NestDaddy
All servers NestDaddy MCP Blog Sign inTry it free
Security

Keeper Secrets Manager

io.github.WYRE-AI/keeper-mcp ยท v1.0.4

Read-only multitenant Streamable HTTP bridge over Keeper Secrets Manager's MCP server.

Website Source code Set it up

Connect Runs on your machine

Terminal
claude mcp add keeper-mcp -e PORT=<PORT> -e KSM_MCP_BIN=<KSM_MCP_BIN> -e CHILD_HOME=<CHILD_HOME> -e IDLE_EVICT_MS=<IDLE_EVICT_MS> -e SPAWN_TIMEOUT_MS=<SPAWN_TIMEOUT_MS> -- docker run -i --rm ghcr.io/wyre-ai/keeper-mcp:v1.0.4
claude_desktop_config.json
{
  "mcpServers": {
    "keeper-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/keeper-mcp:v1.0.4"
      ],
      "env": {
        "PORT": "<PORT>",
        "KSM_MCP_BIN": "<KSM_MCP_BIN>",
        "CHILD_HOME": "<CHILD_HOME>",
        "IDLE_EVICT_MS": "<IDLE_EVICT_MS>",
        "SPAWN_TIMEOUT_MS": "<SPAWN_TIMEOUT_MS>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "keeper-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/keeper-mcp:v1.0.4"
      ],
      "env": {
        "PORT": "<PORT>",
        "KSM_MCP_BIN": "<KSM_MCP_BIN>",
        "CHILD_HOME": "<CHILD_HOME>",
        "IDLE_EVICT_MS": "<IDLE_EVICT_MS>",
        "SPAWN_TIMEOUT_MS": "<SPAWN_TIMEOUT_MS>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "keeper-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/keeper-mcp:v1.0.4"
      ],
      "env": {
        "PORT": "<PORT>",
        "KSM_MCP_BIN": "<KSM_MCP_BIN>",
        "CHILD_HOME": "<CHILD_HOME>",
        "IDLE_EVICT_MS": "<IDLE_EVICT_MS>",
        "SPAWN_TIMEOUT_MS": "<SPAWN_TIMEOUT_MS>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
PORT
Optional		Public listen port for the bridge (POST /mcp, GET /health)
KSM_MCP_BIN
Optional		Path to the upstream ksm-mcp binary the bridge spawns per tenant
CHILD_HOME
Optional		Writable HOME for upstream child processes
IDLE_EVICT_MS
Optional		Idle tenant timeout before an upstream child is evicted (ms)
SPAWN_TIMEOUT_MS
Optional		How long to wait for a spawned child to answer the MCP handshake (ms)

Details

Packageghcr.io/wyre-ai/keeper-mcp:v1.0.4 (OCI, stdio)
First published20 Oct 2026
Last updated20 Oct 2026
Registry nameio.github.WYRE-AI/keeper-mcp

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.