How do I use agent-keys?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@agent-keys check my OpenAI API key" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

agent-keys

by Gonzih

Overview Schema Related Servers Score Discussions

TypeScript

agent-keys

npm version License: MIT

MCP server that lets AI agents autonomously acquire and manage API keys.

The Problem

AI agents frequently need API keys to accomplish tasks — sending emails, making calls, running models, storing data. Today this requires a human to manually create accounts, navigate dashboards, and paste keys into configs. agent-keys gives agents a structured, secure interface to discover services, get provisioning instructions, store retrieved keys, verify they work, and export them as environment variables — all without human intervention after initial setup.

Related MCP server: Agentic Vault

Quick Start

Via npx (no install required)

npx @gonzih/agent-keys

MCP Configuration

Add to your MCP config file (e.g. ~/.claude/claude_desktop_config.json or ~/.config/claude-code/config.json):

{
  "mcpServers": {
    "agent-keys": {
      "command": "npx",
      "args": ["@gonzih/agent-keys"],
      "env": {
        "AGENT_KEYS_SECRET": "your-strong-encryption-secret"
      }
    }
  }
}

Claude Code Config

Add to your Claude Code settings:

{
  "mcpServers": {
    "agent-keys": {
      "command": "npx",
      "args": ["@gonzih/agent-keys"],
      "env": {
        "AGENT_KEYS_SECRET": "your-strong-encryption-secret"
      }
    }
  }
}

Tools

`list_services`

List all 26 supported services with their category, description, signup URL, and whether a key is stored.

Input: none

Output:

[
  {
    "name": "openai",
    "displayName": "OpenAI",
    "category": "ai",
    "description": "AI research company providing GPT-4, DALL-E, Whisper, and embeddings APIs.",
    "signupUrl": "https://platform.openai.com/signup",
    "has_key": true,
    "freetier": "$5 free credit for new accounts (limited time)",
    "envVarName": "OPENAI_API_KEY"
  }
]

`get_api_key`

Retrieve a stored API key. Returns the key if found, or provisioning guidance if not.

Input:

{ "service": "openai" }

Output (found):

{
  "found": true,
  "service": "openai",
  "key": "sk-proj-...",
  "stored_at": "2024-01-15T10:30:00.000Z",
  "envVarName": "OPENAI_API_KEY"
}

Output (not found):

{
  "found": false,
  "service": "openai",
  "message": "No API key stored for OpenAI. Use provision_api_key to get instructions.",
  "signupUrl": "https://platform.openai.com/signup"
}

`store_api_key`

Store an API key in the encrypted vault.

Input:

{
  "service": "openai",
  "key": "sk-proj-...",
  "metadata": { "org": "my-org", "created_by": "agent" }
}

Output:

{
  "success": true,
  "service": "openai",
  "displayName": "OpenAI",
  "message": "API key for OpenAI stored successfully.",
  "envVarName": "OPENAI_API_KEY"
}

`check_api_key`

Verify a stored key is still valid by calling the service's test endpoint.

Input:

{ "service": "openai" }

Output:

{
  "valid": true,
  "service": "openai",
  "displayName": "OpenAI",
  "status": 200,
  "message": "API key for OpenAI is valid."
}

Services with test endpoints: openai, sendgrid, stripe, github, groq, together-ai, elevenlabs, deepgram, replicate, brave-search, serper, tavily.

`provision_api_key`

Get step-by-step instructions and the direct signup URL for acquiring an API key.

Input:

{ "service": "groq" }

Output:

{
  "service": "groq",
  "displayName": "Groq",
  "signupUrl": "https://console.groq.com/login",
  "steps": [
    "Go to https://console.groq.com/login",
    "Create a free account or sign in",
    "Navigate to https://console.groq.com/keys",
    "Click 'Create API Key'",
    "Give it a name and click 'Submit'",
    "Copy the generated API key immediately (shown only once)",
    "Store it using store_api_key with service 'groq'"
  ],
  "freetier": "Free tier with generous rate limits"
}

`remove_api_key`

Delete a key from the vault.

