git-org-group-cred-vault

MCP server for managing GitHub & GitLab credentials — store tokens in an encrypted vault and let AI agents retrieve them automatically by org or group name.

A self-hosted, AI-agent-ready credential manager for MCP clients like Zed, Claude Desktop, VS Code, and Cursor.

What is this?

git-org-group-cred-vault is an MCP (Model Context Protocol) server that keeps your GitHub and GitLab personal access tokens in a local, encrypted vault and retrieves them by keyword — typically the org or group name. AI agents resolve the right credential automatically during git operations instead of hardcoding secrets into prompts or config.

• 🔐 Secure storage — tokens kept in a vault, never exposed in tool listings

• ⚡ Automatic resolution — say "push to acme-org", the agent fetches the matching token

• 🧩 Per-project scoping — tokens can be global or scoped to a single repo

• 🌐 Self-hosted — full control; works on Windows, Linux, macOS, and Docker/Unraid

• 🏷️ Platform tagging — filter by github or gitlab

• 🔤 Custom GitLab prefix support — handles self-hosted instances with custom prefixes (e.g. acmepat-)

Related MCP server: Janee

Features

Tools

Quick Start

1. Install

npm install
# or run directly:
node src/index.mjs

Requires Node.js ≥ 18 and an MCP-compatible host (Zed, Claude Desktop, VS Code, Cursor, etc.).

2. Add a token

From any MCP host, tell the agent:

Store my GitHub token for org acme as acme-github with value ghp_xxxxxxxxxxxxxxxxxxxx

Or call add_token directly:

3. Retrieve a token

The tool fires automatically during git operations. Just say:

push to acme-org

The agent calls get_git_credential_for_org to resolve the credential before pushing.

4. Bulk import

Import a whole credential file at once:

import the tokens from path/to/token-list.txt

File format — one token per line, whitespace-separated:

acme-github ghp_xxxxxxxxxxxxxxxxxxxx
acme-gitlab glpat-xxxxxxxxxxxxxxxx
# lines starting with # are skipped

Platform is auto-detected: tokens starting with glpat-/wfbpat- are tagged gitlab, all others github.

Scope & Storage

Running on Unraid / Docker

Because it's a plain stdio MCP server, you can host it in any MCP gateway or container. On Unraid, run it inside mcpelevator (or any MCP gateway) and expose it to clients as an authenticated HTTP/SSE endpoint:

docker exec -it mcpelevator bash -c "cd /data/servers/git-org-group-cred-vault && npm install"

License

MIT