Keyblind MCP Server

Encrypted secrets vault for AI agents — secrets resolved at runtime, never seen by LLMs.

Local serverstdioTypeScript

What is the Keyblind MCP server?

If you already use Keyblind, the keyblind mcp server is the piece that lets your assistant work with it directly. Encrypted secrets vault for AI agents — secrets resolved at runtime, never seen by LLMs.

What the server does

Developers regularly leak API keys, passwords, and tokens to AI coding tools. 100,000+ LLM conversations with exposed secrets were found indexed by search engines in 2025.

Available tools

The toolset is worth reading before you wire it up, because it tells you what the integration is really for:

  • resolve_secret — Resolve a secret at runtime (value hidden from transcript)
  • store_secret — Encrypt and store a secret
  • list_secrets — List secret names (values never revealed)
  • delete_secret — Delete a secret
  • sandbox_env — Replace .env values with deterministic fakes
  • unsandbox_env — Restore real .env values from vault
  • audit_log — View secret resolution audit trail
  • totp_code — Generate a TOTP 2FA code for a stored config
  • totp_store — Store a TOTP configuration from otpauth:// URI
  • totp_list — List all stored TOTP configurations
  • totp_delete — Delete a TOTP configuration
  • create_share_link — Create encrypted, expiring share link for a secret

Credentials and setup notes

Configuration is passed through the environment: OPENAI_API_KEY, DATABASE_URL. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.

Installation

Installation goes through your MCP client rather than a global install: point it at keyblind on npm and it is fetched when the client starts. The copy-paste blocks for Claude Desktop, Claude Code and Cursor are further down this page.

Where it fits

Among the developer tooling options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. Keyblind's toolset — resolve_secret, store_secret, list_secrets and 11 more — is a fair guide to whether it matches your workflow. It is maintained by aarifmms; worth a glance at recent repository activity before you build anything load-bearing on it.

SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.

Worth knowing first

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • With 14 tools registered it takes up a noticeable share of the context window; turn it off in projects that never touch Keyblind.
  • Missing credentials fail quietly in some clients — if no tools show up, check the environment block first.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

Available tools

ToolWhat it does
resolve_secretResolve a secret at runtime (value hidden from transcript)
store_secretEncrypt and store a secret
list_secretsList secret names (values never revealed)
delete_secretDelete a secret
sandbox_envReplace .env values with deterministic fakes
unsandbox_envRestore real .env values from vault
audit_logView secret resolution audit trail
totp_codeGenerate a TOTP 2FA code for a stored config
totp_storeStore a TOTP configuration from otpauth:// URI
totp_listList all stored TOTP configurations
totp_deleteDelete a TOTP configuration
create_share_linkCreate encrypted, expiring share link for a secret
receive_shareReceive and decrypt a shared secret
deadman_statusCheck dead man's switch status

How to install the Keyblind MCP server

{
  "mcpServers": {
    "keyblind": {
      "command": "npx",
      "args": ["-y", "keyblind"],
      "env": {
        "OPENAI_API_KEY": "your-value",
        "DATABASE_URL": "your-value"
      }
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Configuration

VariableDescriptionRequired
OPENAI_API_KEYCredential the server authenticates with.Yes
DATABASE_URLEndpoint or connection string the server talks to.Yes

Example prompts to try

  • Use Keyblind to resolve secret.
  • Use Keyblind to store secret.
  • Use Keyblind to list secrets.

Frequently asked questions

It connects Keyblind to MCP-compatible AI assistants such as Claude and Cursor, exposing 14 tools (resolve_secret, store_secret, list_secrets, and more) that the assistant can call on your behalf. Instead of copying data back and forth by hand, the assistant works with Keyblind directly.