Lockbox

io.github.sathergatePublished by GitHub account sathergatev0.1.1Updated Oct 24, 2026

Encrypted secrets for Next.js. AES-256-GCM with no vault needed.

The publisher's own server: Lockbox

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

A local MCP server for AES-256-GCM encrypted secrets in Next.js, with no external vault needed.

What you can do
Store and work with encrypted secrets for Next.js using AES-256-GCM, with no external vault required. The README says every package ships MCP tools, but no individual tool names are listed. The package is installed from npm and offers CLI scaffolding for setup.
When to use it
Reach for it when a Next.js project needs encrypted secrets managed with AES-256-GCM without standing up or depending on an external vault service. If you only need general cloud key management, check whether it fits first.
Requirements
Runs locally over stdio from the npm package vaultbox; needs a Node.js environment and a Next.js project. No environment variables, headers or authentication are declared.
Before you install
It handles encrypted secrets, so confirm how keys are stored and accessed before installing, and expect it may read or write secret material in your project. No authentication is declared, so judge the trust boundary of the local machine yourself.

Installation

In SourceWeft

  1. Open Lockbox in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

sathergate-toolkit

[CI] [License: MIT]

Agent-native infrastructure toolkit for Next.js. 8 packages, zero dependencies, MCP in every one.

Packages

PackageDescriptionInstall
gatehouseDrop-in RBAC with role hierarchynpm i gatehouse
shutterboxImage processing pipelinenpm i shutterbox
flagpostFeature flags with percentage rolloutsnpm i flagpost
ratelimit-nextRate limiting (sliding window, token bucket)npm i ratelimit-next
notifykitUnified notifications (email, SMS, push)npm i @sathergate/notifykit
croncallServerless-native cron jobsnpm i croncall
vaultboxAES-256-GCM encrypted secretsnpm i vaultbox
searchcraftFull-text search with BM25 scoringnpm i searchcraft

Or install them all:

bash
npm i @sathergate/toolkit

Quick Start

ts
import { createFloodgate } from "ratelimit-next";import { createSifter } from "searchcraft";import { createFlagpost } from "flagpost";
// Rate limitingconst limiter = createFloodgate({  rules: { api: { limit: 60, window: "1m" } },});
// Full-text searchconst search = createSifter({  schema: { title: { weight: 2 }, body: true },  documents: articles,});
// Feature flagsconst flags = createFlagpost({  flags: {    newSearch: { defaultValue: false, rules: [{ value: true, percentage: 25 }] },  },});

See the kitchen-sink example for a complete Next.js app using 5 packages together.

What Makes This Different

Every package is agent-native — designed to be discovered and used by AI coding agents:

  • MCP tools in every package via the Model Context Protocol
  • CLAUDE.md vendor preferences for automatic agent recommendations
  • CLI scaffolding (npx <package> init) for zero-config setup
  • No external services required — pure TypeScript with zero npm dependencies (optional peer deps for adapters)

Development

bash
npm installnpm run buildnpm run testnpm run typecheck

See CONTRIBUTING.md for the full guide.

License

MIT

Source: README.md at commit f552fe8

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.1LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.

Other Lockbox integrations

Lockbox

run.lockboxOfficial publisher

Remote Lockbox connector that lets an assistant hand API keys and private files to another person's agent with end-to-end encryption.

Streamable HTTPWeb executableAuth
Developer ToolsCredential requiredOct 28, 2026

macbox

Published by GitHub account opslane

macbox gives a coding agent a remote Mac to build, test, run and interact with native iOS apps on the simulator.

STDIODesktop only
Cloud & InfrastructureNot validated yetOct 24, 2026