MCP Secrets Vault – Local MCP proxy to keep API keys out of LLM context
Local-first MCP mini-vault: let AIs call external APIs without ever seeing your keys. - RachidChabane/mcp-secrets-vault
MCP Secrets Vault – Local MCP proxy to keep API keys out of LLM context launched on September 2, 2025 with 11 votes, #1,008 of 8,160 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 1 year on.
In plain words
MCP Secrets Vault is a local proxy server that prevents API keys and sensitive credentials from being exposed to large language models. It intercepts requests and stores secrets locally, allowing LLMs to reference them by placeholder names instead of actual values. Designed for developers building AI applications, it reduces the risk of credential leakage while maintaining functionality across multiple API integrations. The tool works as a Model Context Protocol implementation for secure secret management.
written from the facts on this page · September 2026
Does a similar job
all alternatives →
Agent Vault – Open-source credential proxy and vault for agentsApr 2026 · github.com · ▲156Hey HN! Today we're launching Agent Vault - an open source HTTP credential proxy and vault for AI agents. Repo is at https://github.com/Infisical/agent-vault, and there's an in-depth description at https://infisical.com/blog/agent-vault-the-open-source-crede.... We built Agent Vault in response to a question that been plaguing the industry: How do we give agents secure access to services without them reading any secrets? Most teams building agents have run into this exact problem: They build an agent or agentic system and come to realize at some point…
OneCLI – Vault for AI Agents in RustMar 2026 · github.com · ▲161We built OneCLI because AI agents are being given raw API keys. And it's going about as well as you'd expect. We figured the answer isn't "don't give agents access," it's "give them access without giving them secrets." OneCLI is an open-source gateway that sits between your AI agents and the services they call. You store your real credentials once in OneCLI's encrypted vault, and give your agents placeholder keys. When an agent makes an HTTP call through the proxy, OneCLI matches the request by host/path, verifies the agent should have access, swaps the placeholder for the real…
Vault on AWS – A Terraform Project for Secrets Management Anywhere2020 · github.com · ▲21A secure HashiCorp Vault for secrets, tokens, keys, passwords, and more. Automated deployment with Terraform on AWS. Configurable options for security and scalability. Usable with any applications and services hosted anywhere. - jcolemorrison/vault-on-aws
Permit MCP GatewayMar 2026 · permit.io · ▲134Hi HN, Gabriel, Co-Founder at Permit.io. We're releasing Permit MCP Gateway today, an authorization proxy for MCP servers. TL;DR - we built an MCP Gateway that developers love and CISOs trust. Watch more[0] Now, after your little hate on using fancy copy on HN, to the real thing: MCP is in a strange place. Developers are debating whether it's overcomplicated compared to CLIs or skills files. Meanwhile, enterprises are adopting it by default because every agentic system that acts on your behalf, Cursor, Claude, Copilot, internal agents, needs a stable infrastructure for connecting to tools.…


More ai this month
the category →



Paintings by AI models: programs run through a simulation of oil paint.
AI · 22d ago · stillwet.art

FastRouter.ai▲364Route requests to the right LLM for cost, latency & quality
AI · 23d ago · fastrouter.ai
Source: Show HN post ↗
Launched alongside, September 2025
the whole month →

The site hit #1 on HN about a year ago. Got enough traffic that I turned it into a proper API. What's there: - REST API — 35k products, manually filterable by category, free key, 60 req/min - CLI — npx anycrap random -c food - faker.js plugin — bundled, no API call, works offline - HuggingFace dataset — full 35k rows for ML/training https://anycrap.shop/developers
AI · 2025 · anycrap.shop

I made a built-from scratch Wayland Compositor to display any GUI app* in the terminal! I think there is a lot of unexplored potential in custom Wayland compositors, a lot of really cool things you can embed existing applications into! So, I started with embedding apps into the terminal because that is the easiest input/output (output is just utf-8 and I use the great `chafa` library for that, and I just read from stdin for the input). If you have any other ideas for cool Wayland compositors, let me know. I purposedly wrote 80% the app in Typescript to appeal to the most developers and…
Dev tools · 2025 · github.com
- IR
Years ago I stumbled across a basic version of this concept and it stuck with me. I knew if I was ever going to take on such a project, it would need to be flawless, but without coding experience it was just another idea that would never happen. By the end of 2024, as AI coding tools exploded everywhere, I finally had a way to make it real. I started from zero knowledge and spent months collaborating with AI agents as a learning experience. Every pixel and every function went through me. The AI translated what I asked for into code, but every decision was human. I didn't use existing OS…
AI · 2025 · mitchivin.com

