How do I use agent-keys?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@agent-keys check my OpenAI API key" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

agent-keys

by Gonzih

Overview Schema Source Related Servers Discussions Admin

TypeScript

agent-keys

MCP server that lets AI agents autonomously acquire and manage API keys.

The Problem

AI agents frequently need API keys to accomplish tasks — sending emails, making calls, running models, storing data. Today this requires a human to manually create accounts, navigate dashboards, and paste keys into configs. agent-keys gives agents a structured, secure interface to discover services, get provisioning instructions, store retrieved keys, verify they work, and export them as environment variables — all without human intervention after initial setup.

Related MCP server: Agentic Vault

Quick Start

Via npx (no install required)

npx @gonzih/agent-keys

MCP Configuration

Add to your MCP config file (e.g. ~/.claude/claude_desktop_config.json or ~/.config/claude-code/config.json):

{
  "mcpServers": {
    "agent-keys": {
      "command": "npx",
      "args": ["@gonzih/agent-keys"],
      "env": {
        "AGENT_KEYS_SECRET": "your-strong-encryption-secret"
      }
    }
  }
}

Claude Code Config

Add to your Claude Code settings:

{
  "mcpServers": {
    "agent-keys": {
      "command": "npx",
      "args": ["@gonzih/agent-keys"],
      "env": {
        "AGENT_KEYS_SECRET": "your-strong-encryption-secret"
      }
    }
  }
}

Tools

`list_services`

List all 26 supported services with their category, description, signup URL, and whether a key is stored.

Input: none

Output:

[
  {
    "name": "openai",
    "displayName": "OpenAI",
    "category": "ai",
    "description": "AI research company providing GPT-4, DALL-E, Whisper, and embeddings APIs.",
    "signupUrl": "https://platform.openai.com/signup",
    "has_key": true,
    "freetier": "$5 free credit for new accounts (limited time)",
    "envVarName": "OPENAI_API_KEY"
  }
]

`get_api_key`

Retrieve a stored API key. Returns the key if found, or provisioning guidance if not.

Input:

{ "service": "openai" }

Output (found):

{
  "found": true,
  "service": "openai",
  "key": "sk-proj-...",
  "stored_at": "2024-01-15T10:30:00.000Z",
  "envVarName": "OPENAI_API_KEY"
}

Output (not found):

{
  "found": false,
  "service": "openai",
  "message": "No API key stored for OpenAI. Use provision_api_key to get instructions.",
  "signupUrl": "https://platform.openai.com/signup"
}

`store_api_key`

Store an API key in the encrypted vault.

Input:

{
  "service": "openai",
  "key": "sk-proj-...",
  "metadata": { "org": "my-org", "created_by": "agent" }
}

Output:

{
  "success": true,
  "service": "openai",
  "displayName": "OpenAI",
  "message": "API key for OpenAI stored successfully.",
  "envVarName": "OPENAI_API_KEY"
}

`check_api_key`

Verify a stored key is still valid by calling the service's test endpoint.

Input:

{ "service": "openai" }

Output:

{
  "valid": true,
  "service": "openai",
  "displayName": "OpenAI",
  "status": 200,
  "message": "API key for OpenAI is valid."
}

Services with test endpoints: openai, sendgrid, stripe, github, groq, together-ai, elevenlabs, deepgram, replicate, brave-search, serper, tavily.

`provision_api_key`

Get step-by-step instructions and the direct signup URL for acquiring an API key.

Input:

{ "service": "groq" }

Output:

{
  "service": "groq",
  "displayName": "Groq",
  "signupUrl": "https://console.groq.com/login",
  "steps": [
    "Go to https://console.groq.com/login",
    "Create a free account or sign in",
    "Navigate to https://console.groq.com/keys",
    "Click 'Create API Key'",
    "Give it a name and click 'Submit'",
    "Copy the generated API key immediately (shown only once)",
    "Store it using store_api_key with service 'groq'"
  ],
  "freetier": "Free tier with generous rate limits"
}

`remove_api_key`

Delete a key from the vault.

Input:

{ "service": "openai" }

Output:

{
  "success": true,
  "service": "openai",
  "message": "API key for OpenAI removed from vault."
}

`export_env`

Generate shell export statements for stored keys.

Input:

{ "services": ["openai", "anthropic"] }

Or omit services to export all stored keys.

