Secure secret vault for AI agents via Model Context Protocol (MCP)
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"keysmith-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# Keysmith MCP 🔐 [](https://pypi.org/project/keysmith-mcp/) [](https://github.com/adam/keysmith-mcp/actions/workflows/ci.yml) [](https://opensource.org/licenses/MIT) Secure secret vault for AI agents using the Model Context Protocol (MCP). Give your agents access to what they need, without compromising your master password or exposing long-lived credentials. ## Why Keysmith? AI agents and autonomous systems often need access to API keys, database credentials, or other secrets to perform tasks. Most current solutions involve: 1. **Environment Variables**: Hard to manage, visible to all processes, and persist indefinitely. 2. **Hardcoding**: Dangerous and bad practice. 3. **Complex Vaults (HashiCorp/1Password)**: Overkill for local agent development, often requiring complex CLI authentication. **Keysmith** is designed to be the "Goldilocks" solution: simple enough for a single developer, yet secure enough to protect your most sensitive keys. ## Key Features - **Strong Encryption**: Uses Fernet (AES-128-CBC) with key derivation via PBKDF2 (SHA-256, 480k iterations). - **Time-To-Live (TTL)**: Automatically expires secrets after a set period. Great for temporary agent access. - **Audit Logging**: Every single access (or attempted access) is logged to `~/.keysmith/audit.log`. - **MCP Native**: Implements the Model Context Protocol, making it plug-and-play with any MCP-compatible environment or autonomous agent. - **Multi-Agent Swarms**: Designed to support multiple agents on the same machine reading from the same vault simultaneously. > [!NOTE] > Multi-agent file locking currently requires Unix/macOS. Windows support is planned for v0.2. ## Installation ```bash pip install keysmith-mcp ``` ## Quickstart 1. **Initialize the vault**: ```b…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.