KSM MCP Server - Secure AI Access to Keeper Secrets

KSM MCP is a Model Context Protocol (MCP) server that acts as a secure intermediary between AI language models (like Claude) and Keeper Secrets Manager (KSM). It allows AI agents to manage your KSM secrets-such as listing, creating, retrieving, and deleting records and folders-while protecting your KSM application credentials. Sensitive operations require user confirmation, ensuring you maintain control over your data.

Quick User Guide

Option 1: Using Docker (Recommended)

1. Get KSM Base64 Configuration:

   • Log into the Keeper Secrets Vault.
   • Navigate to your Secrets Manager, Application, then to the “Devices” tab.
   • Click “Add Device” and copy the base64-encoded configuration string provided (it usually starts with ewog...).

   Important: The base64 config contains your KSM application’s credentials. Keep it secure and never commit it to version control.

2. Configure Claude Desktop:

   • Open your Claude Desktop configuration file:
     • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
     • Windows: %APPDATA%\Claude\claude_desktop_config.json
     • Linux: ~/.config/Claude/claude_desktop_config.json
   • Add or update the ksm server entry as follows, replacing YOUR_BASE64_CONFIG_STRING_HERE with your actual base64 config:

   {
     "mcpServers": {
       "ksm": {
         "command": "docker",
         "args": [
           "run", "-i", "--rm",
           "-e", "KSM_CONFIG_BASE64=YOUR_BASE64_CONFIG_STRING_HERE",
           "keeper/keeper-mcp-server:latest"
         ]
       }
       // You might have other servers like "memory" here, leave them as is.
     }
   }
   

3. Restart Claude Desktop:

   • The KSM server should now be available to Claude. The first time it connects, it will use the base64 config to start up.

Option 2: Using a Pre-compiled Binary

1. Download the Binary:

   • Go to the KSM MCP Releases Page and download the appropriate binary for your operating system (e.g., ksm-mcp-darwin-amd64 for Intel Macs, ksm-mcp-windows-amd64.exe for Windows).
   • Make the binary executable (e.g., chmod +x ./ksm-mcp-darwin-amd64) and place it in a directory included in your system’s PATH, or note its full path.

2. Get KSM Base64 Configuration: (See step 1 in the Docker guide above)

   Important: The base64 config contains your KSM application’s credentials. Keep it secure and never commit it to version control.

3. Initialize KSM MCP Profile:

   • Open your terminal and run the init command, replacing YOUR_BASE64_CONFIG_STRING and choosing a profile name (e.g., default):

     /path/to/ksm-mcp init --profile default --config "YOUR_BASE64_CONFIG_STRING"