Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.
Connect Runs on your machine
claude mcp add kdbx -e KEEPASSXC_DIR=<KEEPASSXC_DIR> -e KDBX_ENV=<KDBX_ENV> -- docker run -i --rm ghcr.io/yarrasys/kdbx:0.3.2
{
"mcpServers": {
"kdbx": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/yarrasys/kdbx:0.3.2"
],
"env": {
"KEEPASSXC_DIR": "<KEEPASSXC_DIR>",
"KDBX_ENV": "<KDBX_ENV>"
}
}
}
}
{
"mcpServers": {
"kdbx": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/yarrasys/kdbx:0.3.2"
],
"env": {
"KEEPASSXC_DIR": "<KEEPASSXC_DIR>",
"KDBX_ENV": "<KDBX_ENV>"
}
}
}
}
{
"servers": {
"kdbx": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/yarrasys/kdbx:0.3.2"
],
"env": {
"KEEPASSXC_DIR": "<KEEPASSXC_DIR>",
"KDBX_ENV": "<KDBX_ENV>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
KEEPASSXC_DIROptional | Where kdbx looks for vaults inside the container. Must match the mount target above. |
KDBX_ENVOptional | Environment to select, overriding the pointer's defaultEnv. Optional. |
Details
| Package | ghcr.io/yarrasys/kdbx:0.3.2 (OCI, stdio) |
| First published | 14 Oct 2026 |
| Last updated | 14 Oct 2026 |
| Registry name | io.github.yarrasys/kdbx |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
