kdbx

yarrasys/kdbx
★ 1 stars Go Security Updated today
Per-project secrets in local KeePassXC vaults, injected into commands without ever printing them. Agent-safe: PreToolUse guard hook + read-only MCP server. Single Go binary.
View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "kdbx": {
      "command": "go",
      "args": [
        "run",
        "github.com/yarrasys/kdbx@latest"
      ]
    }
  }
}

README Excerpt

`kdbx` keeps a project's secrets in a **per-project, per-environment KeePassXC vault** (KDBX4, unlocked by a key file only — no master password) and gets them into the tools that need them **without kdbx ever printing them into a transcript, a log file, or your shell history**. Discovery is automatic: kdbx walks up from your current directory to a committed

Tools (2)

checkenvs

Topics

clicredentialsdotenvgokeepasskeepassxcmcpsecretssecrets-managementsecurity