Input:

{ "service": "openai" }

Output:

{
  "success": true,
  "service": "openai",
  "message": "API key for OpenAI removed from vault."
}

`export_env`

Generate shell export statements for stored keys.

Input:

{ "services": ["openai", "anthropic"] }

Or omit services to export all stored keys.

Output:

{
  "exports": [
    "export OPENAI_API_KEY=\"sk-proj-...\"",
    "export ANTHROPIC_API_KEY=\"sk-ant-...\""
  ],
  "shell": "export OPENAI_API_KEY=\"sk-proj-...\"\nexport ANTHROPIC_API_KEY=\"sk-ant-...\"",
  "count": 2
}

Supported Services

AI (5 services)

Name	Display Name	Free Tier	Env Var
`openai`	OpenAI	$5 credit (new accounts)	`OPENAI_API_KEY`
`anthropic`	Anthropic	Free tier with rate limits	`ANTHROPIC_API_KEY`
`replicate`	Replicate	Pay-per-use, free community models	`REPLICATE_API_TOKEN`
`together-ai`	Together AI	$25 free credit	`TOGETHER_API_KEY`
`groq`	Groq	Free tier, generous limits	`GROQ_API_KEY`

Communication (6 services)

Name	Display Name	Free Tier	Env Var(s)
`twilio`	Twilio	$15 trial credit	`TWILIO_ACCOUNT_SID`, `TWILIO_AUTH_TOKEN`
`sendgrid`	SendGrid	100 emails/day forever	`SENDGRID_API_KEY`
`mailgun`	Mailgun	100 emails/day, 3 months	`MAILGUN_API_KEY`
`postmark`	Postmark	100 emails/month forever	`POSTMARK_API_TOKEN`
`vonage`	Vonage (Nexmo)	$2 trial credit	`VONAGE_API_KEY`, `VONAGE_API_SECRET`
`telnyx`	Telnyx	$1 credit on signup	`TELNYX_API_KEY`

Voice (3 services)

Name	Display Name	Free Tier	Env Var
`elevenlabs`	ElevenLabs	10,000 chars/month	`ELEVENLABS_API_KEY`
`deepgram`	Deepgram	$200 free credit	`DEEPGRAM_API_KEY`
`assemblyai`	AssemblyAI	$50 free credit	`ASSEMBLYAI_API_KEY`

Infrastructure (8 services)

Name	Display Name	Free Tier	Env Var
`stripe`	Stripe	No monthly fee	`STRIPE_SECRET_KEY`
`github`	GitHub	Free for personal use	`GITHUB_TOKEN`
`cloudflare`	Cloudflare	Free plan available	`CLOUDFLARE_API_TOKEN`
`vercel`	Vercel	Hobby plan free	`VERCEL_TOKEN`
`railway`	Railway	$5 credit/month	`RAILWAY_TOKEN`
`supabase`	Supabase	2 free projects	`SUPABASE_ANON_KEY`
`planetscale`	PlanetScale	5GB free storage	`PLANETSCALE_SERVICE_TOKEN`
`upstash`	Upstash	10,000 commands/day	`UPSTASH_REDIS_REST_TOKEN`

Data (4 services)

Name	Display Name	Free Tier	Env Var
`serper`	Serper	2,500 free searches	`SERPER_API_KEY`
`brave-search`	Brave Search	2,000 queries/month	`BRAVE_API_KEY`
`tavily`	Tavily	1,000 calls/month	`TAVILY_API_KEY`
`firecrawl`	Firecrawl	500 credits on signup	`FIRECRAWL_API_KEY`

Adding a New Service

Edit src/registry.ts and add a new object to the registry array:

