Keyblind

Name: Keyblind
Author: aarifmms

by aarifmmsversion 0.8.8i★ –iRuns on your computer

Registry nameio.github.aarifmms/keyblind

Install

Overview

Description from the maker (original English)

Encrypted secrets vault for AI agents. 27 MCP tools resolve secrets at runtime, never leaking them.

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

User voiceiNo reviews yetReviews open together with accounts in a later step
Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
UsageiNot measured yet★ –

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Runs on your computer
Transport: stdio
Category: Other

Install

Pick the AI app you use, then copy the settings.

Before you install

Basic checks: 1 of 1 passed
Runs on your computer with your user’s permissions (files, network, apps).
The registry lists no key to fill in.

You need

npmNode.js installed (for the npx command)

Which app do you use?

ClaudeClaude CodeCursorVS CodeChatGPT

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "keyblind": {
      "command": "npx",
      "args": [
        "-y",
        "keyblind",
        "start"
      ]
    }
  }
}

Run this in your terminal

claude mcp add keyblind -- npx -y keyblind start

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "keyblind": {
      "command": "npx",
      "args": [
        "-y",
        "keyblind",
        "start"
      ]
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "keyblind": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "keyblind",
        "start"
      ]
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026

✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account aarifmms, which owns the repo
… Not checked yet
Still maintained
We have not read this repo from GitHub yet
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
– Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
– Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
… Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Otheri

More stars than 0% of the other 32583 servers in this category
Published to the registry more recently than 69% of the other 32583 servers in this category
Basic checks equal to or better than 100% of the other 32583 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Keyblind safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

The registry does not list a required key, though some servers ask you to sign in on first use.

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed –, and the latest version (0.8.8) reached the registry 17 days ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.

What can I use instead?

In the same category: Spec Driven Development, Remote Desktop Commander, sync. labs

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Spec Driven Development

by formulahendry

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

Runs on your computer★ 440MITUpdated 14 months ago

Install

Remote Desktop Commander

by desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

Runs in the cloud★ 211Updated yesterday

Install

sync. labs

by synchronicity-labs

Lipsync videos, dub them into other languages, make talking videos and open sync. Studio.

Computer or cloudUpdated today

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

Keyblind — Blind AI to Your Keys

Encrypted secrets vault with MCP for AI agents. One command configures every editor. Secrets resolved at runtime, never leaked to LLM conversations.

Why

Developers regularly leak API keys, passwords, and tokens to AI coding tools. 100,000+ LLM conversations with exposed secrets were found indexed by search engines in 2025.

AI agents read your .env files. They copy-paste secrets into conversations. They commit them accidentally. Keyblind stops this by keeping secrets encrypted at rest and resolving them _at runtime_ — the plaintext value never touches the LLM transcript.

How It Works

┌──────────┐     ┌────────────────┐     ┌─────────────────┐

│ AI Agent │ ──→ │ Keyblind MCP │ ──→ │ Encrypted │ │ (Claude) │ │ Server │ │ SQLite Vault │ │ │ ←── │ (27 tools) │ ←── │ (AES-256-GCM) │ └──────────┘ └────────────────┘ └─────────────────┘ ↑ │ │ secret value never appears │ secrets never │ in conversation transcript │ stored in plaintext

Quick Start

# 1. Install

npm i -g keyblind

2. One-command setup (initialize vault + configure Claude Code)

keyblind quickstart

3. Store secrets

echo "sk-proj-abc123" | keyblind set OPENAI_API_KEY keyblind set DATABASE_URL - # prompts securely

4. Sandbox your .env (AI agents see fakes)

keyblind sandbox

5. Resolve a secret

keyblind get OPENAI_API_KEY

6. Run commands with secrets injected as env vars

keyblind run -- npm start

7. List all secrets (names only, values hidden)

keyblind list

That's it. After keyblind quickstart, restart Claude Code. Then just say _"list my keyblind secrets"_ or _"use my OPENAI_API_KEY"_ — the AI agent resolves secrets at runtime without ever seeing them in the transcript.

MCP Server

Keyblind is MCP-first — it works with every AI tool that speaks the Model Context Protocol (Claude Code, Cursor, Copilot, Windsurf, Cline, Zed).

Setup (automatic)

keyblind setup-mcp

This auto-configures Claude Code, Cline, and Zed to use Keyblind. Works from any directory.

For project-local editors (Cursor, Windsurf, Copilot, Cline project mode), run from your project root:

keyblind setup-mcp --local

See editor-specific configs for details and manual setup.

