Skip to main content
Glama
deenesjakoruzh
echoomegaprime

Echo Vault

by echoomegaprime
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Hybrid

Echo Vault — credential broker MCP

Agents may USE credentials. Agents may NEVER READ credentials.

Opaque vault:// handles. AES-GCM at rest. Fail-closed. No get_secret tool. stdout/MCP redaction armed.

Repo: echoomegaprime/echo-credential-broker

Install on Grok, GPT, Claude

Full steps → docs/INSTALL.md

Client

Fast path

Grok

Install GitHub app · connector URL /api/mcp · header x-echo-agent: grok

GPT

Install Codex connector · import public/install/chatgpt.openapi.json

Claude

Install Claude app · Desktop: merge public/install/claude_desktop.json · Code: .mcp.json

git clone https://github.com/echoomegaprime/echo-credential-broker.git
cd echo-credential-broker
npm install
cp .env.example .env
npm run dev    # console + HTTP MCP
npm run mcp    # stdio MCP for Claude Desktop / Claude Code / Grok

Related MCP server: Credential Vault MCP

Tools (never return secrets)

vault_status · vault_list · vault_metadata · credential_health · credential_use · provider_request · github_get_user · github_get_repository · github_get_file · github_list_repositories · github_create_branch · github_create_or_update_file · cloudflare_zone_get · openai_account_status · stripe_balance · xai_account_status · audit_list · credential_rotate · credential_revoke

Allowlisted hosts only: api.github.com, api.cloudflare.com, api.openai.com, api.stripe.com, api.x.ai.

Stack

TanStack Start · Vite · AES-256-GCM vault · MCP JSON-RPC (/api/mcp + stdio).

Echo Prime Technologies.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • clavis-mcp-server

    KN0WBOT
    A
    license
    A
    quality
    B
    maintenance
    Secure credential management for AI agents — encrypted storage, auto-refresh, and rate limiting via a single MCP call. Supports OpenAI, Anthropic, Stripe, GitHub, Brave Search, Kalshi, Coinbase, plus generic API key and OAuth2 for any service.
    4
    47 npm
    MIT

  • Credential Vault MCP

    CipherSatoru
    A
    license
    Not graded
    quality
    C
    maintenance
    Enables secure credential storage for AI agents by encrypting secrets and providing agent-invisible references, ensuring sensitive data never leaks to the model.
    MIT

  • Failsafe MCP Server

    sunglc
    A
    license
    Not graded
    quality
    D
    maintenance
    Credential resilience for AI agents, providing AES-256 encrypted storage, automatic health checks, and failover to backup credentials for providers like OpenAI, Anthropic, GitHub, and Stripe.
    MIT

  • agentkeychain

    linsipeng
    A
    license
    Not graded
    quality
    A
    maintenance
    Provides a zero-knowledge credential vault for AI agents, allowing secure storage, retrieval, and management of secrets with cross-agent delegation and tamper-evident audit.
    MIT