KeyZula

Name: KeyZula
Author: KeyZula

by KeyZulaversion 1.2.4i★ –iRuns on your computer

Registry namecom.keyzula/keyzula

Install

Overview

Description from the maker (original English)

Use passwords and API keys from your KeyZula vault without the assistant seeing them.

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

User voiceiNo reviews yetReviews open together with accounts in a later step
Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
UsageiNot measured yet★ –

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Runs on your computer
Transport: stdio
Category: Other
You need to fill in: KEYZULA_SERVICE_TOKEN

Install

Pick the AI app you use, then copy the settings.

Before you install

Basic checks: 1 of 1 passed
Runs on your computer with your user’s permissions (files, network, apps).
You fill in yourself: KEYZULA_SERVICE_TOKEN, KEYZULA_MCP_ALLOW_REVEAL

Values marked secret are keys to your account. Never share them or paste them into a chat.

You need

npmNode.js installed (for the npx command)

Which app do you use?

ClaudeClaude CodeCursorVS CodeChatGPT

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "keyzula": {
      "command": "npx",
      "args": [
        "-y",
        "@keyzula/cli",
        "mcp"
      ],
      "env": {
        "KEYZULA_SERVICE_TOKEN": "your-value",
        "KEYZULA_MCP_ALLOW_REVEAL": "your-value"
      }
    }
  }
}

Run this in your terminal

claude mcp add keyzula --env KEYZULA_SERVICE_TOKEN=your-value --env KEYZULA_MCP_ALLOW_REVEAL=your-value -- npx -y @keyzula/cli mcp

Fill in the empty values before running it.

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "keyzula": {
      "command": "npx",
      "args": [
        "-y",
        "@keyzula/cli",
        "mcp"
      ],
      "env": {
        "KEYZULA_SERVICE_TOKEN": "your-value",
        "KEYZULA_MCP_ALLOW_REVEAL": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "keyzula": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@keyzula/cli",
        "mcp"
      ],
      "env": {
        "KEYZULA_SERVICE_TOKEN": "your-value",
        "KEYZULA_MCP_ALLOW_REVEAL": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

Values you fill in

KEYZULA_SERVICE_TOKEN secret env
Optional service account token (kzsa_1_…). Without it, the server uses your unlocked `keyzula ssh-agent`.
KEYZULA_MCP_ALLOW_REVEAL env
Set to true to offer read_secret; every request still needs approval in a window on your computer.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026

✓ Pass
Maker matches the repo
The registry name was verified against the domain keyzula.com (the registry checks domain ownership)
… Not checked yet
Still maintained
We have not read this repo from GitHub yet
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
– Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
– Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
… Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Otheri

More stars than 0% of the other 32403 servers in this category
Published to the registry more recently than 95% of the other 32403 servers in this category
Basic checks equal to or better than 100% of the other 32403 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is KeyZula safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: KEYZULA_SERVICE_TOKEN

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed –, and the latest version (1.2.4) reached the registry yesterday.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.

What can I use instead?

In the same category: Spec Driven Development, Remote Desktop Commander, LickityClick

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Spec Driven Development

by formulahendry

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

Runs on your computer★ 440MITUpdated 14 months ago

Install

Remote Desktop Commander

by desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

Runs in the cloud★ 211Updated yesterday

Install

LickityClick

by lickity.click

Create, edit and track LickityClick short links, campaigns and click stats from your AI assistant.

Computer or cloudUpdated today

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

KeyZula MCP server

Let GitHub Copilot, Claude, Cursor and other AI assistants use the passwords, API keys and tokens in your KeyZula vault without the values ever entering the conversation.

The assistant finds items by name, website or username and passes secrets to the programs it runs through kz:// references. Values go into the environment of a command (concealed in its output) or into a file only you can read. The assistant receives names and references, never the secrets themselves.