Setup (manual)

Add a .mcp.json to your project root, or use claude mcp add:

claude mcp add --scope user keyblind -- keyblind start

With biometric gate (Touch ID required before secrets are resolved):

keyblind unlock                      # Authenticate first

claude mcp add keyblind -- keyblind start --biometric

Session expires after 15 minutes. Requires Pro or Team license.

MCP Tools

Tool	Description
`resolve_secret`	Resolve a secret at runtime (value hidden from transcript)
`store_secret`	Encrypt and store a secret
`list_secrets`	List secret names (values never revealed)
`delete_secret`	Delete a secret
`sandbox_env`	Replace `.env` values with deterministic fakes
`unsandbox_env`	Restore real `.env` values from vault
`audit_log`	View secret resolution audit trail
`totp_code`	Generate a TOTP 2FA code for a stored config
`totp_store`	Store a TOTP configuration from otpauth:// URI
`totp_list`	List all stored TOTP configurations
`totp_delete`	Delete a TOTP configuration
`create_share_link`	Create encrypted, expiring share link for a secret
`receive_share`	Receive and decrypt a shared secret
`deadman_status`	Check dead man's switch status
`deadman_checkin`	Reset dead man's switch timer
`team_init`	Create a shared team vault (encrypted SQLite)
`team_push`	Push a local secret to the team vault
`team_pull`	Import all secrets from the team vault
`team_list`	List secret names in the team vault
`team_resolve`	Resolve (decrypt) a secret from the team vault
`team_delete`	Delete a secret from the team vault
`sso_status`	Check SSO/OIDC authentication status
`register_agent`	Register an AI agent bound to a human sponsor
`record_action`	Append a signed action to the tamper-proof ledger
`verify_ledger`	Verify ledger integrity (hash chain + signatures)
`list_agents`	List registered AI agents
`export_compliance`	Export the agent ledger as a compliance report

Web Dashboard

Manage your secrets from a browser — no sign-in or pairing required. Open the local dashboard:

keyblind dashboard

This starts the local server and opens http://localhost:4318/ in your browser. The dashboard is served same-origin with the REST API, so it works in every browser with no CORS, no pairing token, and no login. Features:

View, add, copy, and delete secrets
Audit log with full access history
License management (tier, email, expiry)
Pro/Team tier status
Per-secret access policies and rotation reminders
Agent action approvals (approve/deny queued agent writes)
Central control plane (org-wide visibility + signed revocation)

A hosted control plane (hosted/) adds orgs, roles, groups, a signed revocation + group-scope manifest, multi-provider SSO login (with org auto-provisioning, multi-org switching, and IdP end-session revocation), and short-lived agent credentials. See docs/enterprise.md (Phase 2).

Browser Extension

The Keyblind Chrome Extension detects and blocks secrets from being pasted into AI chat interfaces (Claude.ai, ChatGPT, Copilot).

Features:

Detects 12+ API key formats (OpenAI, GitHub, Stripe, AWS, etc.)
Intercepts paste events on AI chat sites
Warning banner when secrets are detected
Popup with vault connection status

Located in browser-extension/. Load as unpacked extension from chrome://extensions.

Pricing

	Free	Pro	Team
Price	$0	$79/year	$29/user/month
Secrets	5	Unlimited	Unlimited
Local vault	✓	✓	✓
Sandbox / Unsandbox	✓	✓	✓
MCP server	✓	✓	✓
Dashboard	✓	✓	✓
Browser extension	✓	✓	✓
7 backends	✓	✓	✓
Team vaults	—	✓	✓
Audit log	—	✓	✓
Secret sharing	—	✓	✓
Dead man's switch	—	✓	✓
TOTP 2FA	—	✓	✓
Biometric gate	—	✓	✓
SSO/OIDC	—	—	✓
CI/CD integration	—	✓	✓

# Buy a license at keyblind.dev, then activate:

keyblind activate

Check your status

keyblind status

Backends

Keyblind supports multiple secret backends:

keyblind backends                          # List available backends

keyblind backend 1password # Switch to 1Password keyblind backend bitwarden # Switch to Bitwarden

Backend	Read	Write	Requires
local (default)	✓	✓	Nothing
1password	✓	✓	`op` CLI
bitwarden	✓	—	`bw` CLI
env	✓	—	Nothing
aws	✓	✓	`aws` CLI
gcp	✓	✓	`gcloud` CLI
azure	✓	✓	`az` CLI

