Keyblind

io.github.aarifmms由 GitHub 帳號 aarifmms 發布v0.8.8更新於 Oct 24, 2026

Encrypted secrets vault for AI agents. 27 MCP tools resolve secrets at runtime, never leaking them.

已驗證STDIO僅桌面開發者工具安全與監控

概覽

AI 產生的概覽

本機加密密鑰保險庫，透過 MCP 讓 AI 助理儲存、列出與解析密鑰，而明文不會進入對話紀錄。

可以做什麼
  • 在本機加密保險庫中儲存、列出、解析與刪除密鑰，值不會進入對話紀錄
  • 對 .env 檔案進行沙箱與還原，讓代理只看到確定性的假值
  • 檢視稽核日誌、產生 TOTP 驗證碼，建立或接收加密的限時分享連結
  • 管理團隊保險庫、註冊代理、記錄簽章動作並匯出合規報告
  • 查詢死亡開關狀態與 SSO/OIDC 驗證狀態
適用情境
適合讓編碼代理在需要 API 密鑰、資料庫連線字串或權杖的專案中工作，並希望這些值在執行時解析，而不是被貼進對話或提交到 .env 檔案。也適合需要稽核紀錄、依密鑰設定原則或代理存取審批的團隊。
執行需求
以 npm 套件 keyblind 形式透過 stdio 在本機執行，通常用 npx 或 keyblind start 啟動，需先初始化保險庫。未宣告任何帳號、API 密鑰或環境變數。選用的 1Password、Bitwarden、AWS、GCP、Azure 後端需要各自對應的 CLI。團隊保險庫、稽核日誌、分享、TOTP、生物辨識門檻與 SSO 等功能需要付費的 Pro 或 Team 授權。
安裝前請注意
它保存你最敏感的憑證，請妥善保護保險庫及其口令；加密金鑰與機器指紋綁定。工具可以寫入、覆寫與刪除密鑰，沙箱或還原 .env 檔案，並建立分享連結，代理發起的變更應加以審核。本機儀表板無需登入或配對權杖即可存取，生物辨識門檻等多項功能需要付費授權。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Keyblind，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Keyblind — Blind AI to Your Keys

Encrypted secrets vault with MCP for AI agents. One command configures every editor. Secrets resolved at runtime, never leaked to LLM conversations.

[npm version] [License: MIT]

Why

Developers regularly leak API keys, passwords, and tokens to AI coding tools. 100,000+ LLM conversations with exposed secrets were found indexed by search engines in 2025.

AI agents read your .env files. They copy-paste secrets into conversations. They commit them accidentally. Keyblind stops this by keeping secrets encrypted at rest and resolving them at runtime — the plaintext value never touches the LLM transcript.

How It Works

┌──────────┐     ┌────────────────┐     ┌─────────────────┐│ AI Agent │ ──→ │  Keyblind MCP  │ ──→ │  Encrypted      ││ (Claude) │     │  Server        │     │  SQLite Vault   ││          │ ←── │  (27 tools)    │ ←── │  (AES-256-GCM)  │└──────────┘     └────────────────┘     └─────────────────┘      ↑                                        │      │ secret value never appears             │ secrets never      │ in conversation transcript             │ stored in plaintext

Quick Start

bash
# 1. Installnpm i -g keyblind
# 2. One-command setup (initialize vault + configure Claude Code)keyblind quickstart
# 3. Store secretsecho "sk-proj-abc123" | keyblind set OPENAI_API_KEYkeyblind set DATABASE_URL -    # prompts securely
# 4. Sandbox your .env (AI agents see fakes)keyblind sandbox
# 5. Resolve a secretkeyblind get OPENAI_API_KEY
# 6. Run commands with secrets injected as env varskeyblind run -- npm start
# 7. List all secrets (names only, values hidden)keyblind list

That's it. After keyblind quickstart, restart Claude Code. Then just say "list my keyblind secrets" or "use my OPENAI_API_KEY" — the AI agent resolves secrets at runtime without ever seeing them in the transcript.

