Demipass

com.dustforgePublished by dustforge.comv2.5.0Updated Nov 3, 2026

Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context.

VerifiedSTDIODesktop onlyCloud & Infrastructure Developer Tools Security & Monitoring

Server details

Identifier: com.dustforge/demipass
Transport: STDIO
Runtime: Desktop only
Trust: Verified
Published: Sep 16, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified that this server's namespace belongs to dustforge.com. It runs from a package rather than a hosted endpoint, so there is no endpoint to match against that domain.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/com.dustforge%2Fdemipass.svg)](https://sourceweft.com/mcp/com.dustforge%2Fdemipass?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

DemiPass lets an assistant store, find, rotate and use credentials through the Dustforge service without the secret values ever entering its context.

What you can do: Store, search, list and track expiring secrets by name, type or provider, with values never returned
Request short-lived use-tokens and redeem them to run actions such as SSH or HTTP calls with the secret injected server-side
Rotate secrets, including blind server-side password rotation where the new password stays out of the agent's context
Check identity, trust band and wallet status, and self-onboard to the Dustforge platform
Record and verify temporal anchors and audit trails through the bundled Buoy tools
When to use it: Useful when an agent needs to act on systems that require credentials — SSH hosts, APIs, databases, git or SMTP — and you want the secrets kept out of prompts, completions and logs. Also relevant if you want an auditable trail of agent actions.
Requirements: Runs as a local Node.js process installed from the npm package, launched via node. Needs a Dustforge account and a bearer token supplied in the DEMIPASS_TOKEN environment variable, obtained by self-onboarding or a 2FA email flow. The API base URL defaults to the hosted Dustforge endpoint and can be overridden with DEMIPASS_URL. Network access to that service is required.

Before you install

The bearer token in DEMIPASS_TOKEN is a credential granting access to your vault; keep it out of shared configs. All encryption, storage and secret execution happen on the Dustforge server, so secret values and the targets you act on are sent to that third party. Tools can store, rotate and use credentials and submit a permanent origin refraction, so review write actions before approving them. Ref codes are described as safe to share, but treat them as sensitive anyway.

Installation

In SourceWeft

Open Demipass in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

DemiPass

Secrets management SDK for AI agents. Keep credentials out of context windows.

DemiPass is a client SDK for the Dustforge identity platform. It provides MCP tools that teach AI agents (Claude Code, Codex, or any MCP-compatible agent) how to handle secrets without exposing them in the prompt, completion, or logs.

How it works

You store a credential → DemiPass encrypts it server-side
Your agent requests a 30-second use-token via ref code
DemiPass injects the secret server-side (SSH, HTTP header, etc.)
The agent gets the result back — never the secret itself

Install

MCP Setup

Add to your .mcp.json:

json

{  "mcpServers": {    "demipass": {      "command": "node",      "args": ["node_modules/demipass/mcp-server.js"],      "env": {        "DEMIPASS_URL": "https://api.dustforge.com",        "DEMIPASS_TOKEN": "your-bearer-token"      }    },    "buoy": {      "command": "node",      "args": ["node_modules/demipass/buoy-mcp.js"],      "env": {        "BUOY_URL": "https://api.dustforge.com",        "BUOY_TOKEN": "your-bearer-token"      }    }  }}

{  "mcpServers": {    "demipass": {      "command": "node",      "args": ["node_modules/demipass/mcp-server.js"],      "env": {        "DEMIPASS_URL": "https://api.dustforge.com",        "DEMIPASS_TOKEN": "your-bearer-token"      }    },    "buoy": {      "command": "node",      "args": ["node_modules/demipass/buoy-mcp.js"],      "env": {        "BUOY_URL": "https://api.dustforge.com",        "BUOY_TOKEN": "your-bearer-token"      }    }  }}

MCP Tools

DemiPass (secrets)

Tool	Description
`demipass_store`	Deposit a secret — encrypted at rest, never returned
`demipass_ssh`	SSH via ref code — password injected server-side
`demipass_use`	Combined token request + execute in one call
`demipass_search`	Find secrets by name, type, or provider
`demipass_list`	List all secrets (names + metadata, never values)
`demipass_expiring`	List secrets expiring within N days
`demipass_rotate`	Rotate a secret with context transfer
`demipass_rotate_blind`	Server-side password rotation — new password never enters agent context
`demipass_whoami`	Check identity, trust band, wallet status
`demipass_get_token`	Request a 30-second use-token
`demipass_execute`	Redeem a use-token
`demipass_onboard`	Self-onboard to Dustforge
`demipass_genesis_seed`	Get the ODT seed document
`demipass_genesis_submit`	Submit origin refraction (permanent)
`demipass_genesis_verify`	Verify refraction matches origin
`demipass_genesis_status`	Check genesis status

Buoy (temporal anchoring)

Tool	Description
`buoy_tick`	Drop a temporal anchor (begin, complete, handoff, decision, etc.)
`buoy_verify`	Verify a tick signature
`buoy_chain_verify`	Verify chain integrity
`buoy_stats`	Total ticks, streak, first/last
`buoy_ledger`	Read recent tick history

SDK Usage

javascript

const demipass = require('demipass');
demipass.configure({  baseUrl: 'https://api.dustforge.com',  bearerToken: 'your-token',});
// Store a secretawait demipass.store({ name: 'my-api-key', value: 'sk-...', type: 'api_key' });
// SSH via ref code (password never in your code)await demipass.ssh({ ref: 'DP-PWD-myserver-7f3a9c1e', target_host: '1.2.3.4', command: 'uptime' });
// Search secretsawait demipass.search({ query: 'openrouter' });
// Blind password rotation (new password never visible)await demipass.rotateBlind({ ref: 'DP-PWD-old-ref', target_host: '1.2.3.4', reason: 'exposed' });

const demipass = require('demipass');
demipass.configure({  baseUrl: 'https://api.dustforge.com',  bearerToken: 'your-token',});
// Store a secretawait demipass.store({ name: 'my-api-key', value: 'sk-...', type: 'api_key' });
// SSH via ref code (password never in your code)await demipass.ssh({ ref: 'DP-PWD-myserver-7f3a9c1e', target_host: '1.2.3.4', command: 'uptime' });
// Search secretsawait demipass.search({ query: 'openrouter' });
// Blind password rotation (new password never visible)await demipass.rotateBlind({ ref: 'DP-PWD-old-ref', target_host: '1.2.3.4', reason: 'exposed' });

Architecture

DemiPass is a client SDK — all encryption, storage, and secret execution happens on the Dustforge server. This package provides:

MCP tool definitions with behavioral descriptions that teach agents the protocol
SDK functions that wrap the Dustforge API
Self-healing contexts — if a secret has no approved context, the SDK auto-creates one
Buoy MCP tools for temporal anchoring and audit trails

The secrets vault, trust gradient, velocity throttle, and other security features are implemented in Dustforge. See dustforge.com for the platform documentation.

Ref Codes

Every stored secret gets a routed reference code:

DP-PWD-myserver-7f3a9c1e│  │   │         ││  │   │         └── unique nonce│  │   └── target hint│  └── secret type (PWD/API/TKN/SSH/CRT/SEC)└── DemiPass prefix

DP-PWD-myserver-7f3a9c1e│  │   │         ││  │   │         └── unique nonce│  │   └── target hint│  └── secret type (PWD/API/TKN/SSH/CRT/SEC)└── DemiPass prefix

Share ref codes freely — they're routing addresses, not secrets.

License

MIT — AKStrapped LLC

Source: README.md at commit 980c9ed

Tools

SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

v2.5.0LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts
Declare a license in the repository or the registry entry.