Skip to main content
Glama
nyx-builds

agent-secrets

by nyx-builds
OverviewSchemaRelated ServersScoreDiscussions
Python
Local

agent-secrets

Encrypted secrets management MCP server for AI agents. Store, retrieve, rotate, and audit API keys, tokens, and credentials — all encrypted at rest.

Why

AI agents need access to API keys, tokens, and credentials. Hardcoding them or passing via env vars is insecure and unmanageable at scale. agent-secrets provides a single encrypted vault with audit trails, access policies, and rotation — exposed as MCP tools any agent can call.

Related MCP server: MCP-Secrets-Vault

Features

  • AES-128 encryption at rest (Fernet: AES-128-CBC + HMAC-SHA256)

  • 14 MCP tools: store, get, list, update, rotate, revoke, delete, search, audit, policies, batch, stats

  • Access policies: allow/deny patterns, type restrictions

  • Full audit log: every access tracked

  • Secret rotation: rotate with history

  • CLI + MCP server: use from terminal or any MCP-compatible agent

Quick start

pip install agent-secrets

# CLI
agent-secrets store OPENAI_API_KEY sk-... --type api_key --tag prod
agent-secrets get OPENAI_API_KEY --show
agent-secrets list
agent-secrets rotate OPENAI_API_KEY
agent-secrets audit

# MCP server
agent-secrets serve --db ~/.agent-secrets/vault.db

MCP tools

Tool

Description

store_secret

Store a new encrypted secret

get_secret

Retrieve a secret value

list_secrets

List all secrets (metadata only)

update_secret

Update value/metadata

rotate_secret

Rotate to new value

revoke_secret

Revoke a secret

delete_secret

Permanently delete

search_secrets

Search by name/description/tag

get_audit_log

View access history

create_policy

Create access policy

list_policies

List policies

check_access

Check policy permission

batch_store

Store multiple secrets

vault_stats

Vault statistics

License

MIT

This server cannot be installed

A
license - permissive license
-
quality - not tested
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • Janee

    rsdouglas
    A
    license
    -
    quality
    B
    maintenance
    Secrets management MCP server that injects credentials into API requests for AI agents, enforcing policies and logging all activity without exposing raw keys.
    Last updated
    90
    30
    MIT

  • keyvault

    ylz201
    A
    license
    -
    quality
    D
    maintenance
    Enables AI agents to securely manage API keys and secrets via the MCP protocol, with encrypted storage at rest and a simple CLI and Python SDK.
    Last updated
    MIT

  • safe-key-mcp

    Yormede
    A
    license
    -
    quality
    C
    maintenance
    MCP server enabling AI agents to use secrets (API keys, tokens) via encrypted vault, executing HTTP/shell/SSH actions server-side while never exposing secret values to the AI.
    Last updated
    MIT

View all related MCP servers

Related MCP Connectors

  • Hive Secrets

    Encrypted secret store and rotation for autonomous agent credentials

  • mcp

    MCP server connecting AI agents to non-custodial staking data across 130+ networks.

  • Raziel

    MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/nyx-builds/agent-secrets'

If you have feedback or need assistance with the MCP directory API, please join our Discord server