MCP Registry: com.keyzula/keyzula
Package: @keyzula/cli on npm (keyzula mcp, stdio)
Website and setup guide: keyzula.com/en/ai

This repository holds the documentation and registry metadata for the server. The server is part of the KeyZula command-line tool, published on npm and Homebrew.

Tools

Tool	What it does	What the assistant receives
`search_items`	Searches your vault by name, username, website or folder	Names, locations, usernames, websites and `kz://` references, never values
`run_command`	Runs a command with secrets in its environment variables	Exit code and output, with secret values concealed
`inject_template`	Fills a `{{ kz://… }}` template and writes a file only you can read	Only the file path
`generate_password`	Generates a strong password or passphrase	The generated value (not saved)
`vault_status`	Shows whether KeyZula is signed in and unlocked	Status
`read_secret`	Shows one value, such as a 2FA code	Off by default; when turned on, every request needs your approval in a window on your computer

Requirements

A KeyZula account (free).
The KeyZula command-line tool, signed in and unlocked once in a terminal:

npm i -g @keyzula/cli        # or: brew install keyzula/tap/keyzula

keyzula login keyzula ssh-agent --daemon

The MCP server reads only from this unlocked agent and never asks for your master password. It runs on macOS, Linux and Windows.

Configuration

VS Code and GitHub Copilot

Install from the MCP server gallery in VS Code, or add it to .vscode/mcp.json (or your user mcp.json):

"servers": { "keyzula": { "type": "stdio", "command": "npx", "args": ["-y", "@keyzula/cli", "mcp"] } } }

If you installed the CLI globally, you can use "command": "keyzula", "args": ["mcp"] instead. Desktop apps may not see your terminal's PATH; use the full path from which keyzula (Windows: where keyzula) if needed.

Claude, Cursor, Windsurf and other clients

Most clients use the mcpServers format:

"mcpServers": { "keyzula": { "command": "npx", "args": ["-y", "@keyzula/cli", "mcp"] } } }

Claude Code: claude mcp add keyzula -- npx -y @keyzula/cli mcp. For Claude Desktop, a one-click extension is available at keyzula.com/en/ai.

Options

Setting	Flag	Environment variable
Offer `read_secret` (every request still needs your approval)	`--allow-reveal`	`KEYZULA_MCP_ALLOW_REVEAL=true`
Ask before every command or file that uses a secret	`--confirm`	`KEYZULA_MCP_CONFIRM=true`
Limit the assistant to an organization's service account		`KEYZULA_SERVICE_TOKEN=kzsa_1_…`

Usage

Ask in plain language; the assistant picks the right item and tool:

"Deploy with the Cloudflare API token from KeyZula."
"Run the database migrations using the staging Postgres password."
"Create a .env file for this project from my KeyZula items."
"Which KeyZula items do I have for AWS?"

For example, run_command can run wrangler deploy with CLOUDFLARE_API_TOKEN set to kz://~/Cloudflare/password (~ is your personal vault). The command gets the value; the assistant sees only the reference and the command's output, with the value concealed.

Privacy and control

Vault data is end-to-end encrypted; the server never sees it in plain text. The MCP server talks to the KeyZula agent on your computer over a private local socket.
Every use appears in your access log as "Used by an AI assistant" (item, action and time, never the value).
Lock the vault at any time with keyzula lock; the assistant then has no access until you unlock it.
Nothing is sent to the AI provider or any third party by the server itself.

More: keyzula.com/en/ai · Command-line guide · Privacy policy · Support: info@keyzula.com

KeyZula

Overview

PopNx MCP’s three pillars

What you can do with it

Install

Before you install

Values you fill in

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Compared with others in Otheri

Common questions

Alternatives

Spec Driven Development

Remote Desktop Commander

LickityClick

README from the maker

KeyZula MCP server

Tools

Requirements

Configuration

VS Code and GitHub Copilot

Claude, Cursor, Windsurf and other clients

Options

Usage

Privacy and control