Local MCP access to Unix pass/GPG with read-only defaults, path scopes, and TOTP.
Connect Runs on your machine
claude mcp add unix-pass-mcp -e PASS_MCP_ALLOWED_PATHS=<PASS_MCP_ALLOWED_PATHS> -e PASSWORD_STORE_DIR=<PASSWORD_STORE_DIR> -- uvx unix-pass-mcp==0.2.1
{
"mcpServers": {
"unix-pass-mcp": {
"command": "uvx",
"args": [
"unix-pass-mcp==0.2.1"
],
"env": {
"PASS_MCP_ALLOWED_PATHS": "<PASS_MCP_ALLOWED_PATHS>",
"PASSWORD_STORE_DIR": "<PASSWORD_STORE_DIR>"
}
}
}
}
{
"mcpServers": {
"unix-pass-mcp": {
"command": "uvx",
"args": [
"unix-pass-mcp==0.2.1"
],
"env": {
"PASS_MCP_ALLOWED_PATHS": "<PASS_MCP_ALLOWED_PATHS>",
"PASSWORD_STORE_DIR": "<PASSWORD_STORE_DIR>"
}
}
}
}
{
"servers": {
"unix-pass-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"unix-pass-mcp==0.2.1"
],
"env": {
"PASS_MCP_ALLOWED_PATHS": "<PASS_MCP_ALLOWED_PATHS>",
"PASSWORD_STORE_DIR": "<PASSWORD_STORE_DIR>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
PASS_MCP_ALLOWED_PATHSOptional | Comma-separated entry globs. Scope the server to entries you intend to expose. |
PASSWORD_STORE_DIROptional | Optional absolute password-store path; defaults to the user's ~/.password-store. |
Details
| Package | [email protected] (PYPI, stdio) |
| First published | 4 Nov 2026 |
| Last updated | 4 Nov 2026 |
| Registry name | io.github.Neanderthal/unix-pass-mcp |
More other servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
