- Conduid
- Marketplace
- #secrets-management
MCP servers tagged secrets-management
92 live MCP servers tagged "secrets-management", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with secrets-management.
Agentic Vault
Open-source MCP server that lets AI agents call APIs without ever seeing the credentials. Policy-enforced secret injection into HTTP calls and subprocesses, with encrypted audit t…
Edgevault
Edge-native configuration, secrets, and feature-flag management on the Cloudflare Developer Platform — sub-10ms edge reads, per-workspace strong consistency, real-time updates, an…
Agentkms
Cryptographic proxy and credential vending for LLM applications. Zero secrets on disk. mTLS everywhere. Apache 2.0.
Keyhand MCP
Stdio MCP bridge for KeyHand — credential dropbox with agent-blind injection. Clients hand off API keys via magic-link form; AI agents use them via HTTP calls without ever seeing…
Keysecrets MCP
MCP wrapper for a self-hosted, post-quantum, end-to-end-encrypted secrets vault (X25519 + ML-KEM-768).
Sikkerkey MCP
The SikkerKey MCP server is a local binary that lets an AI client manage your vault through structured tool calls. It speaks the Model Context Protocol over stdio and exposes 16 t…
Lokalite
Local-first secrets manager for macOS. Encrypted vault, menu bar app, CLI, and an MCP server that loads secrets into your coding agent's shell instead of the chat. No cloud, no ac…
Merkle
Local-first MCP vault for Claude Code — LLMs hold opaque handles, operators approve every reveal, every access leaves a BLAKE3 hash. Rust 2024 / DDD + Hexagonal.
Aegis Kms
An open-source, KMIP-compliant Key Management Service — usable as an embeddable library or as a standalone server, with first-class support for AI agents.
AnB MCP
MCP server front-end for AnB — let AI agents use secrets without ever seeing the plaintext. Go + official MCP go-sdk; security logic delegated to alice (redaction, exec allowlist,…
Ciphergate
Self-hosted secrets manager with REST, CLI and MCP surfaces. Encrypted at rest, per-consumer scoping, and a proxy that gives AI agents credentials without letting them hold one.
Vaultwarden Secrets
Secure secrets management with Vaultwarden/Bitwarden CLI, encrypted caching, and macOS Keychain
YAET
YAET — All-in-one remote connection manager. SSH/Telnet/WinRM/Serial terminals, SCP/FTP/SMB/WebDav/S3 file explorer, VNC/SPICE/RDP remote desktop. Built with Angular + Electron. P…
Revoke Probe
Local-first reachability check for AI coding-agent and MCP workflows
Rutile
Least-privilege secrets broker for AI agents
Keychain Secrets Toolkit
Bezpieczne klucze API do AI w macOS Keychain + wrappery do MCP w Claude Code. Toolkit z walidacją cross-provider i wzorcami dla developerów.
Rotate Env
Bulk-rotate a leaked API-key env var across every .env and .mcp.json, safely. Dry-run by default, never prints the secret; agent- and CI-safe.
Nakimi
Secure, plugin-based API credential management for AI assistants with age encryption
Secure Agent Starter
Starter for AI agents that never hold their own secrets: screen untrusted input and fetch API keys just-in-time with 1Claw. Part 1 runs with no account.
K8s Agent Secrets Hardening
Which Kubernetes controls actually protect an agent's LLM credential. RBAC, restricted Pod Security and token automount all on, and one file read still yields the key.
Dotlocker
dot.locker — secure runtime-scoped file storage and synchronization for teams and agents.
ProxyCreds
Ephemeral credential broker for LLM agents: keeps real API keys, proxies & SSH creds in an encrypted vault, hands out short-lived tokens over MCP.
Geslar CLI
Geslar CLI and MCP server - let AI agents use the secrets in your Geslar Skrinjar vaults without the values entering the AI context
Credentials Broker
A Model Context Protocol (MCP) server that provides a security layer for managing short-lived credentials and tokens. Eliminates hardcoded API keys by issuing time-limited, scoped…
KeyVault
Local encrypted vault + Cursor/Claude MCP for passwords, tokens, and notes (not Azure Key Vault)
Tokenstash
Your agent asks you for a key once. Never again — in any project, in any agent.
Contextlock
Local MCP safety layer that blocks secrets before AI coding agents see them.
Envpact
$0 serverless Git-backed secrets manager for solo devs: one private repo, shared keys, CLI + MCP + VS Code + GitHub Action.
Envguard Secrets Vault
EnvGuard Secrets Vault - Zero-Trust .env Auditor, AES-256 Armored Vault, Transformer, MCP Server & Studio UI (design influenced by Material 3)
LLM Secret Manager
The secret manager for LLM agents: create, rotate, and use secrets they can never read. OS-native keyvault (macOS Keychain) + zero-dependency MCP server + Claude Code guard hook.…
Scopehold MCP
Official ScopeHold MCP server: scoped, audited secret inventory and resolution for AI coding agents (Claude Code, Cursor, Codex).
Stillvault MCP
MCP server for Stillvault — human-approved secret release for AI agents, without the secret entering the model's context.
Claudepass
Secret manager for AI coding agents. Agents see Handles, never Secret values.
Vaultwarden Drop Slot MCP
Deposit-only credentials for Vaultwarden through MCP, CLI and Node.js. Encrypted inbox, private importer, portable Docker.
Akey
Encrypted credential vault for AI agents — one Rust binary, ciphertext synced across devices over git. Agents use secrets without ever seeing them.
Vaultsaas
Self-hosted MCP credential gate for AI agents — short-lived leases, human approval, one-command revoke, tamper-evident audit. Pure Apache-2.0, no SaaS.
Blindkey
Local-first credential broker for AI agents — secrets your agents can use but never see. 66 testable security constraints. Rust.
Agentkeys
Never-in-context credential broker with one-action revocation
Claude Secrets
GPG-encrypted credential manager for Claude Code MCP channels. Keeps API tokens out of .env files that Claude can read.
Vault MCP
Keeps your secrets in one age-encrypted file and hands them to an AI coding agent as MCP tools, so it can act with a credential without being able to read it.
Agent Vault
A local credential proxy for coding agents: the agent sends a placeholder and never holds the secret. Free and open source from ioLite Labs.
MCP
The FerrVault Kubernetes operator. Syncs secrets from FerrVault into native Kubernetes Secrets through the FerrVaultConnection and FerrVaultSecret CRDs.