Developer tools1 sources·Published

A hosted secret broker that keeps API keys out of AI coding agent context

Developers wiring MCP tools into Claude Code, Cursor and Codex paste GitHub PATs, Stripe keys and DB passwords straight into config files, where one prompt injection or leaked transcript exposes them. A local-first broker exists, but teams still lack a managed layer with per-agent scoped tokens, approval gates and a tamper-evident audit trail.

Score 641 sources

Competition check

Still open

We searched

mcp secrets manageragent credential brokermcp credential proxy

Found · 52 repos · 174921 packages

Little open-source competition so far — the space is still open. Discussion is active.

Light open-source competitionHigh discussion

Signal strength

Why this is worth a look — three verifiable signals, not a black-box score.

  • Cross-source

    1 independent platforms · 1 related discussions

    Weak

  • Discussion heat

    Discussion heat high · 183 Hacker News mentions

    Strong

  • Freshness

    11 days ago

    Strong

Related topics

MCPClaude CodeCursorsecrets managementcredential broker

Summaries are AI-generated from public discussions.