Output:

{
  "exports": [
    "export OPENAI_API_KEY=\"sk-proj-...\"",
    "export ANTHROPIC_API_KEY=\"sk-ant-...\""
  ],
  "shell": "export OPENAI_API_KEY=\"sk-proj-...\"\nexport ANTHROPIC_API_KEY=\"sk-ant-...\"",
  "count": 2
}

Supported Services

AI (5 services)

Name	Display Name	Free Tier	Env Var
`openai`	OpenAI	$5 credit (new accounts)	`OPENAI_API_KEY`
`anthropic`	Anthropic	Free tier with rate limits	`ANTHROPIC_API_KEY`
`replicate`	Replicate	Pay-per-use, free community models	`REPLICATE_API_TOKEN`
`together-ai`	Together AI	$25 free credit	`TOGETHER_API_KEY`
`groq`	Groq	Free tier, generous limits	`GROQ_API_KEY`

Communication (6 services)

Name	Display Name	Free Tier	Env Var(s)
`twilio`	Twilio	$15 trial credit	`TWILIO_ACCOUNT_SID`, `TWILIO_AUTH_TOKEN`
`sendgrid`	SendGrid	100 emails/day forever	`SENDGRID_API_KEY`
`mailgun`	Mailgun	100 emails/day, 3 months	`MAILGUN_API_KEY`
`postmark`	Postmark	100 emails/month forever	`POSTMARK_API_TOKEN`
`vonage`	Vonage (Nexmo)	$2 trial credit	`VONAGE_API_KEY`, `VONAGE_API_SECRET`
`telnyx`	Telnyx	$1 credit on signup	`TELNYX_API_KEY`

Voice (3 services)

Name	Display Name	Free Tier	Env Var
`elevenlabs`	ElevenLabs	10,000 chars/month	`ELEVENLABS_API_KEY`
`deepgram`	Deepgram	$200 free credit	`DEEPGRAM_API_KEY`
`assemblyai`	AssemblyAI	$50 free credit	`ASSEMBLYAI_API_KEY`

Infrastructure (8 services)

Name	Display Name	Free Tier	Env Var
`stripe`	Stripe	No monthly fee	`STRIPE_SECRET_KEY`
`github`	GitHub	Free for personal use	`GITHUB_TOKEN`
`cloudflare`	Cloudflare	Free plan available	`CLOUDFLARE_API_TOKEN`
`vercel`	Vercel	Hobby plan free	`VERCEL_TOKEN`
`railway`	Railway	$5 credit/month	`RAILWAY_TOKEN`
`supabase`	Supabase	2 free projects	`SUPABASE_ANON_KEY`
`planetscale`	PlanetScale	5GB free storage	`PLANETSCALE_SERVICE_TOKEN`
`upstash`	Upstash	10,000 commands/day	`UPSTASH_REDIS_REST_TOKEN`

Data (4 services)

Name	Display Name	Free Tier	Env Var
`serper`	Serper	2,500 free searches	`SERPER_API_KEY`
`brave-search`	Brave Search	2,000 queries/month	`BRAVE_API_KEY`
`tavily`	Tavily	1,000 calls/month	`TAVILY_API_KEY`
`firecrawl`	Firecrawl	500 credits on signup	`FIRECRAWL_API_KEY`

Adding a New Service

Edit src/registry.ts and add a new object to the registry array:

{
  name: 'my-service',           // slug used in tool calls
  displayName: 'My Service',    // human-readable name
  category: 'ai',               // 'communication' | 'ai' | 'voice' | 'infrastructure' | 'data'
  description: 'What it does.',
  signupUrl: 'https://myservice.com/signup',
  docsUrl: 'https://docs.myservice.com/api',
  envVarName: 'MY_SERVICE_API_KEY',
  freetier: 'Description of free tier',
  programmatic: false,
  provisioningSteps: [
    'Go to https://myservice.com/signup',
    'Create an account',
    'Navigate to API Keys',
    'Click Create Key',
    'Copy the key',
    'Store it using store_api_key with service "my-service"',
  ],
  testEndpoint: {               // optional
    url: 'https://api.myservice.com/v1/me',
    method: 'GET',
    headers: (key: string) => ({ Authorization: `Bearer ${key}` }),
    successStatus: 200,
  },
}

Then run npm run build.

Security

Encryption: AES-256-GCM with scrypt key derivation (N=16384, r=8, p=1)
Per-write randomness: Each vault write uses a fresh 16-byte salt and 16-byte IV
Auth tag: GCM auth tag prevents undetected tampering
Plaintext fallback: If AGENT_KEYS_SECRET is not set, keys are stored unencrypted with a warning
Vault location: ~/.agent-keys/vault.json by default; override with AGENT_KEYS_VAULT
Secret management: Never commit AGENT_KEYS_SECRET to source control; use env vars or a secrets manager

Development

# Install dependencies
npm install

# Build TypeScript
npm run build

# Run directly with tsx (no build step)
npm run dev

License

MIT

Available Tools

7 tools

check_api_keyA

Verify a stored API key still works by hitting the service's test endpoint.

