Keyblind

Encrypted secrets vault with MCP for AI agents. Secrets resolved at runtime, never leaked to LLM conversations.

Developers regularly leak API keys, passwords, and tokens to AI coding tools. 100,000+ LLM conversations with exposed secrets were found indexed by search engines in 2025.

AI agents read your.envfiles. They copy-paste secrets into conversations. They commit them accidentally. Keyblind stops this by keeping secrets encrypted at rest and resolving themat runtime— the plaintext value never touches the LLM transcript.

┌──────────┐ ┌────────────────┐ ┌─────────────────┐ │ AI Agent │ ──→ │ Keyblind MCP │ ──→ │ Encrypted │ │ (Claude) │ │ Server │ │ SQLite Vault │ │ │ ←── │ (16 tools) │ ←── │ (AES-256-GCM) │ └──────────┘ └────────────────┘ └─────────────────┘ ↑ │ │ secret value never appears │ secrets never │ in conversation transcript │ stored in plaintext

# 1. Install npm i -g keyblind # 2. Initialize your vault keyblind init # 3. Auto-configure MCP for Claude Code (one command) keyblind setup-mcp # 4. Store secrets echo "sk-proj-abc123" | keyblind set OPENAI_API_KEY keyblind set DATABASE_URL - # prompts securely # 5. Sandbox your .env (AI agents see fakes) keyblind sandbox # 6. Resolve a secret keyblind get OPENAI_API_KEY # 7. Run commands with secrets injected as env vars keyblind run -- npm start # 8. List all secrets (names only, values hidden) keyblind list

That's it.Afterkeyblind setup-mcp, restart Claude Code. Then just say"list my keyblind secrets"or"use my OPENAI_API_KEY"— the AI agent resolves secrets at runtime without ever seeing them in the transcript.

Keyblind isMCP-first— it works with every AI tool that speaks the Model Context Protocol (Claude Code, Cursor, Copilot, Windsurf, Cline, Zed).

This auto-configures Claude Code to use Keyblind. Works from any directory. For other editors, seeeditor-specific configs.

claude mcp add --scope user keyblind -- keyblind start

keyblind unlock # Authenticate first claude mcp add keyblind -- keyblind start --biometric

Manage your secrets from a browser atapp.keyblind.dev. Start the HTTP server:

# Buy a license at keyblind.dev, then activate: keyblind activate <your-license-key> # Check your status keyblind status

keyblind backends # List available backends keyblind backend 1password # Switch to 1Password keyblind backend bitwarden # Switch to Bitwarden

keyblind init Initialize the encrypted vault keyblind set <name> Store a secret (value from stdin) keyblind set <name> - Store a secret (prompts securely) keyblind get <name> Resolve and print a secret keyblind list List all stored secrets keyblind delete <name> Delete a secret keyblind setup-mcp Auto-configure MCP for Claude Code keyblind sandbox [.env] Replace .env with deterministic fakes keyblind unsandbox [.env] Restore real .env values keyblind run <command...> Run command with secrets as env vars keyblind start Start MCP server (stdio — for AI agents) keyblind start --http Start MCP HTTP server (for dashboard) keyblind start --biometric Start MCP server with biometric requirement keyblind backends List available backends keyblind backend <name> Switch backend keyblind activate <key> Activate a Pro/Team license keyblind deactivate Remove current license keyblind status Show license and vault status keyblind audit Show secret resolution audit log keyblind check --expired List secrets past expiry keyblind rotate <name> Update a secret value keyblind team init [path] Create a shared team vault keyblind team push <name> Push a secret to team vault keyblind team pull Pull secrets from team vault keyblind team list List secrets in team vault keyblind totp set <name> Store TOTP 2FA config keyblind totp code <name> Generate current TOTP code keyblind totp list List all TOTP configs keyblind totp delete <name> Delete a TOTP config keyblind share <name> Create encrypted share link keyblind receive <url> Receive a shared secret keyblind deadman setup Configure dead man's switch keyblind deadman checkin Reset dead man's switch timer keyblind deadman status Show dead man's switch status keyblind deadman disable Disable dead man's switch keyblind sso configure Set up SSO/OIDC for team access keyblind sso login Authenticate via browser SSO keyblind sso logout Clear SSO session keyblind sso status Show SSO auth status keyblind doctor Run vault health check keyblind generate <name> Generate a strong random secret keyblind import [.env] Bulk import from .env file keyblind export Export all secrets keyblind completions [shell] Generate shell completion script

git clone https://github.com/aarifmms/keyblind.git cd keyblind npm install npm run build # Compile TypeScript npm test # Run tests npm run dev # Watch mode

This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.

Remote MCP server (Streamable HTTP) at https://mcp.agenticrail.nz/ — deterministic step-order enforcement for AI agents. evaluate_step returns ALLOW or DENY before a step runs; verify_receipt proves a sequence's Ed25519-signed, hash-chained receipt chain is intact. No auth required: omit the bearer token and calls run on the public demo key. That first clause matters — the form has no "remote/hosted" field, and putting the endpoint in the description is the convention on that list ("Fully REMOTE! Just use…"). The rest mirrors your own server card verbatim, so the listing and the card can't drift.

Deterministic security preflight for AI agents. Check URLs, files and shell commands before acting.

EU AI Act compliance scanner for Python AI agents — 10 tools for scanning, analysis, and remediation

Arcjet is the runtime security platform that ships with your AI code.

Remediate vulnerabilities found by Contrast products using LLM and Coding Agent capabilities.

AES-256-GCM + Argon2id encrypted local vault that resolves {{PLACEHOLDER}} secrets for AI agent credentials.

MCP security scanner — finds tool poisoning, credential leaks, and insecure transports in AI agent configurations.

AMS – Deterministic Agent Pipeline with A2A‑style Orchestration and Cryptographic Audit

An AI penetration testing tool that uses natural language to operate various security tools like nmap, sqlmap, and metasploit.

Security scanner for MCP servers — detects tool poisoning, prompt injection, and 90+ vulnerability patterns