Keyblind
Store and resolve API keys and tokens so your coding agent never sees plaintext secrets in prompts.
Overview
Keyblind is an MCP server for the Operate phase that keeps agent secrets in an encrypted vault and resolves them at runtime so LLMs never see plaintext credentials.
What is this MCP server?
- Encrypted vault with secrets resolved at runtime, not embedded in LLM context
- stdio MCP via npx keyblind start (-y keyblind)
- Targets AI-agent workflows where accidental secret leakage is a common solo-builder mistake
- Version 0.1.4 npm package keyblind on Model Context Protocol registry
- Registry version 0.1.4
- Single npm package keyblind with stdio transport
- Positional args: npx -y keyblind start
Community signal: 2 GitHub stars.
What problem does it solve?
Solo builders leak API keys into agent chats, logs, and repo snippets because there is no MCP-native way to hand credentials to tools without model exposure.
Who is it for?
Indie builders running multiple MCP integrations who want a small encrypted vault instead of copying keys into every agent session.
Skip if: Teams that already enforce a full enterprise KMS, HSM, or centralized secret platform with audit trails Keyblind does not replace.
What do I get? / Deliverables
After registering Keyblind, agents call vault-backed tools for secrets while prompts and transcripts stay free of raw tokens.
- stdio MCP server resolving vault secrets at tool-call time
- Agent workflows that reference secret names instead of plaintext values
- Reduced risk of accidental credential exposure in LLM transcripts
Recommended MCP Servers
Journey fit
How it compares
MCP secrets vault integration, not an agent skill or generic .env documentation.
Common Questions / FAQ
Who is Keyblind for?
Solo and indie builders using AI coding agents who need API keys available to tools without putting secrets in model context.
When should I use Keyblind?
Use it when you connect production or staging APIs to MCP workflows and want encrypted storage plus runtime resolution before scaling agent automation.
How do I add Keyblind to my agent?
Add the stdio MCP entry with npx -y keyblind start per server.json, then point your Claude Code, Cursor, or compatible client at that server.