sops-mcp
An MCP server designed to allow AI coding agents to create, manage, and rotate SOPS-encrypted secret files using age encryption. It ensures that plaintext secret values never cross the MCP boundary back to the model, keeping secrets safe in source trees while allowing agents to generate passwords, rotate keys, and derive hashes without exposing sensitive data.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Create encrypted secrets.enc.yaml files without the model seeing plaintext
- Rotate generated cryptographic secrets securely
- Derive computed values from other keys in the same file
- Manage external secrets like SMTP credentials
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
sops-mcp 0.12.0
{
"version": "0.12.0",
"transport": "stdio",
"identifier": "sops-mcp",
"runtimeHint": "python",
"registryType": "pypi",
"environmentVariables": [
{
"name": "SOPS_MCP_AGE_PUBLIC_KEY",
"isRequired": true,
"description": "Age recipient public key. Required at startup."
},
{
"name": "SOPS_AGE_KEY",
"description": "Age private key. Required at call time for any mutation tool (decrypt + re-encrypt). Read-only tools do not need it."
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Let your agent find its tools
Find servers like sops-mcp from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.