Skip to content
Back to the index

Keystash

github.comInfrastructure

No liveness check has reached it yet; it has been in the index since 10 Oct 2026. How this is checked

Keystash is a local encrypted secret layer for AI agents and MCP tools. It stores credentials in a single encrypted file, supports Touch ID unlocking, and scans for plaintext secret leaks through a command-line interface.

Inferred · not functionally tested

WebCLISelf-hosted
Keystash preview
Visit github.com

Overview

6 features

Purpose: Preventing AI agents and MCP tools from exposing plaintext secrets during local automation.

Inferred · not functionally tested

Audience: developers building AI agents and MCP integrations

Inferred · not functionally tested

Functions: Unknown

Interfaces: API: unknown · MCP: indicated (inferred, not tested) · CLI: indicated (inferred, not tested) · Self-hosting: indicated (inferred, not tested)

Recorded constraints: pricing: unknown · license: Proprietary · platforms: CLI, WEB · deployment: browser, cli, self_hosted

Constraint provenance is unknown; confirm requirements with the publisher.

Record sources: github.com. These links do not verify the individual claims.

In the Password & secrets management space, Keystash takes a focused approach. Inferred · not functionally tested: It focuses on preventing AI agents and MCP tools from exposing plaintext secrets during local automation. Inferred · not functionally tested: Keystash is an open-source project aimed at developers building AI agents and MCP integrations. Basis unknown · not verified: Keystash is available on the web and the command line, and it can be self-hosted.

Behind Keystash is thu-lawyer. Inferred · not functionally tested: Key capabilities include encrypted secret file, Touch ID unlock, and plaintext leak detection. Basis unknown · not verified: Catalogued interfaces include an MCP server.

Summary written by a language model from the project’s public pages.

Tasks: Inferred · not functionally tested

  • Encrypted secret file
  • Touch ID unlock
  • Plaintext leak detection
  • AI agent integration
  • MCP support
  • Python CLI

Topics: Inferred · not functionally tested

Tags
secret-managementai-agent-securitymcp-securityplaintext-leak-detection
AI capabilities
Text
Inference: Local

JSON profile · Text profile · Access guide

Built with & integrations

AI providers
openai
Connectors
MCP
Runs on
BrowserCLISelf-hosted
Detected from
openai
.openai in the HTML

Trust & compliance

Public signals
HTTPS

Indexing history

1

What PulseGate has recorded for this listing

  1. Indexed10 Oct · 12:03 UTC
    Keystash seen via MCP Registry (official)
    Source: MCP Registry (official) · Open

Frequently asked questions about Keystash

What is Keystash?
Inferred · not functionally tested: Keystash focuses on preventing AI agents and MCP tools from exposing plaintext secrets during local automation. It is catalogued under Password & secrets management on PulseGate.
Who should use Keystash?
Inferred · not functionally tested: Keystash is an open-source project built for developers building AI agents and MCP integrations.
What platforms does Keystash run on?
Basis unknown · not verified: Keystash runs on the web and the command line. It can also be self-hosted.
Is Keystash still maintained?
Unverified. Keystash has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.
Who develops Keystash?
Keystash is developed by thu-lawyer.
Does Keystash have an API or integrations?
Basis unknown · not verified: Yes — Keystash exposes an MCP server.

Similar projects

Closest matches by what these projects do