Koskamo

secret MCP

A local credential CLI and names-only MCP server that allows coding agents to use credentials without reading their values. Agents see key names, labels, and paths but never the actual secret values, providing a safety layer for agent-based workflows.

Package and access

Local package with source-attributed installation metadata. Koskamo does not execute packages during review.

secret MCP logo, by avhnCommunity listingLocal stdioSource reviewed; not executedPublished by avhn
You need:No GitHub account or gh is needed
Vendor documentation

What you can do with it

  • Allow agents to access credential names without retrieving values
  • Pass selected secret values directly to programs via CLI
  • Redact loaded literal values from stdout and stderr

Source and maintenance

Community listingRegistry 0.5.0
Maintenance checked

Packages and installation

Source-provided package data. Koskamo has not executed or live-probed this package.

https://github.com/avhn/secret/releases/download/v0.5.0/secret-v0.5.0-desktop.mcpb 0.5.0

mcpbSHA-256 supplied
https://github.com/avhn/secret/releases/download/v0.5.0/secret-v0.5.0-desktop.mcpb package definition
{
  "version": "0.5.0",
  "transport": "stdio",
  "fileSha256": "105ee4f2e5e5e189326baf90c9b0cbe45e21e98d62c835e6b942a9198f90ed97",
  "identifier": "https://github.com/avhn/secret/releases/download/v0.5.0/secret-v0.5.0-desktop.mcpb",
  "registryType": "mcpb"
}

Tools

Reported by the attributed source; not independently observed by Koskamo.

No tool definitions available.

Let your agent find its tools

Find servers like secret MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.