Credential Broker

Local install

io.github.SarutobiSasuke8/credential-broker-mcpv0.1.1 GitHub verified

Local-first credential broker: agents use gated APIs through scoped, audited requests, never keys.

Security

Watch Source Website

Registry entry

Open in the registry

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-07T15:20:45.936555Z",
      "publishedAt": "2026-11-07T15:20:45.936555Z",
      "statusChangedAt": "2026-11-07T15:20:45.936555Z"
    }
  },
  "server": {
    "name": "io.github.SarutobiSasuke8/credential-broker-mcp",
    "icons": [
      {
        "src": "https://raw.githubusercontent.com/SarutobiSasuke8/credential-broker-mcp/main/src/ui/broker-mark.svg",
        "sizes": [
          "any"
        ],
        "mimeType": "image/svg+xml"
      }
    ],
    "title": "Credential Broker",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.1.1",
    "packages": [
      {
        "version": "0.1.1",
        "transport": {
          "type": "stdio"
        },
        "identifier": "@sarutobi-sasuke/credential-broker-mcp",
        "runtimeHint": "npx",
        "registryType": "npm",
        "registryBaseUrl": "https://registry.npmjs.org",
        "environmentVariables": [
          {
            "name": "BROKER_AGENT_ID",
            "format": "string",
            "isRequired": true,
            "description": "Which agent identity this process is. Must be provisioned in the policy file."
          },
          {
            "name": "BROKER_POLICY_FILE",
            "format": "filepath",
            "description": "Path to the policy YAML (version 2). Defaults to config/broker.yaml."
          },
          {
            "name": "BROKER_AUDIT_FILE",
            "format": "filepath",
            "description": "Path to the content-free audit log. Defaults to data/audit.jsonl."
          },
          {
            "name": "BROKER_APPROVALS_FILE",
            "format": "filepath",
            "description": "Path to the approvals file. Defaults to config/approvals.json."
          },
          {
            "name": "BROKER_HOT_RELOAD",
            "format": "string",
            "description": "Set to 1 to pick up key manager changes without a restart. Off by default."
          },
          {
            "name": "BROKER_ALLOW_KEY_REQUESTS",
            "format": "string",
            "description": "Set to 1 to let this agent ask the operator for a key through the key manager. Off by default."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/SarutobiSasuke8/credential-broker-mcp",
      "source": "github"
    },
    "websiteUrl": "https://github.com/SarutobiSasuke8/credential-broker-mcp#readme",
    "description": "Local-first credential broker: agents use gated APIs through scoped, audited requests, never keys."
  }
}

Maintain this server? Claim it

Try it

This server only runs locally, from a package. Install it with the instructions on this page to try it.

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM StudioThen replace the YOUR_ values and {placeholders} with your own.

Run in a terminal

claude mcp add credential-broker-mcp \
  -e BROKER_AGENT_ID=YOUR_BROKER_AGENT_ID \
  -- npx -y @sarutobi-sasuke/[email protected]

Environment

BROKER_AGENT_ID (required): Which agent identity this process is. Must be provisioned in the policy file.
BROKER_POLICY_FILE (optional, not in the config above): Path to the policy YAML (version 2). Defaults to config/broker.yaml.
BROKER_AUDIT_FILE (optional, not in the config above): Path to the content-free audit log. Defaults to data/audit.jsonl.
BROKER_APPROVALS_FILE (optional, not in the config above): Path to the approvals file. Defaults to config/approvals.json.
BROKER_HOT_RELOAD (optional, not in the config above): Set to 1 to pick up key manager changes without a restart. Off by default.
BROKER_ALLOW_KEY_REQUESTS (optional, not in the config above): Set to 1 to let this agent ask the operator for a key through the key manager. Off by default.

Tools

We don't run packages, so we can't list this server's tools.