Keyblind vs Cloak

	Keyblind	Cloak
Protocol	MCP (all editors)	VS Code extension only
Editors	Claude Code, Cursor, Copilot, Windsurf, Cline, Zed	VS Code, Cursor
Storage	AES-256-GCM SQLite	AES-256-GCM file
Backends	Local, 1Password, Bitwarden, Env, AWS, GCP, Azure	Local only
Sandbox	Deterministic HMAC fakes	AES-256-GCM encrypted
Web dashboard	✓ (localhost:4318)	—
Browser extension	✓ (Chrome)	—
TOTP 2FA	✓	—
Secret sharing	✓ (encrypted URL fragment)	—
Dead man's switch	✓	—
Touch ID	✓ (macOS biometric gate)	✓
CI/CD	`keyblind run` for env injection	—
Network	Zero (fully local)	Zero
License	MIT	Proprietary
Free tier	✓ (5 secrets)	✓
Pro	$79/year (unlimited)	—

Security

AES-256-GCM encryption with PBKDF2 key derivation (600K iterations)
Machine-identity-bound key — encryption key XOR-wrapped with machine fingerprint
Zero network, zero telemetry — no cloud, no accounts, no analytics
Vault stored at `~/.keyblind/` with 0700 permissions
Deterministic sandbox fakes using HMAC-SHA256 per project + key name

Verifying Your Install

Releases are built and published from GitHub Actions with npm provenance, which attests the tarball was produced from this repository's CI rather than a developer machine.

npm audit signatures        # Verify npm registry signatures

To verify build provenance for a release, open the release page at https://github.com/aarifmms/keyblind/releases and check the "Provenance" and "Attestations" sections, which link the tarball to the exact commit and workflow run that built it.

Small dependency graph — the CLI depends on three packages only (MCP SDK, better-sqlite3, zod). Server-only deps (Stripe, Resend, the Vercel CLI) live in the hosted/ and dashboard/ packages and are not installed by npm i -g keyblind.
No source maps — the published tarball ships compiled JavaScript with no embedded original source.

CLI Reference

keyblind quickstart           One-command setup (init + configure Claude Code)

keyblind init Initialize the encrypted vault keyblind set Store a secret (value from stdin) keyblind set - Store a secret (prompts securely) keyblind get Resolve and print a secret keyblind list List all stored secrets keyblind delete Delete a secret keyblind setup-mcp Auto-configure MCP for Claude Code, Cline, Zed keyblind setup-mcp --local Write project MCP configs (Cursor, Windsurf, Copilot, Cline) keyblind sandbox [.env] Replace .env with deterministic fakes keyblind unsandbox [.env] Restore real .env values keyblind run Run command with secrets as env vars keyblind start Start MCP server (stdio — for AI agents) keyblind start --http Start HTTP server (dashboard + MCP + REST API) keyblind dashboard Open the web dashboard in your browser keyblind start --biometric Start MCP server with biometric requirement keyblind backends List available backends keyblind backend Switch backend keyblind activate Activate a Pro/Team license keyblind deactivate Remove current license keyblind status Show license and vault status keyblind audit Show secret resolution audit log keyblind check --expired List secrets past expiry keyblind rotate Update a secret value keyblind rotate --generate Rotate with an auto-generated value keyblind rotate --exec " " Rotate via an external command's stdout keyblind rotate --overdue [days] Rotate all secrets past the threshold keyblind rotate-needed [days] List secrets not rotated in N days (default 90) keyblind agents list List registered AI agents keyblind agents register [scope] Register an agent (prints signing key) keyblind agents verify Verify agent ledger integrity keyblind agents export [json|csv] Export compliance report keyblind agents

Only the beginning is shown; read the rest in the repo

Keyblind

Overview

PopNx MCP’s three pillars

What you can do with it

Install

Before you install

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Compared with others in Otheri

Common questions

Alternatives

Spec Driven Development

Remote Desktop Commander

sync. labs

README from the maker

Keyblind — Blind AI to Your Keys

Why

How It Works

Quick Start

2. One-command setup (initialize vault + configure Claude Code)

3. Store secrets

4. Sandbox your .env (AI agents see fakes)

5. Resolve a secret

6. Run commands with secrets injected as env vars

7. List all secrets (names only, values hidden)

MCP Server

Setup (automatic)

Setup (manual)

MCP Tools

Web Dashboard

Browser Extension

Pricing

Check your status

Backends

Keyblind vs Cloak

Security

Verifying Your Install

CLI Reference