MCP Server

Keyblind is MCP-first — it works with every AI tool that speaks the Model Context Protocol (Claude Code, Cursor, Copilot, Windsurf, Cline, Zed).

Setup (automatic)

bash
keyblind setup-mcp

This auto-configures Claude Code, Cline, and Zed to use Keyblind. Works from any directory.

For project-local editors (Cursor, Windsurf, Copilot, Cline project mode), run from your project root:

bash
keyblind setup-mcp --local

See editor-specific configs for details and manual setup.

Setup (manual)

Add a .mcp.json to your project root, or use claude mcp add:

bash
claude mcp add --scope user keyblind -- keyblind start

With biometric gate (Touch ID required before secrets are resolved):

bash
keyblind unlock                      # Authenticate firstclaude mcp add keyblind -- keyblind start --biometric

Session expires after 15 minutes. Requires Pro or Team license.

MCP Tools

ToolDescription
resolve_secretResolve a secret at runtime (value hidden from transcript)
store_secretEncrypt and store a secret
list_secretsList secret names (values never revealed)
delete_secretDelete a secret
sandbox_envReplace .env values with deterministic fakes
unsandbox_envRestore real .env values from vault
audit_logView secret resolution audit trail
totp_codeGenerate a TOTP 2FA code for a stored config
totp_storeStore a TOTP configuration from otpauth:// URI
totp_listList all stored TOTP configurations
totp_deleteDelete a TOTP configuration
create_share_linkCreate encrypted, expiring share link for a secret
receive_shareReceive and decrypt a shared secret
deadman_statusCheck dead man's switch status
deadman_checkinReset dead man's switch timer
team_initCreate a shared team vault (encrypted SQLite)
team_pushPush a local secret to the team vault
team_pullImport all secrets from the team vault
team_listList secret names in the team vault
team_resolveResolve (decrypt) a secret from the team vault
team_deleteDelete a secret from the team vault
sso_statusCheck SSO/OIDC authentication status
register_agentRegister an AI agent bound to a human sponsor
record_actionAppend a signed action to the tamper-proof ledger
verify_ledgerVerify ledger integrity (hash chain + signatures)
list_agentsList registered AI agents
export_complianceExport the agent ledger as a compliance report

Web Dashboard

Manage your secrets from a browser — no sign-in or pairing required. Open the local dashboard:

bash
keyblind dashboard

This starts the local server and opens http://localhost:4318/ in your browser. The dashboard is served same-origin with the REST API, so it works in every browser with no CORS, no pairing token, and no login. Features:

  • View, add, copy, and delete secrets
  • Audit log with full access history
  • License management (tier, email, expiry)
  • Pro/Team tier status
  • Per-secret access policies and rotation reminders
  • Agent action approvals (approve/deny queued agent writes)
  • Central control plane (org-wide visibility + signed revocation)

A hosted control plane (hosted/) adds orgs, roles, groups, a signed revocation + group-scope manifest, multi-provider SSO login (with org auto-provisioning, multi-org switching, and IdP end-session revocation), and short-lived agent credentials. See docs/enterprise.md (Phase 2).

Browser Extension

The Keyblind Chrome Extension detects and blocks secrets from being pasted into AI chat interfaces (Claude.ai, ChatGPT, Copilot).

[Chrome Web Store]

Features:

  • Detects 12+ API key formats (OpenAI, GitHub, Stripe, AWS, etc.)
  • Intercepts paste events on AI chat sites
  • Warning banner when secrets are detected
  • Popup with vault connection status

Located in browser-extension/. Load as unpacked extension from chrome://extensions.

