Secretcarousel MCP Server

Agent-first secrets vault. Store, rotate, and share credentials from chat. 16 tools.

Remote serverstreamable-http

What is the Secretcarousel MCP Server?

Agent-first secrets vault. Store, rotate, and share credentials from chat. 16 tools.

What the server does

Your agent touches credentials all day — a database URL here, an API key there — and the moment its context resets, those secrets end up pasted into a .env file in Slack, echoed into a log, or left in the transcript. You become the vault. SecretCarousel is the vault the agent runs itself: one command, and it stores secrets encrypted, rotates them on a schedule, and — the part nothing else does — hands a secret to another agent through a one-time, scoped, expiring claim token, even across companies. No plain-text value ever crosses the boundary.

  • Secrets — — store, retrieve, update, delete; AES-256-GCM at rest; typed (database-credentials, api-key, certificate, and more)
  • Zero-knowledge mode — — client-side encryption; the server only ever sees ciphertext, multi-device vaults via an enrollment handshake
  • Claim tokens — — hand a secret to another agent/tenant via a one-time, scoped, expiring, audited token
  • Rotation — — rotate now or on a schedule, with email alerts
  • Sharing — — time- and view-limited links for humans
  • Environments — — export as .env, promote secrets between environments

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Configuration

VariableDescriptionRequired
SC_API_KEYCredential the server authenticates with.Yes
DATABASE_URLEndpoint or connection string the server talks to.Yes
SIGNING_KEYCredential the server authenticates with.Yes

Frequently asked questions

Agent-first secrets vault. Store, rotate, and share credentials from chat. 16 tools. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.