🔐 API Manager MCP Server

An enhanced MCP (Model Context Protocol) server for securely managing API keys that works seamlessly with Claude Desktop and Claude Code.

✨ Features

🔒 Security First

• Secure file permissions (600) for environment files

• Atomic file operations to prevent corruption

• Automatic backups before deletions

• Value masking for safe display

• Input validation for all operations

📊 Smart Organization

• Automatic categorization of API keys based on service providers

• Advanced search across key names and categories

• Statistics and analytics for your API key usage

• Export functionality in multiple formats

🛠️ Enhanced Functionality

• Comprehensive logging for audit trails

• Command-line interface with flexible options

• Error handling with detailed feedback

• Backup management with timestamped backups

🎯 Supported Categories

• AI/LLM Services: Anthropic, OpenAI, Google AI, Groq, Mistral, DeepSeek, etc.

• Database & Storage: Supabase, Neo4j, Qdrant, Pinecone, Airtable, etc.

• Communication: Discord, Slack, Twilio, Telegram, etc.

• Development Tools: GitHub, Firebase, Vercel, Netlify, etc.

• Cloud & Hosting: AWS, Azure, GCP, Railway, Heroku, etc.

• And many more...

🚀 Quick Start

Prerequisites

• Python 3.8 or higher

• Claude Desktop or Claude Code

Installation

1. Clone the repository:

git clone https://github.com/yourusername/API_Manager_MCPServer.git
cd API_Manager_MCPServer

2. Install dependencies:

pip install -r requirements.txt

3. Configure for Claude Desktop:

Add to your Claude Desktop configuration file (claude_desktop_config.json):

{
  "mcpServers": {
    "api-manager": {
      "command": "python",
      "args": ["/path/to/API_Manager_MCPServer/api_manager.py"],
      "env": {}
    }
  }
}

4. Configure for Claude Code:

Add to your Claude Code MCP settings:

{
  "mcp": {
    "servers": {
      "api-manager": {
        "command": "python",
        "args": ["/path/to/API_Manager_MCPServer/api_manager.py"]
      }
    }
  }
}

Basic Usage

Once configured, you can use the API Manager through Claude with natural language:

"List my API keys"
"Add a new OpenAI API key"
"Search for Discord keys"
"Show statistics about my API keys"
"Create a backup of my environment file"

📖 Detailed Usage

Available Commands

🔍 Query Commands

list_api_keys - List all API keys with categories

• show_values: Show actual values (default: false)

• category: Filter by specific category

get_api_key - Get a specific API key by name

• key_name: Name of the key to retrieve

search_api_keys - Search for API keys by name or category

• query: Search term

• show_values: Show actual values (default: false)

list_categories - List all categories with counts

📝 Management Commands

add_api_key - Add or update an API key

• key_name: Name of the API key

• value: The API key value

delete_api_key - Delete an API key

• key_name: Name of the key to delete

🛠️ Utility Commands

backup_env_file - Create timestamped backup

get_stats - Show detailed statistics

export_keys - Export keys in JSON or ENV format

• format: "json" or "env" (default: json)

• include_values: Include actual values (default: false)

help - Show comprehensive help

Command Line Options

python api_manager.py --help
python api_manager.py --version
python api_manager.py --env-file /custom/path/.env
python api_manager.py --log-level DEBUG

Environment File Location

By default, API keys are stored in:

• ~/.config/api_manager/.env

You can specify a custom location using:

• Command line: --env-file /path/to/.env

• Environment variable: API_MANAGER_ENV_FILE

🔧 Configuration

Environment File Format

# API Manager Environment File
# Created on 2024-01-01 12:00:00

# AI Services
ANTHROPIC_API_KEY=sk-ant-1234567890abcdef
OPENAI_API_KEY=sk-1234567890abcdef

# Database Services
SUPABASE_API_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9

# Communication
DISCORD_BOT_TOKEN=ODcyNzM0NjI5NjU2MjE3NjAw

Security Best Practices

1. File Permissions: The environment file is automatically created with secure permissions (600)

2. Backups: Always create backups before making changes

3. Value Masking: Use show_values=false when listing keys

4. Logging: Monitor the log file for any suspicious activity

5. Access Control: Limit access to the environment file location

🧪 Testing

Run the test suite:

# Install test dependencies
pip install pytest pytest-asyncio pytest-cov

# Run tests
pytest tests/

# Run with coverage
pytest tests/ --cov=api_manager --cov-report=html

📊 Monitoring and Logs

The API Manager creates detailed logs in api_manager.log:

# View recent activity
tail -f api_manager.log

# Search for specific operations
grep "Tool called" api_manager.log

🔧 Development

Project Structure

API_Manager_MCPServer/
├── api_manager.py          # Main MCP server
├── requirements.txt        # Dependencies
├── setup.py               # Package configuration
├── README.md              # This file
├── LICENSE                # License file
├── tests/                 # Test suite
│   ├── __init__.py
│   ├── test_api_manager.py
│   └── test_integration.py
├── docs/                  # Documentation
│   ├── configuration.md
│   ├── security.md
│   └── troubleshooting.md
└── examples/              # Usage examples
    ├── claude_desktop_config.json
    └── usage_examples.md

Contributing

1. Fork the repository

2. Create a feature branch

3. Make your changes

4. Add tests for new functionality

5. Submit a pull request

📜 License

This project is licensed under the MIT License - see the LICENSE file for details.

🤝 Support

• Issues: GitHub Issues

• Discussions: GitHub Discussions

• Documentation: Full Documentation

🚧 Roadmap

• Web UI for API key management

• Integration with popular password managers

• Multi-environment support (dev, staging, prod)

• API key rotation notifications

• Advanced audit logging

• Team collaboration features

🙏 Acknowledgments

• Built on the Model Context Protocol (MCP) by Anthropic

• Inspired by the need for secure API key management in AI workflows

• Community feedback and contributions

⚠️ Security Notice: API keys are sensitive credentials. Always follow security best practices and never commit API keys to version control systems.