Q MCP Server

Quantum-inspired keyring for AI coding agents with superposition, entanglement, and tunneling.

Remote serverstreamable-http

What is the Q MCP server?

Most knowledge and memory work still happens through a UI a human drives. Q MCP server moves it into the conversation instead. Quantum-inspired keyring for AI coding agents with superposition, entanglement, and tunneling.

The short version

Stop pasting API keys into plain-text .env files or wrestling with clunky secret managers. q-ring securely anchors your credentials to your OS's native vault (macOS Keychain, Linux Secret Service, Windows Credential Vault) and supercharges them with mechanics from quantum physics.

  • Superposition: — Store one key with multiple states (dev/staging/prod) that collapse based on context
  • Entanglement: — Link keys across projects so rotating one automatically updates them all
  • Tunneling: — Create ephemeral, in-memory secrets that self-destruct after a set time or read count
  • Teleportation: — Securely pack and share AES-256-GCM encrypted secret bundles
  • Seamless AI Integration: — 44 built-in MCP tools for native use in Cursor, Kiro, and Claude Code

Getting it running

Because this one is hosted, setup is mostly authentication — you point your client at the endpoint and approve access. Nothing runs on your machine, so there is no runtime to keep patched.

The tools it exposes

The server publishes 9 tools. What each one is for:

  • get_secret — Read a secret value (collapses superposition, audits the read)
  • list_secrets — List keys + metadata in scope (values never exposed); filter by tag, expiry, glob
  • set_secret — Create or overwrite a single secret with optional TTL, per-env state, tags, rotation format
  • delete_secret — Permanently remove a secret value (not undoable from q-ring)
  • has_secret — Boolean existence check that respects decay (no audit read)
  • export_secrets — Render multiple secrets as .env or JSON for one-off export (skips approval-protected keys without a grant)
  • import_dotenv — Parse .env text and bulk-store every key/value pair (accepts raw content only — never reads files)
  • check_project — Compare .q-ring.json manifest against the keyring for missing/expired/stale keys
  • env_generate — Render a complete .env body from the project manifest, with warnings for gaps

What it needs from you

Configuration is passed through the environment: OPENAI_API_KEY, SESSION_TOKEN, CERT_KEY, OPENAI_KEY, STRIPE_KEY, REDIS_URL, SOME_KEY, AWS_ACCESS_KEY. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.

Things to watch

  • Your data travels to the provider's service, so the usual questions apply about what you send and what they retain.
  • With 9 tools registered it takes up a noticeable share of the context window; turn it off in projects that never touch Q.
  • Missing credentials fail quietly in some clients — if no tools show up, check the environment block first.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

How it compares

Among the knowledge and memory options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. Q's toolset — get_secret, list_secrets, set_secret and 6 more — is a fair guide to whether it matches your workflow. It is maintained by I4cTime; worth a glance at recent repository activity before you build anything load-bearing on it.

This entry was verified against Q's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.

Available tools

ToolWhat it does
get_secretRead a secret value (collapses superposition, audits the read)
list_secretsList keys + metadata in scope (values never exposed); filter by tag, expiry, glob
set_secretCreate or overwrite a single secret with optional TTL, per-env state, tags, rotation format
delete_secretPermanently remove a secret value (not undoable from q-ring)
has_secretBoolean existence check that respects decay (no audit read)
export_secretsRender multiple secrets as .env or JSON for one-off export (skips approval-protected keys without a grant)
import_dotenvParse .env text and bulk-store every key/value pair (accepts raw content only — never reads files)
check_projectCompare .q-ring.json manifest against the keyring for missing/expired/stale keys
env_generateRender a complete .env body from the project manifest, with warnings for gaps

How to install the Q MCP server

{
  "mcpServers": {
    "q-ring": {
      "command": "npx",
      "args": ["-y", "@i4ctime/q-ring"],
      "env": {
        "OPENAI_API_KEY": "your-value",
        "SESSION_TOKEN": "your-value",
        "CERT_KEY": "your-value",
        "OPENAI_KEY": "your-value",
        "STRIPE_KEY": "your-value",
        "REDIS_URL": "your-value",
        "SOME_KEY": "your-value",
        "AWS_ACCESS_KEY": "your-value"
      }
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Configuration

VariableDescriptionRequired
OPENAI_API_KEYCredential the server authenticates with.Yes
SESSION_TOKENCredential the server authenticates with.Yes
CERT_KEYCredential the server authenticates with.Yes
OPENAI_KEYCredential the server authenticates with.Yes
STRIPE_KEYCredential the server authenticates with.Yes
REDIS_URLEndpoint or connection string the server talks to.Yes
SOME_KEYCredential the server authenticates with.Yes
AWS_ACCESS_KEYCredential the server authenticates with.Yes

Example prompts to try

  • Use Q to get secret.
  • Use Q to list secrets.
  • Use Q to set secret.

Frequently asked questions

It connects Q to MCP-compatible AI assistants such as Claude and Cursor, exposing 9 tools (get_secret, list_secrets, set_secret, and more) that the assistant can call on your behalf. Instead of copying data back and forth by hand, the assistant works with Q directly.