{"id":"be1f1ac0-7e76-4f8c-8cf9-ac19624a83c3","slug":"keyfold","kind":"mcp","name":"keyfold","summary":"Keyfold core: offline vault encryption, vault format, 2FA codes, and the CLI + MCP server that lets AI agents use your keys without seeing them. AGPL-3.0.","owner":"codewithkolin","repoUrl":"https://github.com/codewithkolin/keyfold","license":"AGPL-3.0","licenseTier":"strong-copyleft","trust":"community","stars":0,"match":null,"fewStars":true,"format":"mcp","createdAt":"2026-10-12T07:33:44.000Z","addedAt":"2026-10-20T20:56:11.120Z","logoUrl":"https://avatars.githubusercontent.com/u/60912819?u=d233f152533c304df52a4aa71c1191b269b8888c&v=4","linkOnly":false,"collection":null,"skillPath":null,"categories":["cloud-infra"],"tags":[],"runtime":"binary","local":true,"cloudCapable":false,"cloudCapability":"unknown","cloudReadyOnPlatform":false,"needsApiKey":false,"reviewed":false,"syncedAt":"2026-10-20T20:56:57.967Z","sample":false,"url":"https://conduits.dev/tools/keyfold","language":"Rust","transports":["stdio"],"install":{},"requirements":{"env":[],"upstreamMayCharge":false},"tools":null,"readme":"# Keyfold core\n\nThe open-source parts of [Keyfold](https://keyfold.app), an offline-first vault for developers: API keys organised by project and environment, plus passwords, in one encrypted file. No account, no cloud, no telemetry.\n\nThe Keyfold app for Mac is built on these crates (Windows is coming through the Microsoft Store). Get it at [keyfold.app/download](https://keyfold.app/download); signed builds are also on the [Releases](https://github.com/codewithkolin/keyfold/releases) page.\n\n## What is here\n\n| Crate | What it does |\n|---|---|\n| [`crates/keyfold-core`](crates/keyfold-core) | Argon2id key derivation, XChaCha20-Poly1305 envelope encryption, the tamper-evident vault format, rolling backups, the Recovery Kit, `.env` parsing, key detection patterns, 2FA codes (RFC 6238) and offline Ed25519 licence verification |\n| [`crates/keyfold-agent`](crates/keyfold-agent) | The JSON-line protocol between the `keyfold` CLI and the running app, over an owner-only local socket |\n| [`crates/keyfold-cli`](crates/keyfold-cli) | The `keyfold` command line and the MCP server for Cursor and Claude Code. No tool returns a secret value; every request is approved in the app |\n\n## Use it with an AI agent (MCP)\n\n`keyfold mcp` lets Claude Code, Cursor, Codex, Gemini CLI and other MCP clients use your API keys without the model seeing them. Its seven tools list project and key names, write a `.env` file you approve, run a command with the keys injected, store a key, create a project and import a `.env` file. None of them returns a secret value. Every request waits for your click in the Keyfold app, which shows the command or file the keys are for.\n\n1. Install [Keyfold for Mac](https://keyfold.app/download). In the app, open Settings › General › Command line and MCP and click Install, which puts `keyfold` on your `PATH`.\n2. Add the server to your client:\n\n```\nclaude mcp add --scope user keyfold -- keyfold mcp\n```\n\nCursor (`.cursor/mcp.json`): `{ \"mcpServers\": { \"keyfold\": { \"command\": \"keyfold\", \"args\": [\"mcp\"] } } }`\n\nA command you approve can still print a key, and the model reads what it prints; the [MCP guide](docs/MCP.md) covers that and one-hour approvals. The server needs the Keyfold app running and unlocked on the same Mac. The [`Dockerfile`](Dockerfile) builds it on Linux only so that MCP directories can read its tool list.\n\nMCP Registry name: `mcp-name: io.github.codewithkolin/keyfold`\n\n## Docs\n\n- [Vault format](docs/VAULT_FORMAT.md): every byte of the file, and how it is authenticated.\n- [Threat model](docs/THREAT_MODEL.md): what Keyfold protects against, and what it cannot.\n- [MCP and CLI guide](docs/MCP.md): connecting an AI agent without showing it your keys.\n\n## Build and test\n\n```\ncargo test --workspace\ncargo clippy --workspace --all-targets -- -D warnings\ncargo build --release -p keyfold-cli   # the `keyfold` binary\n```\n\nRust stable, no other toolchain needed.\n\n## Security\n\nPlease report vulnerabilities privately; see [SECURITY.md](SECURITY.md).\n\n## Licence\n\nAGPL-3.0-only. See the `LICENSE` file in each crate. The Keyfold desktop app around these crates is proprietary.\n"}