Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.
Most developer tooling work still happens through a UI a human drives. Securecode MCP server moves it into the conversation instead. Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.
MCP Server for SecureCodeHQ. Lets Claude Code access your secrets securely without ever seeing them.
The server publishes 14 tools. What each one is for:
onboard — Guided setup: signup, import, API key, config, SDKget-secret — Get a secret (injected to file by default, reveal: true to show to AI)list-secrets — List all secrets with tags and expiry statuscreate-secret — Create a new secretupdate-secret — Update value, description, or tagsdelete-secret — Delete a secretrenew-secret — Renew expired secrets or change TTLimport-env — Import .env via secure web window (values never pass through AI)export-env — Export secrets as .env or CSVget-status — Check plan, usage, and MCP server versionwake-session — Unlock session with optional scope and auto-sleep timersleep-session — Lock session and clean injected files@securecode/mcp-server on npm is all you need. Most clients run it directly, so configuration is a few lines and a restart.
Plenty of developer tooling servers cover similar ground. The differences that matter in practice are scope of access and how much setup stands between you and a working tool call. Securecode's toolset — onboard, get-secret, list-secrets and 11 more — is a fair guide to whether it matches your workflow. It is maintained by juanisidoro; worth a glance at recent repository activity before you build anything load-bearing on it.
SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.
| Tool | What it does |
|---|---|
| onboard | Guided setup: signup, import, API key, config, SDK |
| get-secret | Get a secret (injected to file by default, reveal: true to show to AI) |
| list-secrets | List all secrets with tags and expiry status |
| create-secret | Create a new secret |
| update-secret | Update value, description, or tags |
| delete-secret | Delete a secret |
| renew-secret | Renew expired secrets or change TTL |
| import-env | Import .env via secure web window (values never pass through AI) |
| export-env | Export secrets as .env or CSV |
| get-status | Check plan, usage, and MCP server version |
| wake-session | Unlock session with optional scope and auto-sleep timer |
| sleep-session | Lock session and clean injected files |
| session-status | Check session state and time remaining |
| byebye | Lock session + clean all secrets from disk |
{
"mcpServers": {
"securecode": {
"command": "npx",
"args": ["-y", "@securecode/mcp-server"]
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
Kill hallucinated APIs — version-accurate, up-to-date library documentation injected straight into context.
Microsoft's official browser automation server — drive a real browser through the accessibility tree, no screenshots needed.
GitHub's official server — repos, issues, pull requests, Actions and code security, straight from your assistant.
Issue tracking at the speed of conversation — Linear's official hosted server with OAuth and zero install.
Local repository surgery — status, diffs, commits, branches and history for any repo on disk.
Timezone sanity for AI — current time anywhere and correct conversions, without the model doing date math.