Securecode
A secrets vault that keeps API keys and credentials out of Claude's context window. Instead of pasting secrets into chat, Claude fetches them through MCP and they're injected into local files on your machine, never appearing in the conversation. You get tag-based access rules enforced server-side, session locks that auto-expire after inactivity, and audit logs for every access showing which model touched what and when. The onboard tool walks you through account setup and secret import in a couple minutes. Secrets are encrypted with AES-256-GCM using envelope encryption. There's a companion SDK for runtime loading in your actual applications. Useful if you're pair programming with Claude on projects that touch production systems and want granular control over what gets accessed when.
- tools
- 17
- transport
- STDIO
- last updated
- Mar 17, 2026
Tools
17 toolsPublic tool metadata for what this MCP can expose to an agent.
onboardGuided setup: signup, import, API key, config, SDK
Guided setup: signup, import, API key, config, SDK
No parameter schema in public metadata yet.
get-secretGet a secret (injected to file by default, `reveal: true` to show to AI)
Get a secret (injected to file by default, `reveal: true` to show to AI)
No parameter schema in public metadata yet.
list-secretsList all secrets with tags and expiry status
List all secrets with tags and expiry status
No parameter schema in public metadata yet.
create-secretCreate a new secret
Create a new secret
No parameter schema in public metadata yet.
update-secretUpdate value, description, or tags
Update value, description, or tags
No parameter schema in public metadata yet.
delete-secretDelete a secret
Delete a secret
No parameter schema in public metadata yet.
renew-secretRenew expired secrets or change TTL
Renew expired secrets or change TTL
No parameter schema in public metadata yet.
import-envImport .env via secure web window (values never pass through AI)
Import .env via secure web window (values never pass through AI)
No parameter schema in public metadata yet.
export-envExport secrets as .env or CSV
Export secrets as .env or CSV
No parameter schema in public metadata yet.
get-statusCheck plan, usage, and MCP server version
Check plan, usage, and MCP server version
No parameter schema in public metadata yet.
wake-sessionUnlock session with optional scope and auto-sleep timer
Unlock session with optional scope and auto-sleep timer
No parameter schema in public metadata yet.
sleep-sessionLock session and clean injected files
Lock session and clean injected files
No parameter schema in public metadata yet.
session-statusCheck session state and time remaining
Check session state and time remaining
No parameter schema in public metadata yet.
byebyeLock session + clean all secrets from disk
Lock session + clean all secrets from disk
No parameter schema in public metadata yet.
get-active-rulesList active MCP access rules (read-only)
List active MCP access rules (read-only)
No parameter schema in public metadata yet.
security-checkPost-setup security hardening checks
Post-setup security hardening checks
No parameter schema in public metadata yet.
helpDocs: tools, SDK, sessions, rules, troubleshooting
Docs: tools, SDK, sessions, rules, troubleshooting
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
@securecode/mcp-server
MCP Server for SecureCodeHQ. Lets Claude Code access your secrets securely without ever seeing them.
Quick Start
claude mcp add securecode -- npx -y @securecode/mcp-server
Then tell Claude Code:
Set up SecureCode in this project
The onboard tool walks you through account creation, secret import, and configuration. Takes about 2 minutes.
What It Does
Your secrets (API keys, tokens, passwords) are encrypted with AES-256 and stored in SecureCode. Claude Code accesses them via MCP, but the actual values never appear in the chat.
When Claude reads a secret, the value is written to a local file on your machine. The AI gets the file path but never sees the raw value. This is inject mode, the default.
Tools
Details
- Repository
- github.com/juanisidoro/securecode-mcp
- Category
- Security & Pentesting
- Package
@securecode/mcp-server- Transport
- STDIO
- Registry
- MCP registry, active
Related Security & Pentesting MCP servers
View all
Bridgeguard Mcpkota1026/quantum-shieldBridgeGuard MCP Server - Cross-chain bridge security audit tools for AI coding agents. Scan bri...0starsQuantumguard Mcpkota1026/quantum-shieldPost-quantum cryptography security scanner. Detect ECDSA/RSA vulnerabilities, NIST compliance.0starsSmartguard Mcpkota1026/quantum-shieldSmartGuard MCP Server - AI-powered smart contract security audit tools for Claude Code, Cursor,...0starsVaultguard Mcpkota1026/quantum-shieldVaultGuard MCP Server - Yearn V3 / DeFi vault security and analysis tools for AI coding agents....0stars
Fixlanelightsmite/fixlane-pluginKnown security incidents in developer software, with reviewed fix procedures.0stars
Loaditoutloaditoutadmin/loaditout-mcp-serverSearch and install 20,000+ security-graded MCP servers and agent skills.0stars