Pincer
This is a security-focused MCP gateway that sits between your AI agent and external APIs like Gemini, OpenAI, Claude, and OpenRouter. Instead of storing real API keys in environment files, your agent only knows a proxy token. Pincer maps that token to the actual credential, decrypts it from your OS keychain just-in-time for the API call, then scrubs it from memory. It also handles GPG signing and decryption without exposing private keys. You'd use this if you're worried about prompt injection attacks or host compromise leaking credentials, or if you need audit logs and per-agent authorization controls for multi-tenant setups.
- GitHub stars
- 6
- tools
- 12
- auth
- Secret needed
- transport
- STDIO
- env vars
- 4
- last updated
- Feb 5, 2026
Tools
12 toolsPublic tool metadata for what this MCP can expose to an agent.
gemini_generateSecure Google Gemini API calls.
Secure Google Gemini API calls.
No parameter schema in public metadata yet.
openai_chatChat completions with OpenAI GPT models (gpt-4o, gpt-4-turbo, gpt-3.5-turbo, etc.).
Chat completions with OpenAI GPT models (gpt-4o, gpt-4-turbo, gpt-3.5-turbo, etc.).
No parameter schema in public metadata yet.
openai_list_modelsList all available OpenAI models.
List all available OpenAI models.
No parameter schema in public metadata yet.
openai_compatible_chatChat completions with any OpenAI-compatible API (Azure OpenAI, Ollama, vLLM, etc.).
Chat completions with any OpenAI-compatible API (Azure OpenAI, Ollama, vLLM, etc.).
No parameter schema in public metadata yet.
openai_compatible_list_modelsList models from custom OpenAI-compatible endpoints.
List models from custom OpenAI-compatible endpoints.
No parameter schema in public metadata yet.
claude_chatChat completions with Anthropic Claude models (Claude 3.5 Sonnet, Opus, Haiku).
Chat completions with Anthropic Claude models (Claude 3.5 Sonnet, Opus, Haiku).
No parameter schema in public metadata yet.
openrouter_chatUnified API access to 100+ models from multiple providers (OpenAI, Anthropic, Google, Meta, etc.).
Unified API access to 100+ models from multiple providers (OpenAI, Anthropic, Google, Meta, etc.).
No parameter schema in public metadata yet.
openrouter_list_modelsList all available models across OpenRouter providers.
List all available models across OpenRouter providers.
No parameter schema in public metadata yet.
openwebui_chatOpenAI-compatible interface for self-hosted LLMs.
OpenAI-compatible interface for self-hosted LLMs.
No parameter schema in public metadata yet.
openwebui_list_modelsDiscover available models on an OpenWebUI instance.
Discover available models on an OpenWebUI instance.
No parameter schema in public metadata yet.
gpg_sign_dataSign data or files using a GPG/PGP private key stored in Pincer's vault.
Sign data or files using a GPG/PGP private key stored in Pincer's vault.
No parameter schema in public metadata yet.
gpg_decryptDecrypt PGP-encrypted data using a vault-stored private key.
Decrypt PGP-encrypted data using a vault-stored private key.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
PINCER_PROXY_TOKEN*secretProxy token for agent authentication (generated via 'pincer agent add')
OPENWEBUI_URLOptional: Base URL for OpenWebUI instance
OPENAI_COMPATIBLE_URLOptional: Base URL for OpenAI-compatible instance
AUDIT_LOG_PATHOptional: Custom path for audit logs (default: ~/.pincer/audit.jsonl)
Readme
Details
- Repository
- github.com/vouchlyai/pincer-mcp
- Categories
- AI & LLM Tools, Security & Pentesting
- Package
pincer-mcp- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active
Related AI & LLM Tools MCP servers
View all
Hermes Atlas Mcpksimback/hermes-atlas-mcpSearch and fetch 100+ Hermes Agent tools, skills, plugins, and integrations from hermesatlas.com.6stars
Jitapink3750/jitapiTurn any OpenAPI spec into an executable agent interface using graphs and semantic search.6stars
Agent Centralagentcentral-to/agent-central-mcpHosted Amazon Seller Central and Amazon Ads MCP server for Claude, ChatGPT, Cursor, and agents.6stars
Helmdecktosin2013/helmdeckSelf-hosted MCP server: sandboxed browser, desktop, vision, code-edit packs for any agent.6stars
Metrillmmetrillm/metrillmBenchmark local LLM models — speed, quality & hardware fitness verdict from any MCP client5stars