Pricing

FreeProTeam
Price$0$79/year$29/user/month
Secrets5UnlimitedUnlimited
Local vault✓✓✓
Sandbox / Unsandbox✓✓✓
MCP server✓✓✓
Dashboard✓✓✓
Browser extension✓✓✓
7 backends✓✓✓
Team vaults—✓✓
Audit log—✓✓
Secret sharing—✓✓
Dead man's switch—✓✓
TOTP 2FA—✓✓
Biometric gate—✓✓
SSO/OIDC——✓
CI/CD integration—✓✓
bash
# Buy a license at keyblind.dev, then activate:keyblind activate <your-license-key>
# Check your statuskeyblind status

Backends

Keyblind supports multiple secret backends:

bash
keyblind backends                          # List available backendskeyblind backend 1password                 # Switch to 1Passwordkeyblind backend bitwarden                 # Switch to Bitwarden
BackendReadWriteRequires
local (default)✓✓Nothing
1password✓✓op CLI
bitwarden✓—bw CLI
env✓—Nothing
aws✓✓aws CLI
gcp✓✓gcloud CLI
azure✓✓az CLI

Keyblind vs Cloak

KeyblindCloak
ProtocolMCP (all editors)VS Code extension only
EditorsClaude Code, Cursor, Copilot, Windsurf, Cline, ZedVS Code, Cursor
StorageAES-256-GCM SQLiteAES-256-GCM file
BackendsLocal, 1Password, Bitwarden, Env, AWS, GCP, AzureLocal only
SandboxDeterministic HMAC fakesAES-256-GCM encrypted
Web dashboard✓ (localhost:4318)—
Browser extension✓ (Chrome)—
TOTP 2FA✓—
Secret sharing✓ (encrypted URL fragment)—
Dead man's switch✓—
Touch ID✓ (macOS biometric gate)✓
CI/CDkeyblind run for env injection—
NetworkZero (fully local)Zero
LicenseMITProprietary
Free tier✓ (5 secrets)✓
Pro$79/year (unlimited)—

Security

  • AES-256-GCM encryption with PBKDF2 key derivation (600K iterations)
  • Machine-identity-bound key — encryption key XOR-wrapped with machine fingerprint
  • Zero network, zero telemetry — no cloud, no accounts, no analytics
  • Vault stored at ~/.keyblind/ with 0700 permissions
  • Deterministic sandbox fakes using HMAC-SHA256 per project + key name

Verifying Your Install

Releases are built and published from GitHub Actions with npm provenance, which attests the tarball was produced from this repository's CI rather than a developer machine.

bash
npm audit signatures        # Verify npm registry signatures

To verify build provenance for a release, open the release page at https://github.com/aarifmms/keyblind/releases and check the "Provenance" and "Attestations" sections, which link the tarball to the exact commit and workflow run that built it.

  • Small dependency graph — the CLI depends on three packages only (MCP SDK, better-sqlite3, zod). Server-only deps (Stripe, Resend, the Vercel CLI) live in the hosted/ and dashboard/ packages and are not installed by npm i -g keyblind.
  • No source maps — the published tarball ships compiled JavaScript with no embedded original source.

