Keyfold
Use API keys from your Keyfold vault in commands and .env files. No tool returns a secret value.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
https://github.com/codewithkolin/keyfold/releases/download/v1.0.1/keyfold-1.0.1.mcpbDocumentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Keyfold core
The open-source parts of Keyfold, an offline-first vault for developers: API keys organised by project and environment, plus passwords, in one encrypted file. No account, no cloud, no telemetry.
The Keyfold app for Mac is built on these crates (Windows is coming through the Microsoft Store). Get it at keyfold.app/download; signed builds are also on the Releases page.
What is here
| Crate | What it does |
|---|---|
crates/keyfold-core | Argon2id key derivation, XChaCha20-Poly1305 envelope encryption, the tamper-evident vault format, rolling backups, the Recovery Kit, .env parsing, key detection patterns, 2FA codes (RFC 6238) and offline Ed25519 licence verification |
crates/keyfold-agent | The JSON-line protocol between the keyfold CLI and the running app, over an owner-only local socket |
crates/keyfold-cli | The keyfold command line and the MCP server for Cursor and Claude Code. No tool returns a secret value; every request is approved in the app |
Use it with an AI agent (MCP)
keyfold mcp lets Claude Code, Cursor, Codex, Gemini CLI and other MCP clients use your API keys without the model seeing them. Its seven tools list project and key names, write a .env file you approve, run a command with the keys injected, store a key, create a project and import a .env file. None of them returns a secret value. Every request waits for your click in the Keyfold app, which shows the command or file the keys are for.
- Install Keyfold for Mac. In the app, open Settings › General › Command line and MCP and click Install, which puts
keyfoldon yourPATH. - Add the server to your client:
claude mcp add --scope user keyfold -- keyfold mcpCursor (.cursor/mcp.json): { "mcpServers": { "keyfold": { "command": "keyfold", "args": ["mcp"] } } }
A command you approve can still print a key, and the model reads what it prints; the MCP guide covers that and one-hour approvals. The server needs the Keyfold app running and unlocked on the same Mac. The Dockerfile builds it on Linux only so that MCP directories can read its tool list.
MCP Registry name: mcp-name: io.github.codewithkolin/keyfold
Docs
- Vault format: every byte of the file, and how it is authenticated.
- Threat model: what Keyfold protects against, and what it cannot.
- MCP and CLI guide: connecting an AI agent without showing it your keys.
Build and test
cargo test --workspace
cargo clippy --workspace --all-targets -- -D warnings
cargo build --release -p keyfold-cli # the `keyfold` binaryRust stable, no other toolchain needed.
Security
Please report vulnerabilities privately; see SECURITY.md.
Licence
AGPL-3.0-only. See the LICENSE file in each crate. The Keyfold desktop app around these crates is proprietary.
Frequently asked questions
What is Keyfold?
Use API keys from your Keyfold vault in commands and .env files. No tool returns a secret value.
How do I install Keyfold?
Follow the installation steps in its documentation, shown on this page and in its repository.
Does Keyfold need an API key?
Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.
Is Keyfold open source?
Yes. Its code is on GitHub under the AGPL-3.0 license.
Who maintains Keyfold?
It is published by codewithkolin. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.