{
  name: 'my-service',           // slug used in tool calls
  displayName: 'My Service',    // human-readable name
  category: 'ai',               // 'communication' | 'ai' | 'voice' | 'infrastructure' | 'data'
  description: 'What it does.',
  signupUrl: 'https://myservice.com/signup',
  docsUrl: 'https://docs.myservice.com/api',
  envVarName: 'MY_SERVICE_API_KEY',
  freetier: 'Description of free tier',
  programmatic: false,
  provisioningSteps: [
    'Go to https://myservice.com/signup',
    'Create an account',
    'Navigate to API Keys',
    'Click Create Key',
    'Copy the key',
    'Store it using store_api_key with service "my-service"',
  ],
  testEndpoint: {               // optional
    url: 'https://api.myservice.com/v1/me',
    method: 'GET',
    headers: (key: string) => ({ Authorization: `Bearer ${key}` }),
    successStatus: 200,
  },
}

Then run npm run build.

Security

Encryption: AES-256-GCM with scrypt key derivation (N=16384, r=8, p=1)
Per-write randomness: Each vault write uses a fresh 16-byte salt and 16-byte IV
Auth tag: GCM auth tag prevents undetected tampering
Plaintext fallback: If AGENT_KEYS_SECRET is not set, keys are stored unencrypted with a warning
Vault location: ~/.agent-keys/vault.json by default; override with AGENT_KEYS_VAULT
Secret management: Never commit AGENT_KEYS_SECRET to source control; use env vars or a secrets manager

Development

# Install dependencies
npm install

# Build TypeScript
npm run build

# Run directly with tsx (no build step)
npm run dev

License

MIT

Install Server

license - permissive license

quality

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

–Release cycle

–Releases (12mo)

Commit activity

Resources

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Tools

Related MCP Servers

ServeMyAPI
Security Developer Tools
Jktfe
F
license
-
quality
B
maintenance
A personal MCP server for securely storing and accessing API keys across projects using the macOS Keychain, letting AI assistants and applications retrieve credentials through natural language.
Updated 2 months ago (2026-05-31 20:14 UTC)
25
Agentic Vault
Security Shell Access
AliProgrammin
A
license
-
quality
C
maintenance
MCP server that lets AI agents call APIs without ever seeing the credentials, using a local encrypted vault and per-secret allowlist policies for HTTP requests and subprocess environment variables.
Updated 4 months ago (2026-04-26 15:14 UTC)
1
AGPL 3.0
Forage MCP Server
Autonomous Agents Developer Tools
isaac-levine
A
license
-
quality
D
maintenance
An MCP server that enables AI agents to automatically discover, install, and learn to use new tools without manual configuration.
Updated 6 months ago (2026-02-21 23:02 UTC)
54
15
MIT
safe-key-mcp
Security Shell Access Command Line
Yormede
A
license
-
quality
C
maintenance
MCP server enabling AI agents to use secrets (API keys, tokens) via encrypted vault, executing HTTP/shell/SSH actions server-side while never exposing secret values to the AI.
Updated a month ago (2026-07-13 14:15 UTC)
MIT

View all related MCP servers

Related MCP Connectors

microservices.sh
MCP server for AI agents to plan, verify, and deploy Cloudflare-native apps.
Raziel
MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis
Motecloud Memory
Cloud-hosted MCP server for durable AI memory

View all MCP Connectors

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Gonzih/agent-keys'

If you have feedback or need assistance with the MCP directory API, please join our Discord server

agent-keys

The Problem

Quick Start

Via npx (no install required)

MCP Configuration

Claude Code Config

Tools

list_services

get_api_key

store_api_key

check_api_key

provision_api_key

remove_api_key

export_env

Supported Services

AI (5 services)

Communication (6 services)

Voice (3 services)

Infrastructure (8 services)

Data (4 services)

Adding a New Service

Security

Development

License

Maintenance

Resources

Looking for Admin?

Tools

Related MCP Servers

ServeMyAPI

Agentic Vault

Forage MCP Server

safe-key-mcp

Related MCP Connectors

Latest Blog Posts

MCP directory API

`list_services`

`get_api_key`

`store_api_key`

`check_api_key`

`provision_api_key`

`remove_api_key`

`export_env`