CLI Reference

keyblind quickstart           One-command setup (init + configure Claude Code)keyblind init                 Initialize the encrypted vaultkeyblind set <name>           Store a secret (value from stdin)keyblind set <name> -         Store a secret (prompts securely)keyblind get <name>           Resolve and print a secretkeyblind list                 List all stored secretskeyblind delete <name>        Delete a secretkeyblind setup-mcp            Auto-configure MCP for Claude Code, Cline, Zedkeyblind setup-mcp --local    Write project MCP configs (Cursor, Windsurf, Copilot, Cline)keyblind sandbox [.env]       Replace .env with deterministic fakeskeyblind unsandbox [.env]     Restore real .env valueskeyblind run <command...>     Run command with secrets as env varskeyblind start                Start MCP server (stdio — for AI agents)keyblind start --http         Start HTTP server (dashboard + MCP + REST API)keyblind dashboard            Open the web dashboard in your browserkeyblind start --biometric    Start MCP server with biometric requirementkeyblind backends             List available backendskeyblind backend <name>       Switch backendkeyblind activate <key>       Activate a Pro/Team licensekeyblind deactivate           Remove current licensekeyblind status               Show license and vault statuskeyblind audit                Show secret resolution audit logkeyblind check --expired      List secrets past expirykeyblind rotate <name>        Update a secret valuekeyblind rotate <name> --generate  Rotate with an auto-generated valuekeyblind rotate <name> --exec "<cmd>"  Rotate via an external command's stdoutkeyblind rotate --overdue [days]    Rotate all secrets past the thresholdkeyblind rotate-needed [days] List secrets not rotated in N days (default 90)keyblind agents list         List registered AI agentskeyblind agents register <name> <sponsor> [scope]  Register an agent (prints signing key)keyblind agents verify       Verify agent ledger integritykeyblind agents export [json|csv]  Export compliance reportkeyblind agents enforce on|off  Require signed agent identity for secret accesskeyblind policy set <secret> <policy>  Restrict which agents may access a secretkeyblind policy list          List per-secret policieskeyblind approvals list       List pending approval requestskeyblind approvals approve <id>  Approve and execute a pending requestkeyblind approvals deny <id>  Deny a pending requestkeyblind approvals require on|off  Require approval for all agent writeskeyblind approvals require <secret>  Require approval for a specific secretkeyblind approvals unrequire <secret>  Stop requiring approval for a secretkeyblind control-plane init   Generate the org signing keypairkeyblind control-plane export  Export a signed, value-free control-plane bundlekeyblind control-plane trust <pubkey>  Trust an org public key (honor its deny list)keyblind control-plane untrust <pubkey>  Remove a trusted org public keykeyblind control-plane trusted  List trusted org public keyskeyblind control-plane apply <file>  Import a signed deny list (revoked agents)keyblind control-plane revoke <agentId> [reason]  Revoke an agent locallykeyblind control-plane unrevoke <agentId>  Un-revoke an agent locallykeyblind control-plane connect <url>  Connect to a hosted control plane (org API base)keyblind control-plane sync   Pull + apply the signed manifest (deny list + group grants)keyblind control-plane disconnect  Forget the hosted control-plane connectionkeyblind control-plane status  Show the current connection (if any)keyblind scan-repo [--all]    Scan tracked files (or full history) for secretskeyblind setup-ci             Write a GitHub Actions secret-scan workflowkeyblind ci export            Export an encrypted bundle for CI injection (Pro)keyblind ci inject            Decrypt a bundle and write secrets to $GITHUB_ENVkeyblind ci setup             Write a GitHub Actions workflow for CI injectionkeyblind team init [path]     Create a shared team vaultkeyblind team push <name>     Push a secret to team vaultkeyblind team pull            Pull secrets from team vaultkeyblind team list            List secrets in team vaultkeyblind totp set <name>      Store TOTP 2FA configkeyblind totp code <name>     Generate current TOTP codekeyblind totp list            List all TOTP configskeyblind totp delete <name>   Delete a TOTP configkeyblind share <name>         Create encrypted share linkkeyblind receive <url>        Receive a shared secretkeyblind deadman setup        Configure dead man's switchkeyblind deadman checkin      Reset dead man's switch timerkeyblind deadman status       Show dead man's switch statuskeyblind deadman disable      Disable dead man's switchkeyblind sso configure        Set up SSO/OIDC for team accesskeyblind sso login            Authenticate via browser SSOkeyblind sso logout           Clear SSO sessionkeyblind sso status           Show SSO auth statuskeyblind doctor               Run vault health checkkeyblind generate <name>      Generate a strong random secretkeyblind import [.env]        Bulk import from .env filekeyblind export               Export all secretskeyblind completions [shell]  Generate shell completion script

Development

bash
git clone https://github.com/aarifmms/keyblind.gitcd keyblindnpm installnpm run build       # Compile TypeScriptnpm test            # Run testsnpm run dev         # Watch mode

License

MIT

來源：README.md，提交 6622cbb

工具

0
SourceWeft 曾在隔離沙箱中以無憑證方式啟動該軟體包一次，以列出其工具，但未能完成：伺服器未能啟動。

版本歷史

2
  1. v0.8.8最新Oct 21, 2026
  2. v0.1.4Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分