Local-first MCP credential broker: agents use gated APIs through scoped, audited requests without ever seeing the secret.

MCP server that gates vault credentials behind Chat approval and executes commands with secrets injected locally, so the AI agent never sees the credential.

Healthcare provider credentialing is your first line of defense against fraud, exclusions, and liability.

Capability-based credential broker and MCP server for coding agents. Use approved APIs without injecting secrets into prompts, argv, env, or agent code.

Let coding agents use your credentials without reading them

Local credential control for AI coding agents.

Passport & visa system for AI agent credentials. Detect, classify, and govern API keys, tokens, and secrets across MCP, OpenAI, Anthropic, LangChain, and more. Encrypted vault, policy engine, audit trails, delegation chains. Drop-in MCP server replaces plaintext credential storage.

Stdio MCP bridge for KeyHand — credential dropbox with agent-blind injection. Clients hand off API keys via magic-link form; AI agents use them via HTTP calls without ever seeing the plaintext.

MCP server (Model Context Protocol) that stores GitHub and GitLab tokens in an encrypted vault and retrieves them by org/group keyword, with per-project scoping. Self-hosted credential manager for AI agents.

Local-first credential manager & validator for red teams / pentest：致力于 ALL IN ONE 的本地凭据管理与验证平台 keyrealm（凭域）。 允许将红队渗透测试中获取的散落在各处的 API Key、云厂商 AK/SK、机器人 Token、邮箱授权码、登录态等集中加密保管、便捷验证与快速利用。多插件多类别，单条·批量·定时验证，内置 MCP Server；AES-256-GCM 字段级加密，每凭据可选代理出口，加密/明文备份可跨库还原；数据只存本机、不联网同步，Windows / macOS / Linux。

MCP that allows API usage without sharing the actual credentials with Agent

Encrypted credential vault for Node with an MCP server for agents

Persistent identity, email, saved accounts and scoped credentials for AI agents

Give your AI agents a valet key, not your master key. Local credential broker for AI agents (MCP) on macOS: Touch ID per credential, proxy calls, audit log.

Local encrypted credential vault for AI agents — Argon2id + Fernet + Telegram 2FA + MCP

A simple CUI-based AWS STS credential management tool and local MCP server for using AWS fanctions that needs MFA.

MCP-native credential vault — AI agents authenticate without holding secrets

The certification authority for AI agents. Adversarial exams, Ed25519-signed credentials, examiner economy. https://cardcatalog.ai

Scoped credential access for AI agents via Gazebo's hosted MCP endpoint.

Credential isolation for AI agents. Store, guard, and record — your agent never sees your API keys.

MCP server for credential isolation in LLM agents — bots use passwords without seeing them

mcp-warden, the local-first credential broker MCP server for AI coding agents, as a prebuilt binary for your platform.

Centralized credential store for AI sessions — cross-platform (macOS/Windows) MCP server + CLI

Credential isolation for AI agents. Local-first transparent proxy — your agent never sees your API keys.

Local, offline credential vault built for handing credentials to AI agents safely: per-project cryptographic boundaries, agent requests you approve, MCP server, two-factor, macOS desktop app. Encrypted at rest, no account, no cloud, no telemetry. 2.0.0-beta.1, source-available.

Cryptographic proxy and credential vending for LLM applications. Zero secrets on disk. mTLS everywhere. Apache 2.0.

Self-hosted shared memory, encrypted credentials, and scoped connectors for AI agents. MCP and HTTP for Claude Code, Codex, Cursor, and custom runtimes.

Give your AI agent a real browser identity — MCP server with persistent personas, anti-detection browser, and credential vault.

Local, encrypted credential vault with an MCP server — your AI agent logs in by itself, your passwords never touch the chat.

One Bearer token, all your services. Self-hosted credential store + API proxy + MCP server for agents and scripts.

ClawLock — MCP-native identity, credential vault, and audit layer for AI agents. Ed25519 identity, AES-256-GCM vault, immutable audit log.

Attestix - AI agent identity and signed evidence tooling. DID-based identity, W3C Verifiable Credentials, governance evidence, delegation chains, and reputation scoring.

🔌 Exposes C2PA 2.2 Durable Content Credentials over MCP — soft + hard binding (Digimarc-compatible). MIT. By MEOK AI Labs.

