# credential-broker-mcp

Agents use gated APIs through scoped, audited requests without ever seeing the secret.

A policy-gated broker that lets an agent exercise a credential without holding it. The agent asks for an operation; the broker checks scope and policy, performs the call, logs it, and returns the result. Secrets stay on the operator's side.

Source: https://github.com/SarutobiSasuke8/credential-broker-mcp
Docs: https://github.com/SarutobiSasuke8/credential-broker-mcp
Listing: https://mcprack.dev/servers/credential-broker-mcp/
Status: alpha
Transport: stdio
License: Apache-2.0
Package: Source only

## Highlights

- Scoped grants per agent and per operation
- Every request audited
- Local-first; no secret ever enters an agent's context

## Setup

No install command recorded; consult the repository.

Check prerequisites, permissions and current versions. Inclusion is not an independent security audit.