Tremelay MCP
Tremelay is a local credential broker for AI agents that keeps API keys and SSH keys in an encrypted vault. It provides scoped, expiring, and revocable grants, allowing agents to use credentials over MCP or ssh-agent without ever seeing the secrets. It operates locally with a single SQLite vault file, no server, no account, and no telemetry, logging every attempt in a hash-chained audit log.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Manage API keys in an encrypted local vault
- Grant scoped, expiring access to AI agents
- Log credential usage in a hash-chained audit log
- Allow agents to use credentials via MCP without exposing secrets
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_windows_amd64.mcpb
{
"transport": "stdio",
"fileSha256": "bf1df653cf5e85c7efc8687bc2ca332fa98026a69efbf3f7fc7def5329c60d5f",
"identifier": "https://github.com/CharitonMedia/Tremelay/releases/download/v1.0.3/tremelay-mcp_v1.0.3_windows_amd64.mcpb",
"registryType": "mcpb"
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Let your agent find its tools
Find servers like Tremelay MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.