Local-first credential broker: agents use gated APIs through scoped, audited requests, never keys.
Connect Runs on your machine
claude mcp add credential-broker-mcp -e BROKER_AGENT_ID=<BROKER_AGENT_ID> -e BROKER_POLICY_FILE=<BROKER_POLICY_FILE> -e BROKER_AUDIT_FILE=<BROKER_AUDIT_FILE> -e BROKER_APPROVALS_FILE=<BROKER_APPROVALS_FILE> -e BROKER_HOT_RELOAD=<BROKER_HOT_RELOAD> -e BROKER_ALLOW_KEY_REQUESTS=<BROKER_ALLOW_KEY_REQUESTS> -- npx -y @sarutobi-sasuke/[email protected]{
"mcpServers": {
"credential-broker-mcp": {
"command": "npx",
"args": [
"-y",
"@sarutobi-sasuke/[email protected]"
],
"env": {
"BROKER_AGENT_ID": "<BROKER_AGENT_ID>",
"BROKER_POLICY_FILE": "<BROKER_POLICY_FILE>",
"BROKER_AUDIT_FILE": "<BROKER_AUDIT_FILE>",
"BROKER_APPROVALS_FILE": "<BROKER_APPROVALS_FILE>",
"BROKER_HOT_RELOAD": "<BROKER_HOT_RELOAD>",
"BROKER_ALLOW_KEY_REQUESTS": "<BROKER_ALLOW_KEY_REQUESTS>"
}
}
}
}{
"mcpServers": {
"credential-broker-mcp": {
"command": "npx",
"args": [
"-y",
"@sarutobi-sasuke/[email protected]"
],
"env": {
"BROKER_AGENT_ID": "<BROKER_AGENT_ID>",
"BROKER_POLICY_FILE": "<BROKER_POLICY_FILE>",
"BROKER_AUDIT_FILE": "<BROKER_AUDIT_FILE>",
"BROKER_APPROVALS_FILE": "<BROKER_APPROVALS_FILE>",
"BROKER_HOT_RELOAD": "<BROKER_HOT_RELOAD>",
"BROKER_ALLOW_KEY_REQUESTS": "<BROKER_ALLOW_KEY_REQUESTS>"
}
}
}
}{
"servers": {
"credential-broker-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@sarutobi-sasuke/[email protected]"
],
"env": {
"BROKER_AGENT_ID": "<BROKER_AGENT_ID>",
"BROKER_POLICY_FILE": "<BROKER_POLICY_FILE>",
"BROKER_AUDIT_FILE": "<BROKER_AUDIT_FILE>",
"BROKER_APPROVALS_FILE": "<BROKER_APPROVALS_FILE>",
"BROKER_HOT_RELOAD": "<BROKER_HOT_RELOAD>",
"BROKER_ALLOW_KEY_REQUESTS": "<BROKER_ALLOW_KEY_REQUESTS>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
BROKER_AGENT_IDRequired | Which agent identity this process is. Must be provisioned in the policy file. |
BROKER_POLICY_FILEOptional | Path to the policy YAML (version 2). Defaults to config/broker.yaml. |
BROKER_AUDIT_FILEOptional | Path to the content-free audit log. Defaults to data/audit.jsonl. |
BROKER_APPROVALS_FILEOptional | Path to the approvals file. Defaults to config/approvals.json. |
BROKER_HOT_RELOADOptional | Set to 1 to pick up key manager changes without a restart. Off by default. |
BROKER_ALLOW_KEY_REQUESTSOptional | Set to 1 to let this agent ask the operator for a key through the key manager. Off by default. |
Details
| Package | @sarutobi-sasuke/[email protected] (NPM, stdio) |
| First published | 9 Nov 2026 |
| Last updated | 9 Nov 2026 |
| Registry name | io.github.SarutobiSasuke8/credential-broker-mcp |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.