NestDaddy

Pincer

io.github.VouchlyAI/pincer ยท v0.1.5

Secure grip for your agent's secrets - security-hardened MCP gateway with proxy token architecture

Connect Runs on your machine

Terminal
claude mcp add pincer -e PINCER_PROXY_TOKEN=<PINCER_PROXY_TOKEN> -e OPENWEBUI_URL=<OPENWEBUI_URL> -e OPENAI_COMPATIBLE_URL=<OPENAI_COMPATIBLE_URL> -e AUDIT_LOG_PATH=<AUDIT_LOG_PATH> -- npx -y [email protected]
claude_desktop_config.json
{
  "mcpServers": {
    "pincer": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "PINCER_PROXY_TOKEN": "<PINCER_PROXY_TOKEN>",
        "OPENWEBUI_URL": "<OPENWEBUI_URL>",
        "OPENAI_COMPATIBLE_URL": "<OPENAI_COMPATIBLE_URL>",
        "AUDIT_LOG_PATH": "<AUDIT_LOG_PATH>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "pincer": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "PINCER_PROXY_TOKEN": "<PINCER_PROXY_TOKEN>",
        "OPENWEBUI_URL": "<OPENWEBUI_URL>",
        "OPENAI_COMPATIBLE_URL": "<OPENAI_COMPATIBLE_URL>",
        "AUDIT_LOG_PATH": "<AUDIT_LOG_PATH>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "pincer": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "PINCER_PROXY_TOKEN": "<PINCER_PROXY_TOKEN>",
        "OPENWEBUI_URL": "<OPENWEBUI_URL>",
        "OPENAI_COMPATIBLE_URL": "<OPENAI_COMPATIBLE_URL>",
        "AUDIT_LOG_PATH": "<AUDIT_LOG_PATH>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
PINCER_PROXY_TOKEN
Required, secret
Proxy token for agent authentication (generated via 'pincer agent add')
OPENWEBUI_URL
Optional
Optional: Base URL for OpenWebUI instance
OPENAI_COMPATIBLE_URL
Optional
Optional: Base URL for OpenAI-compatible instance
AUDIT_LOG_PATH
Optional
Optional: Custom path for audit logs (default: ~/.pincer/audit.jsonl)

Details

Package[email protected] (NPM, stdio)
First published5 Feb 2026
Last updated5 Feb 2026
Registry nameio.github.VouchlyAI/pincer

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.