Skip to main content
Glama
yulinlina

envbouncer

by yulinlina

envbouncer

A tiny local MCP server and CLI that lets AI agents read only allowlisted environment variables, redacts known secrets from text, and logs every access.

License Language Status Python 3.11+ License: MIT MCP


๐ŸŽฏ Why?

AI coding agents and MCP servers often need environment variables, but giving them full shell or .env access risks leaking secrets. Existing guardrails mostly block dangerous shell commands or reduce context, but do not broker environment-variable access at runtime. EnvBouncer fills that gap with a declarative allowlist, redaction tooling, and an audit trail.

Target audience: Developers using Claude Code, Cursor, Codex, or custom MCP servers who want to grant agents limited access to environment configuration without exposing the entire .env file or shell environment.

Related MCP server: Agentic Vault

โœจ Features

  • โœจ Declarative TOML allowlist for environment variables

  • โœจ MCP tools for listing, reading, and redacting allowed variables

  • โœจ CLI commands for init, check, redact, audit, and stdio MCP serving

  • โœจ JSONL audit trail for reads, denials, missing variables, and redactions

๐Ÿš€ Quick Start

# Install
pip install envbouncer

# Run
envbouncer --help

๐Ÿ“ฆ Installation

From Source

git clone https://github.com/YOUR_USERNAME/envbouncer.git
cd envbouncer
# Create virtual environment
python -m venv .venv
source .venv/bin/activate  # Windows: .venv\Scripts\activate

# Install in development mode
pip install -e ".[dev]"

# Run tests
pytest -v

๐ŸŽฌ Demo

The GIF above was recorded using Charm VHS:

vhs < demo.tape

๐Ÿ“– Usage

# Show help
envbouncer --help

# Common usage examples
envbouncer --example

๐Ÿ—๏ธ Architecture

graph LR
    A[Input] --> B[Core Engine]
    B --> C[Output]
    B --> D[Plugins]
    D --> E[Extensions]

๐Ÿค Contributing

Contributions are welcome! Please:

  1. Fork the repo

  2. Create a feature branch (git checkout -b feature/amazing-feature)

  3. Commit your changes (git commit -m 'Add amazing feature')

  4. Push to the branch (git push origin feature/amazing-feature)

  5. Open a Pull Request

๐Ÿ“„ License

MIT ยฉ 2026 โ€” See LICENSE for details.


If this project helped you, please โญ star it!

Made with โค๏ธ and AI

A
license - permissive license
-
quality - not tested
C
maintenance

Maintenance

โ€“Maintainers
โ€“Response time
โ€“Release cycle
โ€“Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • A
    license
    -
    quality
    C
    maintenance
    MCP server that lets AI agents call APIs without ever seeing the credentials, using a local encrypted vault and per-secret allowlist policies for HTTP requests and subprocess environment variables.
    1
    AGPL 3.0
  • F
    license
    A
    quality
    C
    maintenance
    A local-first secrets vault for MCP clients that lets AI assistants use secrets by injecting them into child processes, without the plaintext ever entering the model's context.
    5
  • A
    license
    A
    quality
    B
    maintenance
    A deterministic MCP server that guards AI/agent output by detecting secrets, injection, and PII in ~85ยตs with zero dependencies. Gives a clear ship/block verdict and runs locally or hosted.
    2
    Apache 2.0

View all related MCP servers

Related MCP Connectors

  • User-owned memory for AI agents, Copilot, Claude, IDEs, CLIs, and chat apps over remote MCP.

  • Person-owned, portable AI memory as a remote MCP server, readable and writable by any MCP client.

  • Security firewall for AI agents โ€” scans MCP calls for injection, secrets, and risks.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/yulinlina/envbouncer'

If you have feedback or need assistance with the MCP directory API, please join our Discord server