Kdbx
Per-project secrets in local KeePassXC vaults, injected into commands without ever printing them. Agent-safe: PreToolUse guard hook + read-only MCP server. Single Go binary.
{ "mcpServers": { "yarrasys-kdbx": { "command": "docker", "args": [ "run", "-i", "--rm", "ghcr.io/yarrasys/kdbx:0.3.2" ], "env": { "KEEPASSXC_DIR": "<value>", "KDBX_ENV": "<value>" } } }}.cursor/mcp.jsonMCP server
- Transport
- stdio
- Status
- Local
에이전트 강화
이 서버 추가
The publisher's own command. Not a PlugMCP endpoint.
Host a copy with our keys and logs.
Local command
docker run -i --rm ghcr.io/yarrasys/kdbx:0.3.2Credentials from the publisher
- KEEPASSXC_DIR — Where kdbx looks for vaults inside the container. Must match the mount target above.
- KDBX_ENV — Environment to select, overriding the pointer's defaultEnv. Optional.
Claude Code has no install link for a local command. Copy the command below and run it in a terminal.
shClaude Code
KEEPASSXC_DIR=<value> KDBX_ENV=<value> claude mcp add yarrasys-kdbx -- docker run -i --rm ghcr.io/yarrasys/kdbx:0.3.2Run in a terminal.
jsonClaude Desktop
{ "mcpServers": { "yarrasys-kdbx": { "command": "docker", "args": [ "run", "-i", "--rm", "ghcr.io/yarrasys/kdbx:0.3.2" ], "env": { "KEEPASSXC_DIR": "<value>", "KDBX_ENV": "<value>" } } }}claude_desktop_config.json
Local · ociPublisher installStep-by-step: add this in Claude
Remote URL or a command on your machine? How the two installs differ
PlugMCP에서 실행
Host a copy with our keys and logs.
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
실행Server facts
Local- Transport
- stdio
- License
- MIT
- API key
- KEEPASSXC_DIR, KDBX_ENV
- Last checked
- 2026-10-26
- Stars
- 5
- Tools
- —
- Uptime
- —
Tools
Tools
No tool list yet. Remote servers get one after the first health check.
FAQ
Questions
How do I install Kdbx?
Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.
Does Kdbx need an API key?
The publisher lists these environment variables: KEEPASSXC_DIR, KDBX_ENV.
What transport does Kdbx use?
Kdbx runs locally over stdio.
When was Kdbx last checked?
Last checked 2026-10-26. Per-project secrets in local KeePassXC vaults, injected into commands without ever printing them. Agent-safe: PreToolUse guard hook + read-only MCP server. Single Go binary.
From the publisher
Documentation
README is not crawled yet. Open the repository
Per-project secrets in local KeePassXC vaults, injected into commands without ever printing them. Agent-safe: PreToolUse guard hook + read-only MCP server. Single Go binary.