NestDaddy
All servers NestDaddy MCP Blog Sign inTry it free
Security

Sops Mcp

io.github.privacyplaybook/sops-mcp ยท v0.12.0

MCP server for creating and managing SOPS-encrypted secrets

Source code Set it up

Connect Runs on your machine

Terminal
claude mcp add sops-mcp -e SOPS_MCP_AGE_PUBLIC_KEY=<SOPS_MCP_AGE_PUBLIC_KEY> -e SOPS_AGE_KEY=<SOPS_AGE_KEY> -- uvx sops-mcp==0.12.0
claude_desktop_config.json
{
  "mcpServers": {
    "sops-mcp": {
      "command": "uvx",
      "args": [
        "sops-mcp==0.12.0"
      ],
      "env": {
        "SOPS_MCP_AGE_PUBLIC_KEY": "<SOPS_MCP_AGE_PUBLIC_KEY>",
        "SOPS_AGE_KEY": "<SOPS_AGE_KEY>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "sops-mcp": {
      "command": "uvx",
      "args": [
        "sops-mcp==0.12.0"
      ],
      "env": {
        "SOPS_MCP_AGE_PUBLIC_KEY": "<SOPS_MCP_AGE_PUBLIC_KEY>",
        "SOPS_AGE_KEY": "<SOPS_AGE_KEY>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "sops-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "sops-mcp==0.12.0"
      ],
      "env": {
        "SOPS_MCP_AGE_PUBLIC_KEY": "<SOPS_MCP_AGE_PUBLIC_KEY>",
        "SOPS_AGE_KEY": "<SOPS_AGE_KEY>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
SOPS_MCP_AGE_PUBLIC_KEY
Required		Age recipient public key. Required at startup.
SOPS_AGE_KEY
Optional, secret		Age private key. Required at call time for any mutation tool (decrypt + re-encrypt). Read-only tools do not need it.

Details

Package[email protected] (PYPI, stdio)
First published23 Oct 2026
Last updated23 Oct 2026
Registry nameio.github.privacyplaybook/sops-mcp

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.