (no keyword matching on…
v0.3.0v0.3.0 · 15 May 2026Features add lazy secret resolution to `locksmith mcp run` - the vault is touched on the first MCP request rather than at startup, in both local (stdio-shim) and proxy (templated headers deferred until 401/403) modes; the daemon session is…
v0.2.0v0.2.0 · 12 May 2026Locksmith v0.2.0 introduces a first-class MCP server wrapper so AI clients can inject secrets into Model Context Protocol servers without relying on shell substitution. It also tightens diagnostics for the new wrapper and refreshes the…
v0.1.0v0.1.0 · 7 May 2026Locksmith v0.1.0 is the first public release. It ships the secret-management daemon, CLI, two reference vault plugins, agent integrations for the major AI clients, and the install/release pipeline. Daemon & CLI gRPC daemon over a local…
Questions

About Locksmith

How do I install Locksmith?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Locksmith safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Locksmith still maintained?

Yes — the latest release is v0.4.0 (24 May 2026), and the last commit was 5 months ago. The repository has 4 stars.