Tremelay MCP
Tremelay is a local credential broker that allows AI agents to use credentials without ever seeing the secrets. It keeps API keys and SSH keys in a local encrypted vault, providing scoped, expiring, and revocable grants. Agents connect over MCP to list capabilities, describe capabilities, and invoke capabilities, while Tremelay performs operations and returns only the allowed results. Every attempt is logged in a hash-chained audit log.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Allow agents to use API keys without exposing them
- Manage SSH key grants for agents via ssh-agent socket
- Audit all credential usage attempts in a hash-chained log
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_darwin_amd64.mcpb
{
"transport": "stdio",
"fileSha256": "f44aad2a0725585169e42942415b1a6f2e96b3f5b42b8da47cb8427001c6b604",
"identifier": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_darwin_amd64.mcpb",
"registryType": "mcpb"
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Let your agent find its tools
Find servers like Tremelay MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.