NestDaddy

kdbx

io.github.yarrasys/kdbx ยท v0.3.2

Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.

Connect Runs on your machine

Terminal
claude mcp add kdbx -e KEEPASSXC_DIR=<KEEPASSXC_DIR> -e KDBX_ENV=<KDBX_ENV> -- docker run -i --rm ghcr.io/yarrasys/kdbx:0.3.2
claude_desktop_config.json
{
  "mcpServers": {
    "kdbx": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/yarrasys/kdbx:0.3.2"
      ],
      "env": {
        "KEEPASSXC_DIR": "<KEEPASSXC_DIR>",
        "KDBX_ENV": "<KDBX_ENV>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "kdbx": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/yarrasys/kdbx:0.3.2"
      ],
      "env": {
        "KEEPASSXC_DIR": "<KEEPASSXC_DIR>",
        "KDBX_ENV": "<KDBX_ENV>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "kdbx": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/yarrasys/kdbx:0.3.2"
      ],
      "env": {
        "KEEPASSXC_DIR": "<KEEPASSXC_DIR>",
        "KDBX_ENV": "<KDBX_ENV>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
KEEPASSXC_DIR
Optional
Where kdbx looks for vaults inside the container. Must match the mount target above.
KDBX_ENV
Optional
Environment to select, overriding the pointer's defaultEnv. Optional.

Details

Packageghcr.io/yarrasys/kdbx:0.3.2 (OCI, stdio)
First published14 Oct 2026
Last updated14 Oct 2026
Registry nameio.github.yarrasys/kdbx

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.