mcp-secrets-runner

wiktormalyska/mcp-secrets-runner

★ 0 stars JavaScript Security Updated 2d ago

Run MCP servers with secrets injected from Infisical, 1Password or HashiCorp Vault. No plaintext API keys in .mcp.json.

View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcp-secrets-runner": {
      "command": "npx",
      "args": [
        "-y",
        "wiktormalyska/mcp-secrets-runner"
      ]
    }
  }
}

README Excerpt

Start MCP servers with their secrets injected from a secret manager, so your `.mcp.json` holds references instead of API keys, and nothing stops working three days later because a login session expired. Supports **Infisical**, **1Password** and **HashiCorp Vault**. Nearly every MCP setup guide tells you to do this:

Tools (10)

INFISICAL_BININFISICAL_DOMAININFISICAL_PROJECT_IDINFISICAL_UA_CLIENT_IDINFISICAL_UA_CLIENT_SECRETOP_BINOP_SERVICE_ACCOUNT_TOKENVAULT_ADDRVAULT_NAMESPACEVAULT_TOKEN

mcp-secrets-runner

Quick Install

README Excerpt

Tools (10)

Related Security Servers