Skip to main content
Glama
Sign In
Secret MCP

Secret MCP

by AKarenin
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Local

Secret MCP

A desktop app for managing secrets with an MCP server that lets AI coding assistants write .env files without ever seeing the secret values.

Why?

Generating .env file is a pain, especially because there is no vibing out of it. But its an even stronger pain to leak secrets to AI coding assistants run on the cloud.

Related MCP server: secrets-mcp-server

Features

  • Desktop App: Simple window for managing secrets (name, description, value)

  • MCP Server: Two tools for AI assistants:

    • search_secrets: Find secrets by name/description (never exposes values)

    • write_env: Write secrets to .env files (values go straight to file, never to AI)

  • Local Storage: All secrets stored locally in SQLite

  • npm Package: Just npx secret-mcp - no build required

Installation

Desktop App

Download from Releases or build from source:

npm install
npm run tauri build

MCP Server Setup

Add to your MCP client config:

"secret-mcp": {
  "command": "npx",
  "args": ["secret-mcp"]
}

Usage

  1. Open Secret MCP app

  2. Add your secrets (API keys, tokens, etc.)

  3. When coding with AI, it will automatically use search_secrets and write_env to set up your .env files (Note: the name of the secret is the variable name in the .env file)

MCP Tools

search_secrets

Search for secrets by name or description. Returns names and descriptions only - values are never exposed.

// Input
{ query: "openai" }

// Output
[
  { name: "OPENAI_API_KEY", description: "OpenAI API key" }
]

write_env

Write secrets to a .env file. Values go directly from your local database to the file - never passed through the AI.

// Input
{
  keys: ["OPENAI_API_KEY", "DATABASE_URL"],
  path: "/Users/you/project/.env"
}

// Output
"Successfully wrote 2 secret(s) to /Users/you/project/.env"

Data Storage

Secrets are stored locally:

  • macOS: ~/Library/Application Support/secret-mcp/secrets.db

  • Linux: ~/.local/share/secret-mcp/secrets.db

  • Windows: %APPDATA%/secret-mcp/secrets.db

Security

  • Secret values never leave your machine (except to .env files you specify)

  • MCP server only returns secret names and descriptions to the AI

  • .env files written with 600 permissions (owner read/write only)

Tech Stack

  • Desktop: Tauri 2.0 + Svelte 5 + TypeScript

  • MCP Server: Node.js + @modelcontextprotocol/sdk + better-sqlite3

License

MIT

This server cannot be deployed

Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd

Maintenance

ActivityInactive
ResponsivenessNo recent community issues

Resources

Related MCP Connectors

Related MCP Servers

  • secrets-mcp-server

    KauaLealz
    A
    license
    C
    quality
    C
    maintenance
    Enables AI agents to securely store and manage encrypted secrets locally while using them indirectly through environment-variable injection or file writes, so plaintext values never enter the agent's context.
    8
    MIT

  • vault-mcp

    MHasnainJafri
    A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI coding agents to securely inject API keys and secrets into environment files, configs, or commands without the agent ever seeing the secret values.
    8 npm
    MIT

  • VibeDNA Vault MCP

    marstudio360
    A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI assistants to fetch API keys and tokens on demand from an encrypted local vault instead of pasting them into chats, and to scan project folders for plaintext secrets. It also manages credential entries with templates, rotation tracking, usage logs, backups, and .env export.
    1
    MIT