Keeper Secrets Manager MCP Server

by wyre-aiio.github.WYRE-AI/keeper-mcpv1.0.3

Read-only multitenant Streamable HTTP bridge over Keeper Secrets Manager's MCP server.

0Dockerstdioofficial registry

context tax

queued

security

queued

cold start

queued

freshness

Active18d ago

Install Keeper Secrets Manager MCP server

claude mcp add keeper -- docker run -i --rm ghcr.io/wyre-ai/keeper-mcp:v1.0.3

{
  "mcpServers": {
    "keeper": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/keeper-mcp:v1.0.3"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "keeper": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/keeper-mcp:v1.0.3"
      ]
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "keeper": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/keeper-mcp:v1.0.3"
      ]
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "keeper": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/keeper-mcp:v1.0.3"
      ]
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Configuration

Variable	Required	Secret	Description
PORT	—	—	Public listen port for the bridge (POST /mcp, GET /health)
KSM_MCP_BIN	—	—	Path to the upstream ksm-mcp binary the bridge spawns per tenant
CHILD_HOME	—	—	Writable HOME for upstream child processes
IDLE_EVICT_MS	—	—	Idle tenant timeout before an upstream child is evicted (ms)
SPAWN_TIMEOUT_MS	—	—	How long to wait for a spawned child to answer the MCP handshake (ms)

Freshness

Active — last maintenance signal 18d ago. The newest of the signals below sets the band.

Last commit (default branch)
2026-09-21 · 18d ago · GitHub
Latest release
2026-09-21 · 18d ago · GitHub · v1.0.3
Package published
no data · npm/PyPI
Registry entry updated
2026-09-21 · 18d ago · official registry · v1.0.3

FAQ

›How do I install the Keeper Secrets Manager MCP server in Claude Code?

Run: claude mcp add keeper -- docker run -i --rm ghcr.io/wyre-ai/keeper-mcp:v1.0.3. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does Keeper Secrets Manager require an API key?

No required environment variables are declared in its published metadata.

›Can I use Keeper Secrets Manager as a remote (hosted) MCP server?

No hosted endpoint is published; it runs locally over stdio.

›Is Keeper Secrets Manager in the official MCP registry?

Yes, as io.github.WYRE-AI/keeper-mcp.