{"slug": "mcp-warden-local-credential-broker-so-ai-agents-never-see-your-secrets", "title": "MCP-warden local credential broker so AI agents never see your secrets", "summary": "A developer released mcp-warden, an Apache-2.0, Rust-based local credential broker for the Model Context Protocol that stores secrets in the OS keychain and injects them server-side so agents such as Claude Code, Cursor, Codex and Cline never see them in context. The tool defines scoped presets like github-read and stripe-charges, exposes high-level tools (proxy_http, ssh_exec, db_query), runs allow-list validation before credential injection, can require approval via desktop notification, TUI or Telegram for sensitive actions, and logs everything locally.", "body_md": "I got tired of pasting GitHub PATs, Stripe keys and DB passwords into Claude Code / Cursor MCP configs. One prompt injection or a leaked chat and they’re gone. So I built mcp-warden — a local-first credential broker for the Model Context Protocol. How it works: • You store the secret once in the OS keychain • You define scoped presets (e.g. github-read, stripe-charges) • The agent calls high-level tools (proxy_http, ssh_exec, db_query) • mcp-warden injects the credential server-side and returns only the result The agent’s context never contains the secret. Allow-list validation runs before credential injection. Sensitive actions can require approval (desktop notification, TUI, or Telegram). Everything is logged locally. Works with Claude Code, Cursor, Codex, Cline and any other MCP client. Written in Rust, Apache-2.0, fully local.\n\nGitHub: https://github.com/ermoluk/mcp-warden\n\nHappy to answer questions about the threat model or how people are currently handling secrets with agents.\n\nComments URL: [https://news.ycombinator.com/item?id=50241410](https://news.ycombinator.com/item?id=50241410)\n\nPoints: 1\n\n# Comments: 2", "url": "https://wpnews.pro/news/mcp-warden-local-credential-broker-so-ai-agents-never-see-your-secrets", "canonical_source": "https://news.ycombinator.com/item?id=50241410", "published_at": "2026-10-26 09:57:32+00:00", "updated_at": "2026-10-26 10:14:36.124673+00:00", "lang": "en", "topics": ["ai-agents", "agent-protocols", "ai-tools", "developer-tools", "ai-safety"], "entities": ["mcp-warden", "Model Context Protocol", "Claude Code", "Cursor", "Codex", "Cline", "Rust", "GitHub"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/mcp-warden-local-credential-broker-so-ai-agents-never-see-your-secrets", "markdown": "https://wpnews.pro/news/mcp-warden-local-credential-broker-so-ai-agents-never-see-your-secrets.md", "text": "https://wpnews.pro/news/mcp-warden-local-credential-broker-so-ai-agents-never-see-your-secrets.txt", "jsonld": "https://wpnews.pro/news/mcp-warden-local-credential-broker-so-ai-agents-never-see-your-secrets.jsonld"}}