Agentkeys Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Agentkeys Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP (Model Context Protocol) server that lets AI agents manage credentials and make proxied API calls through AgentKeys.
Store API keys in AgentKeys and let your agent use them safely through the proxy — without ever seeing the raw secrets.
AGENTKEYS_API_KEY=ak_ws_xxxx npx @agentkeys-io/mcpGet your workspace API key from [app.agentkeys.io/settings](https://app.agentkeys.io/dashboard/settings).
| Environment Variable | Required | Default | Description |
|---|---|---|---|
AGENTKEYS_API_KEY | ✅ Yes | — | Workspace API key (starts with ak_ws_) |
AGENTKEYS_URL | No | https://app.agentkeys.io | AgentKeys web app URL |
AGENTKEYS_PROXY_URL | No | https://proxy.agentkeys.io | AgentKeys proxy URL |
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"agentkeys": {
"command": "npx",
"args": ["@agentkeys-io/mcp"],
"env": {
"AGENTKEYS_API_KEY": "ak_ws_your_key_here"
}
}
}
}Add to .cursor/mcp.json in your project:
{
"mcpServers": {
"agentkeys": {
"command": "npx",
"args": ["@agentkeys-io/mcp"],
"env": {
"AGENTKEYS_API_KEY": "ak_ws_your_key_here"
}
}
}
}Same config format — add to your MCP settings:
{
"mcpServers": {
"agentkeys": {
"command": "npx",
"args": ["@agentkeys-io/mcp"],
"env": {
"AGENTKEYS_API_KEY": "ak_ws_your_key_here"
}
}
}
}#### list_credentials List all credentials stored in the workspace.
#### create_credential Create a new credential in the workspace.
| Parameter | Type | Required | Description | ||||
|---|---|---|---|---|---|---|---|
name | string | ✅ | Unique name for this credential | ||||
type | string | ✅ | API_KEY \ | BASIC_AUTH \ | CUSTOM_HEADER \ | QUERY_PARAM \ | COOKIE |
value | string | For API_KEY | The secret value | ||||
provider | string | No | Provider name (e.g. stripe, resend, github) | ||||
baseUrl | string | No | Provider API base URL (e.g. https://api.resend.com) |
#### delete_credential Delete a credential by ID. Also revokes all associated proxy tokens.
#### list_agents List all agents in the workspace.
#### create_agent Create a new agent identity.
| Parameter | Type | Required | Description |
|---|---|---|---|
name | string | ✅ | Agent name (e.g. marketing-bot) |
description | string | No | What this agent does |
#### assign_credential Assign a credential to an agent. Returns a proxy token.
⚠️ The proxy token is shown once — store it securely.
#### proxy_request Make an API call through the AgentKeys proxy.
| Parameter | Type | Required | Description |
|---|---|---|---|
proxyToken | string | ✅ | Proxy token (starts with pxr_) |
url | string | ✅ | Target URL (e.g. https://api.resend.com/emails) |
method | string | No | HTTP method (default: GET) |
headers | object | No | Additional request headers |
body | string | No | JSON string body |
1. list_credentials → see what's available
2. create_agent → create agent for this task
3. assign_credential → get proxy token
4. proxy_request → call API using proxy token~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.