Keyblind
You've probably leaked an API key to an LLM at some point. This stops that by encrypting secrets in a local SQLite vault and only resolving them at runtime through MCP tools, so the plaintext never hits the conversation transcript. The 16 tools cover the full lifecycle: store, resolve, list, delete, plus sandbox mode that swaps your .env for deterministic fakes before AI agents can read it. It also handles TOTP codes, encrypted share links, and can gate access behind Touch ID. Works with Claude, Cursor, Windsurf, and anything else that speaks MCP. Free tier gives you 5 secrets locally, Pro unlocks unlimited plus team vaults and audit logs.
- GitHub stars
- 3
- tools
- 27
- transport
- STDIO
- last updated
- Oct 21, 2026
Tools
27 toolsPublic tool metadata for what this MCP can expose to an agent.
resolve_secretResolve a secret at runtime (value hidden from transcript)
Resolve a secret at runtime (value hidden from transcript)
No parameter schema in public metadata yet.
store_secretEncrypt and store a secret
Encrypt and store a secret
No parameter schema in public metadata yet.
list_secretsList secret names (values never revealed)
List secret names (values never revealed)
No parameter schema in public metadata yet.
delete_secretDelete a secret
Delete a secret
No parameter schema in public metadata yet.
sandbox_envReplace `.env` values with deterministic fakes
Replace `.env` values with deterministic fakes
No parameter schema in public metadata yet.
unsandbox_envRestore real `.env` values from vault
Restore real `.env` values from vault
No parameter schema in public metadata yet.
audit_logView secret resolution audit trail
View secret resolution audit trail
No parameter schema in public metadata yet.
totp_codeGenerate a TOTP 2FA code for a stored config
Generate a TOTP 2FA code for a stored config
No parameter schema in public metadata yet.
totp_storeStore a TOTP configuration from otpauth:// URI
Store a TOTP configuration from otpauth:// URI
No parameter schema in public metadata yet.
totp_listList all stored TOTP configurations
List all stored TOTP configurations
No parameter schema in public metadata yet.
totp_deleteDelete a TOTP configuration
Delete a TOTP configuration
No parameter schema in public metadata yet.
create_share_linkCreate encrypted, expiring share link for a secret
Create encrypted, expiring share link for a secret
No parameter schema in public metadata yet.
receive_shareReceive and decrypt a shared secret
Receive and decrypt a shared secret
No parameter schema in public metadata yet.
deadman_statusCheck dead man's switch status
Check dead man's switch status
No parameter schema in public metadata yet.
deadman_checkinReset dead man's switch timer
Reset dead man's switch timer
No parameter schema in public metadata yet.
team_initCreate a shared team vault (encrypted SQLite)
Create a shared team vault (encrypted SQLite)
No parameter schema in public metadata yet.
team_pushPush a local secret to the team vault
Push a local secret to the team vault
No parameter schema in public metadata yet.
team_pullImport all secrets from the team vault
Import all secrets from the team vault
No parameter schema in public metadata yet.
team_listList secret names in the team vault
List secret names in the team vault
No parameter schema in public metadata yet.
team_resolveResolve (decrypt) a secret from the team vault
Resolve (decrypt) a secret from the team vault
No parameter schema in public metadata yet.
team_deleteDelete a secret from the team vault
Delete a secret from the team vault
No parameter schema in public metadata yet.
sso_statusCheck SSO/OIDC authentication status
Check SSO/OIDC authentication status
No parameter schema in public metadata yet.
register_agentRegister an AI agent bound to a human sponsor
Register an AI agent bound to a human sponsor
No parameter schema in public metadata yet.
record_actionAppend a signed action to the tamper-proof ledger
Append a signed action to the tamper-proof ledger
No parameter schema in public metadata yet.
verify_ledgerVerify ledger integrity (hash chain + signatures)
Verify ledger integrity (hash chain + signatures)
No parameter schema in public metadata yet.
list_agentsList registered AI agents
List registered AI agents
No parameter schema in public metadata yet.
export_complianceExport the agent ledger as a compliance report
Export the agent ledger as a compliance report
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
Keyblind — Blind AI to Your Keys
Encrypted secrets vault with MCP for AI agents. One command configures every editor. Secrets resolved at runtime, never leaked to LLM conversations.
Why
Developers regularly leak API keys, passwords, and tokens to AI coding tools. 100,000+ LLM conversations with exposed secrets were found indexed by search engines in 2025.
AI agents read your .env files. They copy-paste secrets into conversations. They commit them accidentally. Keyblind stops this by keeping secrets encrypted at rest and resolving them at runtime — the plaintext value never touches the LLM transcript.
How It Works
Details
- Repository
- github.com/aarifmms/keyblind
- Website
- keyblind.dev
- Package
keyblind- Transport
- STDIO
- Registry
- MCP registry, active