Skip to main content
Glama
dazaffino

@ztechlab/mcp-server-yubikey

by dazaffino
OverviewSchemaRelated ServersScoreDiscussions
JavaScript
Local

@ztechlab/mcp-server-yubikey

MCP server that exposes YubiKey management tools to AI agents via the ykman CLI.

Read-only. No writes, no resets, no destructive operations.

Prerequisites

Related MCP server: Obsidian Readonly MCP

Install

npm install -g @ztechlab/mcp-server-yubikey

Configuration

Claude Code

Add to your .mcp.json:

{
  "mcpServers": {
    "yubikey": {
      "command": "mcp-server-yubikey"
    }
  }
}

Claude Desktop

Add to your Claude Desktop config (claude_desktop_config.json):

{
  "mcpServers": {
    "yubikey": {
      "command": "npx",
      "args": ["-y", "@ztechlab/mcp-server-yubikey"]
    }
  }
}

Custom ykman path

If ykman is not on PATH, set the YKMAN_PATH environment variable:

{
  "mcpServers": {
    "yubikey": {
      "command": "mcp-server-yubikey",
      "env": {
        "YKMAN_PATH": "C:/Program Files/Yubico/YubiKey Manager CLI/ykman.exe"
      }
    }
  }
}

Tools

All tools are read-only. Tools that accept a serial parameter will use the only connected key if omitted.

Tool

Description

yubikey-list

List all connected YubiKeys with serial numbers

yubikey-info

Device details: serial, firmware, model, interfaces, enabled applications

yubikey-otp-info

OTP slot configuration (Slot 1 and Slot 2 status)

yubikey-fido-info

FIDO2 applet status: PIN set, credentials stored, remaining retries

yubikey-fido-credentials

List FIDO2 resident credentials (passkeys). Requires PIN.

yubikey-fido-fingerprints

List enrolled fingerprints (YubiKey Bio). Requires PIN.

yubikey-piv-info

PIV application status: management key type, PIN/PUK retries, certificate slots

yubikey-piv-keys-info

PIV key metadata for a specific slot (9a, 9c, 9d, 9e)

yubikey-openpgp-info

OpenPGP application status: key slots, touch policies, signature count

yubikey-openpgp-keys-info

OpenPGP key slot metadata (sig, enc, aut, att)

Examples

Once configured, ask your AI agent:

  • "What YubiKey is plugged in?"

  • "Show me the FIDO2 status on my YubiKey"

  • "What PIV certificates are on this key?"

  • "List the OTP slot configuration"

License

MIT

Install Server
A
license - permissive license
A
quality
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Tools

View all tools

Related MCP Servers

  • Secops Toolkit MCP

    glatinone
    A
    license
    A
    quality
    A
    maintenance
    Local, no-API-key MCP server with seven defensive SecOps tools for AI agents: extract IOCs (IPs, URLs, domains, hashes, CVE IDs) from text with defang/refang, hash strings, estimate password entropy, and run CIDR/subnet checks. Built on FastMCP with no outbound network calls.
    Last updated
    9
    MIT

View all related MCP servers

Related MCP Connectors

  • MCP Fortress

    Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.

  • AIﾉアカリ☆ Agent Trust Receipt

    Read-only Remote MCP for externally grounded AI agent trust receipts.

  • pocket-agent-mcp

    Pocket Agent (aipocketagent.com) MCP server — read tools for personas, apps, and product info.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/dazaffino/mcp-server-yubikey'

If you have feedback or need assistance with the MCP directory API, please join our Discord server