Demipass MCP Server
by bildowcom.dustforge/demipassv2.5.0
Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context.
context tax
queued
security
queued
cold start
queued
freshness
Maintained57d ago
Install Demipass MCP server
Install in Claude Code
claude mcp add demipass -e DEMIPASS_TOKEN='<demipass-token>' -- npx -y demipassInstall in Cursor
{
"mcpServers": {
"demipass": {
"command": "npx",
"args": [
"-y",
"demipass"
],
"env": {
"DEMIPASS_TOKEN": "<demipass-token>"
}
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).
Install in Claude Desktop
{
"mcpServers": {
"demipass": {
"command": "npx",
"args": [
"-y",
"demipass"
],
"env": {
"DEMIPASS_TOKEN": "<demipass-token>"
}
}
}
}Settings → Developer → Edit Config (claude_desktop_config.json), then restart.
Install in VS Code
{
"servers": {
"demipass": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"demipass"
],
"env": {
"DEMIPASS_TOKEN": "<demipass-token>"
}
}
}
}Add to .vscode/mcp.json in your workspace.
Install in Windsurf
{
"mcpServers": {
"demipass": {
"command": "npx",
"args": [
"-y",
"demipass"
],
"env": {
"DEMIPASS_TOKEN": "<demipass-token>"
}
}
}
}Add to ~/.codeium/windsurf/mcp_config.json.
Configuration
| Variable | Required | Secret | Description |
|---|---|---|---|
| DEMIPASS_TOKEN | yes | yes | Dustforge JWT bearer token. Self-onboard at https://dustforge.com/.well-known/silicon or mint via the 2FA email flow. |
| DEMIPASS_URL | — | — | API base URL (default https://api.dustforge.com) |
Freshness
Maintained — last maintenance signal 57d ago. The newest of the signals below sets the band.
Last commit (default branch)
2026-08-13 · 57d ago · GitHub
Latest release
no data · GitHub
Package published
no data · npm/PyPI
Registry entry updated
2026-07-07 · 3mo ago · official registry · v2.5.0
FAQ
›How do I install the Demipass MCP server in Claude Code?
Run: claude mcp add demipass -e DEMIPASS_TOKEN='<demipass-token>' -- npx -y demipass. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.
›Does Demipass require an API key?
Yes. It expects DEMIPASS_TOKEN, of which 1 is a secret.
›Can I use Demipass as a remote (hosted) MCP server?
No hosted endpoint is published; it runs locally over stdio.
›Is Demipass in the official MCP registry?
Yes, as com.dustforge/demipass.
Alternatives to Demipass
Other version control MCP servers.