OpenKeylet — 通过MCP为AI代理提供本地密码和凭证管理器。使用密码、API密钥、SSH和TOTP，默认将隐藏明文排除在模型上下文之外。
概览
OpenKeylet — AI代理的本地密码和凭证管理器 一个本地MCP凭证中继，保持代理工作流程的运行，同时不暴露隐藏明文。 本地优先 · 免费且开源 · 无OpenKeylet账户 · Windows / macOS / Linux 下载 · 中文 · 安全 OpenKeylet 是一个免费、开源的跨平台密码管理器、凭据库和本地 Stdio MCP 服务器，面向 AI 代理。它允许 MCP 客户端如 Codex、Claude Code、Cursor、OpenCode 和 OpenClaw 使用保存的密码、API 凭证、SSH 密钥、TOTP 代码和自定义秘密，而隐藏明文则不在正常模型上下文中。 当代理需要登录网站、连接服务器、调用认证 API 或完成终端提示时，使用 OpenKeylet，且不要求你将秘密粘贴进对话中。
概述（AI 翻译）
OpenKeylet — AI代理的本地密码和凭证管理器
一个本地MCP凭证中继，保持代理工作流程的运行，同时不暴露隐藏明文。
本地优先 · 免费且开源 · 无OpenKeylet账户 · Windows / macOS / Linux
下载 · 中文 · 安全性
OpenKeylet 是一款免费、开源的跨平台密码管理器、凭证库和本地 stdio MCP 服务器，面向 AI 代理。它允许 Codex、Claude Code、Cursor、OpenCode 和 OpenClaw 等 MCP 客户端使用保存的密码、API 凭证、SSH 密钥、TOTP 代码和自定义秘密，而隐藏明文则不在正常模型上下文中。
当代理需要登录网站、连接服务器、调用认证 API 或完成终端提示时，使用 OpenKeylet，且不要求你将秘密粘贴进对话中。
之前是KRU。 OpenKeylet保留相同的本地保险库、加密密钥、浏览器配对和.mvault备份格式。
本页由 AI 翻译，技术细节请以原文为准。
README
以下为原文 README 节选，完整内容请查看原文。
OpenKeylet — Local password and credential manager for AI agents
A local MCP credential relay that keeps agent workflows moving without exposing hidden plaintext.
Local first · Free and open source · No OpenKeylet account · Windows / macOS / Linux
Download · 中文 · Security
OpenKeylet is a free, open-source, cross-platform password manager, credential vault, and local stdio MCP server for AI agents. It lets MCP clients such as Codex, Claude Code, Cursor, OpenCode, and OpenClaw use saved passwords, API credentials, SSH keys, TOTP codes, and custom secrets while hidden plaintext stays outside the normal model context.
Use OpenKeylet when an agent needs to sign in to a website, connect to a server, call an authenticated API, or finish a terminal prompt without asking you to paste a secret into the conversation.
Previously KRU. OpenKeylet keeps the same local vault, encryption keys, browser pairing, and .mvault backup format. Existing {{kru:module}} placeholders and KRU_DATA_DIR / KRU_LAUNCHER_PATH environment variables remain supported; use {{openkeylet:module}} and OPENKEYLET_* for new setups. After upgrading, open Settings → Agent connection → Repair to migrate a managed kru MCP entry to openkeylet and update its executable path, then start a new agent session. Existing desktop and startup shortcuts are migrated when the new GUI starts.
Use OpenKeylet like this
Once OpenKeylet is connected, describe the task normally. Include the unique OpenKeylet item name for the most reliable match, or simply tell the agent to check OpenKeylet when authentication is needed.
| Goal | Example |
|---|---|
| Server task | Use "Production Server" in OpenKeylet MCP to deploy the current build and verify the service. |
| Authenticated API | Use "DNS Provider" in OpenKeylet MCP to list the domains in this account. |
| Browser sign-in | Open the admin console. When credentials are required, use "Admin Account" in OpenKeylet MCP. |
| Automatic lookup | Continue the task. If authentication is required, check OpenKeylet first. |
The quoted text is the item name saved in OpenKeylet. If you omit it, the agent can inspect OpenKeylet’s item list and choose a match.
What OpenKeylet does
安装
This server does not publish a one-line install command.
Open the repository installation guide 新手？先看 mcpskill.org 教程 →配置
{
"mcpServers": {
"openkeylet": {
"command": "C:\\absolute\\path\\to\\openkeylet.exe",
"args": ["mcp", "stdio"]
}
}
}