Servers / credential-broker-mcp

credential-broker-mcp

Agents use gated APIs through scoped, audited requests without ever seeing the secret.

TypeScriptstdioalphaNot in the registry yet

Owner-built project. Status is maintainer-reported; inclusion is not an independent audit. Version information may lag upstream releases. Listing standards · Read as Markdown

A policy-gated broker that lets an agent exercise a credential without holding it. The agent asks for an operation; the broker checks scope and policy, performs the call, logs it, and returns the result. Secrets stay on the operator's side.

What it does

  • Scoped grants per agent and per operation
  • Every request audited
  • Local-first; no secret ever enters an agent's context