Skip to main content
Glama
yulinlina

envbouncer

by yulinlina

envbouncer

A tiny local MCP server and CLI that lets AI agents read only allowlisted environment variables, redacts known secrets from text, and logs every access.

License Language Status Python 3.11+ License: MIT MCP


๐ŸŽฏ Why?

AI coding agents and MCP servers often need environment variables, but giving them full shell or .env access risks leaking secrets. Existing guardrails mostly block dangerous shell commands or reduce context, but do not broker environment-variable access at runtime. EnvBouncer fills that gap with a declarative allowlist, redaction tooling, and an audit trail.

Target audience: Developers using Claude Code, Cursor, Codex, or custom MCP servers who want to grant agents limited access to environment configuration without exposing the entire .env file or shell environment.

Related MCP server: Agentic Vault

โœจ Features

  • โœจ Declarative TOML allowlist for environment variables

  • โœจ MCP tools for listing, reading, and redacting allowed variables

  • โœจ CLI commands for init, check, redact, audit, and stdio MCP serving

  • โœจ JSONL audit trail for reads, denials, missing variables, and redactions

๐Ÿš€ Quick Start

# Install
pip install envbouncer

# Run
envbouncer --help

๐Ÿ“ฆ Installation

From Source

git clone https://github.com/YOUR_USERNAME/envbouncer.git
cd envbouncer
# Create virtual environment
python -m venv .venv
source .venv/bin/activate  # Windows: .venv\Scripts\activate

# Install in development mode
pip install -e ".[dev]"

# Run tests
pytest -v

๐ŸŽฌ Demo

The GIF above was recorded using Charm VHS:

vhs < demo.tape

๐Ÿ“– Usage

# Show help
envbouncer --help

# Common usage examples
envbouncer --example

๐Ÿ—๏ธ Architecture

graph LR
    A[Input] --> B[Core Engine]
    B --> C[Output]
    B --> D[Plugins]
    D --> E[Extensions]

๐Ÿค Contributing

Contributions are welcome! Please:

  1. Fork the repo

  2. Create a feature branch (git checkout -b feature/amazing-feature)

  3. Commit your changes (git commit -m 'Add amazing feature')

  4. Push to the branch (git push origin feature/amazing-feature)

  5. Open a Pull Request

๐Ÿ“„ License

MIT ยฉ 2026 โ€” See LICENSE for details.


If this project helped you, please โญ star it!

Made with โค๏ธ and AI

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

No tool schema history has been recorded yet.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    C
    maintenance
    MCP server that lets AI agents call APIs without ever seeing the credentials, using a local encrypted vault and per-secret allowlist policies for HTTP requests and subprocess environment variables.
    1
    AGPL 3.0
  • F
    license
    A
    quality
    C
    maintenance
    A local-first secrets vault for MCP clients that lets AI assistants use secrets by injecting them into child processes, without the plaintext ever entering the model's context.
    5
    -
  • A
    license
    A
    quality
    B
    maintenance
    A deterministic MCP server that guards AI/agent output by detecting secrets, injection, and PII in ~85ยตs with zero dependencies. Gives a clear ship/block verdict and runs locally or hosted.
    2
    Apache 2.0

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/yulinlina/envbouncer'

If you have feedback or need assistance with the MCP directory API, please join our Discord server