🔐 Agent-first encrypted credential manager — AI agents can use your secrets but never read them. MCP server, Cloudflare integration, output scrubbing, macOS Keychain, zero-knowledge backup.

MCP server for Zetrix Verifiable Credentials (VC) and Verifiable Presentations (VP) — apply, issue, download VC and create, cache, verify VP via the Zetrix BaaS API.

MCP server that gives AI agents persistent memory across sessions. Context recall, encrypted credentials, session notes, export/import — zero external requests.

MCP server detecting leaked secrets/credentials (32+ provider rules). In the official MCP Registry: io.github.eltociear/secrets-audit-mcp. Pure stdlib, zero deps.

MCP server that reads C2PA Content Credentials: what an image declares about its own origin, and whether that declaration still verifies

MCP server for Passbolt: AI agents search, share and use vault credentials without passwords entering the chat (secret sinks, read-only mode, doctor); optional lazy tool loading.

Self-hosted secrets manager with REST, CLI and MCP surfaces. Encrypted at rest, per-consumer scoping and a proxy that gives AI agents credentials without letting them hold one.

OpenKeylet — Local password and credential manager for AI agents via MCP. Use passwords, API keys, SSH, and TOTP while keeping hidden plaintext out of model context by default.

🔐 The secrets manager that understands your dependency graph. Maps Issuer → Credential → Project → Deployment → URL. Detects supply-chain risk in npm/Cargo deps. Free, open source, works offline.

npx-able MCP server for seekrit (https://seekrit.dev), a zero-knowledge secrets manager and credential broker for AI agents — let Claude Code and other MCP clients provision, manage, and inject secrets.

Bolvrk CLI — the deterministic checker for code. Verifies database migrations (Postgres; SQLite and SurrealDB in beta) and scans for committed credentials; runs as a CLI and an MCP server. Free rules run locally; the full corpus runs in the hosted service

ValtAG (Valt for Agents) — the ask-first credential gate for AI agents: agents request, humans approve, leases expire, everything audited. Self-hosted MCP-native vault. Config-only integration with nginx, Caddy, Traefik, Envoy, APISIX, Higress and LiteLLM.

MCP server, CLI and Node.js module for write-only, age-encrypted credential deposits into self-hosted Vaultwarden (Bitwarden-compatible). AI agents (Claude Code, Codex) and deployment scripts save new passwords and secure notes without vault read access.

Agent runtime guard — full-stack runtime interception for AI agents (Agent 运行时全栈拦截). A zero-dependency MCP server that blocks destructive commands, credential theft, SSRF and injection in real time, with Ed25519 evidence receipts. Works with Claude Code,

AI-powered secret scanner for code and git history. Finds leaked API keys, tokens and credentials with near-zero false positives by pairing Rényi entropy detection with LLM adjudication. Runs as a CLI, pre-commit hook, GitHub Action, MCP server or Claude Code hook. Single Go binary, MIT licensed.

CLI and MCP server for C2PA / Content Credentials provenance: report what a file claims, or fully verify it — COSE signature, certificate chain, hash bindings, RFC 3161 timestamp. Reads JPEG, PNG, WebP, GIF, TIFF/DNG, HEIC, AVIF, SVG, MP4, MOV, AVI, WAV, MP3 and PDF. Wraps github.com/richardwooding/c2pa.

Agent Identity Trust tools for AI agents. Capabilities: register agent identity, issue credential, verify credential. Built by MEOK AI Labs.

Encrypted credential vault and remote MCP gateway

ActAs MCP: persistent identity, email and scoped credentials for AI agents

Local PII and credential detection and redaction for AI agents (MCP server)

🔐 Vaultwarden / Bitwarden MCP server for credential-aware AI agents

tarot-draw MCP — wraps StupidAPIs (keyless — no credential needed)

Zero-dependency database MCP server with secure local credential management. Supports MySQL, PostgreSQL, and SQLite.

MCP server for SUNAT RUC registry lookup — query Peruvian tax ID (RUC) information. No credentials required. Single Rust binary distributed via npm.

The local-first secrets manager and credential command center for independent developers — CLI + MCP server

Open-source MCP server for Google Play developer workflows. Runs locally with your own credentials.

Reference MCP server for observing Vercel projects and deployments. A stateless stdio server demonstrating clean configuration and credential handling for deployment workflows.