Proxykey
About
proxykey is a credential proxy and vault for API keys. Your real keys (OpenAI, Anthropic, Telegram, Stripe and 25+ providers) are encrypted with AES-256-GCM and never leave the server. Apps and AI agents authenticate with revocable "passes" (vlt_...) that carry per-pass IP bindin
Details
- Author
- neostorm112-boop
- Downloads
- 259
- Categories
- Developer Tools, Security, AI
Jump to
- 13 tools to manage passes (list, create, update, revoke, delete, etc.)
- Real API keys encrypted with AES-256-GCM, never exposed to agents
- Revocable passes with per-pass IP binding and rate limits
- Full request logs and pass statistics
- Supports 25+ providers (OpenAI, Anthropic, Telegram, Stripe, etc.)
- No "read the real key" tool exists — only humans can view keys in the panel
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
ProxykeyCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Connect via Streamable HTTP to the hosted endpoint https://mcp.proxykey.org/mcp. Authenticate with a Bearer mcp_... token minted in the panel at https://app.proxykey.org. No local installation is required.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"proxykey": {
"proxykey": {
"url": "https://mcp.proxykey.org/mcp",
"headers": {
"Authorization": "Bearer mcp_YOUR_TOKEN"
}
}
}
}
}McpServers
{
"proxykey": {
"url": "https://mcp.proxykey.org/mcp",
"headers": {
"Authorization": "Bearer mcp_YOUR_TOKEN"
}
}
}proxykey is a credential proxy and vault for API keys. Your real keys (OpenAI, Anthropic, Telegram, Stripe and 25+ providers) are encrypted with AES-256-GCM and never leave the server. Apps and AI agents authenticate with revocable "passes" (vlt_...) that carry per-pass IP binding, rate limits and full request logs.
This MCP server lets an agent manage those passes: list_providers, list_secrets, create_pass, create_pending_pass, update_pass, rotate_pass, revoke_pass, delete_pass, rebind_pass_ip, get_pass_logs, get_pass_stats and more (13 tools). A "read the real key" operation does not exist in the toolset — only a human can enter the original key, in the panel. A leaked pass is a non-event: wrong IP is denied, limits cap abuse, and revocation is one click without touching the original.
Hosted endpoint: https://mcp.proxykey.org/mcp (Streamable HTTP). Auth: a Bearer mcp_... token minted in the panel at https://app.proxykey.org. Docs: https://app.proxykey.org/docs.html
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
