1. Conduid
  2. Blockchain
  3. Locksmith
MCP server · Blockchain

Locksmith

by · github.com/lorem-dev/locksmith

Secure middleware that gives AI agents access to secrets stored in vault providers (macOS Keychain, gopass, 1Password), with per-session caching and vault-delegated authorization (Keychain, GPG passphrase, 1Password desktop app).

Unclaimed aiai-agentsclaude-codecodexmcpmcp-servers
InstallView source
34Low

Scored 2 hours ago · breakdown

About Locksmith

Locksmith is an MCP server published by lorem-dev in the Blockchain category: secure middleware that gives AI agents access to secrets stored in vault providers (macOS Keychain, gopass, 1Password), with per-session caching and vault-delegated authorization (Keychain, GPG passphrase, 1Password desktop app). It has been installed 0 times through Conduid.

The repository has 4 stars and 0 forks.

Install

Clone
git clone https://github.com/lorem-dev/locksmith

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Locksmith

Powered by Claude · Grounded in docs

I know everything about Locksmith. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • ·Scoped permissionsNot checked yet.

Releases

v0.4.0v0.4.0 · 24 May 2026Features `locksmith mcp run --url` now resolves templated headers on JSON-RPC `error` or tool-level `result.isError`, not only on HTTP `401/403`; one retry per session, structural-only detection (no keyword matching on…
v0.3.0v0.3.0 · 15 May 2026Features add lazy secret resolution to `locksmith mcp run` - the vault is touched on the first MCP request rather than at startup, in both local (stdio-shim) and proxy (templated headers deferred until 401/403) modes; the daemon session is…
v0.2.0v0.2.0 · 12 May 2026Locksmith v0.2.0 introduces a first-class MCP server wrapper so AI clients can inject secrets into Model Context Protocol servers without relying on shell substitution. It also tightens diagnostics for the new wrapper and refreshes the…
v0.1.0v0.1.0 · 7 May 2026Locksmith v0.1.0 is the first public release. It ships the secret-management daemon, CLI, two reference vault plugins, agent integrations for the major AI clients, and the install/release pipeline. Daemon & CLI gRPC daemon over a local…
Questions

About Locksmith

How do I install Locksmith?

Run git clone https://github.com/lorem-dev/locksmith, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Locksmith safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Locksmith still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.