Inputs: service (required).

export_envA

Export stored API keys as shell export statements (e.g. export OPENAI_API_KEY=...).

Inputs: services.

get_api_keyA

Get a stored API key for a service. Returns the key if stored, or provisioning guidance if not.

Inputs: service (required).

list_servicesA

List all supported services with their status (whether a key is stored), category, description, and signup URL.

Inputs: no named parameters.

provision_api_keyB

Get step-by-step instructions and direct signup URL for acquiring an API key for a service.

Inputs: service (required).

remove_api_keyB

Remove an API key from the vault.

Inputs: service (required).

store_api_keyB

Store an API key in the encrypted vault.

Inputs: key (required), service (required), metadata.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

Deploy Server

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

A3.9/5.0

Scored 2026-07-29 20:10 across 7 tools

Disambiguation5/5

Each tool has a clearly distinct purpose: listing services, getting/storing/checking/provisioning/removing keys, and exporting. No overlap.

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern (e.g., list_services, get_api_key, store_api_key). The use of 'env' in export_env is a different noun but still fits the pattern.

Tool Count5/5

7 tools is well-scoped for managing API keys, covering all essential operations without being excessive or insufficient.

Completeness5/5

The tool surface covers the full lifecycle: discovery, storage, retrieval, verification, provisioning guidance, deletion, and export. No obvious gaps.

Resources

Related MCP Connectors

ClawLink
dev.claw-link
MCP server connecting AI agents to 100+ apps (Gmail, Slack, Notion, GitHub) via one-click OAuth.
App Automation Workplace & Productivity
24
https://claw-link.dev/api/mcp
ToolVetA
app.toolvet
The vetted directory of paid APIs and MCP servers for AI agents.
Developer Tools Research & Data
81
https://toolvet.app/mcp
microservices.sh
sh.microservices
MCP server for AI agents to plan, verify, and deploy Cloudflare-native apps.
Cloud Platforms Agent Orchestration Developer Tools
21
https://api.microservices.sh/mcp
OpenClaw MCP Ecosystem
io.github.yedanyagamiai-cmd
9 remote MCP servers on Cloudflare Workers for AI agents. Free tier + Pro API keys.
Agent Orchestration Cloud Platforms RAG Systems
3
https://agentforge-compare-mcp.yagami8095.workers.dev/mcp

Related MCP Servers

ServeMyAPI
Security Developer Tools
Jktfe
A
license
Not graded
quality
D
maintenance
A personal MCP server for securely storing and accessing API keys across projects using the macOS Keychain, letting AI assistants and applications retrieve credentials through natural language.
Updated 5 months ago (2026-05-31 20:14 UTC)
25
ISC
Agentic Vault
Security Shell Access
AliProgrammin
A
license
Not graded
quality
D
maintenance
MCP server that lets AI agents call APIs without ever seeing the credentials, using a local encrypted vault and per-secret allowlist policies for HTTP requests and subprocess environment variables.
Updated 7 months ago (2026-04-26 15:14 UTC)
1
AGPL 3.0
safe-key-mcp
Security Shell Access Command Line
Yormede
A
license
Not graded
quality
D
maintenance
MCP server enabling AI agents to use secrets (API keys, tokens) via encrypted vault, executing HTTP/shell/SSH actions server-side while never exposing secret values to the AI.
Updated 4 months ago (2026-07-13 14:15 UTC)
MIT
AgentVault
Security Autonomous Agents Developer Tools
bch1212
A
license
Not graded
quality
F
maintenance
MCP server for AI-native credential management, enabling agents to securely store, retrieve, and manage API keys with encryption, spending budgets, and audit logging.
Updated 5 months ago (2026-06-06 12:32 UTC)
MIT

agent-keys

The Problem

Quick Start

Via npx (no install required)

MCP Configuration

Claude Code Config

Tools

list_services

get_api_key

store_api_key

check_api_key

provision_api_key

remove_api_key

export_env

Supported Services

AI (5 services)

Communication (6 services)

Voice (3 services)

Infrastructure (8 services)

Data (4 services)

Adding a New Service

Security

Development

License

Available Tools

Tool Schema Changelog

TDQS

Resources

Related MCP Connectors

Related MCP Servers

ServeMyAPI

Agentic Vault

safe-key-mcp

AgentVault

`list_services`

`get_api_key`

`store_api_key`

`check_api_key`

`provision_api_key`

`remove_api_key`

`export_env`