#secrets

Secrets vault for Claude Code. Encrypt API keys, tokens and passwords with AES-256. Full audit logs, MCP access rules, and zero-knowledge mode. Secrets never appear in chat.

Security scanner MCP server that protects AI coding agents from generating vulnerable code. Uses tree-sitter AST analysis to detect OWASP Top 10 vulnerabilities, hardcoded secrets, and prompt injection attacks. Includes package hallucination detection across 4.3M packages (npm, PyPI, RubyGems, crates.io, pub.dev, CPAN, Raku). Works with Claude Desktop, Claude Code, Cursor, Cline, and any MCP-compatible client. Full feature list (for detailed descriptions): • 275+ security rules covering Python, JavaScript, TypeScript, Java, Go, Ruby, PHP, C/C++, Rust, C#, Terraform, Kubernetes • AST-based detection with tree-sitter (falls back to regex when unavailable) • Taint analysis for tracking user input to dangerous sinks • Package hallucination detection: verifies 4.3M+ packages across 7 ecosystems • Prompt injection detection: blocks exfiltration, jailbreaks, and malicious instructions • Automatic fix suggestions for common vulnerabilities • Zero config: works instantly with npx • CWE/OWASP metadata for compliance reporting

Store and retrieve API keys and secrets locally for Claude Code. No cloud services, no .env files scattered across projects. Secrets are stored in a SQLite database on your machine and accessed via MCP tools. Supports add, get, list, search, update, and delete operations with category organization.

Provides a bridge for scripts and AI agents to interact with a self-hosted Vaultwarden instance.

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning

Keeper Secrets Manager - MCP (Model Context Protocol) server implementation

Nody provides a powerful MCP Composer for creating and managing custom MCP servers. It enables you to personalize each tool's name and description to add context, helping agents use them with fewer tokens. It manages the configurations and secrets of MCP servers in one secure place, making it easier to deploy and scale your AI toolsets efficiently.

A lightweight way to use environment variables in your Cursor MCP server definitions.

A lightweight way to use environment variables in your Cursor MCP server definitions.

A lightweight utility that securely loads API keys for Cursor MCP servers from your home directory, preventing accidental exposure of secrets in repositories. Keep your credentials safe while maintaining seamless integration with AI coding assistants.