Encrypted secrets and credential management for agents
Encrypted secrets and credential management for agents. That is what the secure mcp server brings to an AI assistant: the same capability, reachable through the Model Context Protocol rather than a separate app or dashboard.
MCP server for agent-native secrets management. 24,008 secrets have been found in MCP config files on public GitHub. This server solves that.
The server publishes 6 tools. What each one is for:
store_secret — The store_secret tool exposed by this serverget_agent_token — Issue a short-lived, scoped token. The agent receives an opaque token ID, never the raw secretrotate_secrets — Rotate all secrets for a service. Old tokens are invalidatedaudit_secret_access — The audit_secret_access tool exposed by this serverscan_config_for_leaks — Scan config text for exposed secrets. Detects AWS keys, GitHub tokens, OpenAI/Anthropic keys, Slack tokens, Stripe keys, private key blocks, bearerinject_secret_to_request — Return a request with the secret injected server-side. The agent provides a template with {{SECRET}} placeholder and a valid token IDInstallation goes through your MCP client rather than a global install: point it at secure-vault-mcp on npm and it is fetched when the client starts. The copy-paste blocks for Claude Desktop, Claude Code and Cursor are further down this page.
Plenty of AI and media services servers cover similar ground. The differences that matter in practice are scope of access and how much setup stands between you and a working tool call. Secure's toolset — store_secret, get_agent_token, rotate_secrets and 3 more — is a fair guide to whether it matches your workflow. It is maintained by mdfifty50-boop; worth a glance at recent repository activity before you build anything load-bearing on it.
SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.
| Tool | What it does |
|---|---|
| store_secret | The store_secret tool exposed by this server. |
| get_agent_token | Issue a short-lived, scoped token. The agent receives an opaque token ID, never the raw secret. |
| rotate_secrets | Rotate all secrets for a service. Old tokens are invalidated. |
| audit_secret_access | The audit_secret_access tool exposed by this server. |
| scan_config_for_leaks | Scan config text for exposed secrets. Detects AWS keys, GitHub tokens, OpenAI/Anthropic keys, Slack tokens, Stripe keys, private key blocks, bearer tokens, and generic credentials using 12 regex patterns. |
| inject_secret_to_request | Return a request with the secret injected server-side. The agent provides a template with {{SECRET}} placeholder and a valid token ID. |
{
"mcpServers": {
"secure-vault": {
"command": "npx",
"args": ["-y", "secure-vault-mcp"]
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
Build a programmable telecommunications stack for connecting telephony services with the Internet via a cloud-based utility.
Search built for AI, not humans — semantic web search that returns model-ready content, plus code context.
Answers, not links — delegate questions to Perplexity's search-grounded models and get cited responses back.
Give your assistant a voice — text-to-speech, voice cloning and audio tools from the ElevenLabs API.
Give your assistant a real code sandbox — isolated cloud VMs for actually running the code it writes.
The ML hub in your context window — search models, datasets, papers and run Spaces from the official server.