keyblind

View on GitHub

keyblind

3 stars TypeScriptOthers Updated Jul 5, 2026

Documentation

Keyblind — Blind AI to Your Keys

Encrypted secrets vault with MCP for AI agents. Secrets resolved at runtime, never leaked to LLM conversations.

Why

Developers regularly leak API keys, passwords, and tokens to AI coding tools. 100,000+ LLM conversations with exposed secrets were found indexed by search engines in 2025.

AI agents read your `.env` files. They copy-paste secrets into conversations. They commit them accidentally. Keyblind stops this by keeping secrets encrypted at rest and resolving them _at runtime_ — the plaintext value never touches the LLM transcript.

How It Works

code

┌──────────┐     ┌────────────────┐     ┌─────────────────┐
│ AI Agent │ ──→ │  Keyblind MCP  │ ──→ │  Encrypted      │
│ (Claude) │     │  Server        │     │  SQLite Vault   │
│          │ ←── │  (16 tools)    │ ←── │  (AES-256-GCM)  │
└──────────┘     └────────────────┘     └─────────────────┘
      ↑                                        │
      │ secret value never appears             │ secrets never
      │ in conversation transcript             │ stored in plaintext

Quick Start

bash

# 1. Install
npm i -g keyblind

# 2. Initialize your vault
keyblind init

# 3. Auto-configure MCP for Claude Code (one command)
keyblind setup-mcp

# 4. Store secrets
echo "sk-proj-abc123" | keyblind set OPENAI_API_KEY
keyblind set DATABASE_URL -    # prompts securely

# 5. Sandbox your .env (AI agents see fakes)
keyblind sandbox

# 6. Resolve a secret
keyblind get OPENAI_API_KEY

# 7. Run commands with secrets injected as env vars
keyblind run -- npm start

# 8. List all secrets (names only, values hidden)
keyblind list

> That's it. After `keyblind setup-mcp`, restart Claude Code. Then just say _"list my keyblind secrets"_ or _"use my OPENAI_API_KEY"_ — the AI agent resolves secrets at runtime without ever seeing them in the transcript.

MCP Server

Keyblind is MCP-first — it works with every AI tool that speaks the Model Context Protocol (Claude Code, Cursor, Copilot, Windsurf, Cline, Zed).

Setup (automatic)

bash

keyblind setup-mcp

This auto-configures Claude Code to use Keyblind. Works from any directory. For other editors, see editor-specific configs.

Setup (manual)

Add a `.mcp.json` to your project root, or use `claude mcp add`:

bash

claude mcp add --scope user keyblind -- keyblind start

With biometric gate (Touch ID required before secrets are resolved):

bash

keyblind unlock                      # Authenticate first
claude mcp add keyblind -- keyblind start --biometric

> Session expires after 15 minutes. Requires Pro or Team license.

MCP Tools

Tool	Description
`resolve_secret`	Resolve a secret at runtime (value hidden from transcript)
`store_secret`	Encrypt and store a secret
`list_secrets`	List secret names (values never revealed)
`delete_secret`	Delete a secret
`sandbox_env`	Replace `.env` values with deterministic fakes
`unsandbox_env`	Restore real `.env` values from vault
`audit_log`	View secret resolution audit trail
`totp_code`	Generate a TOTP 2FA code for a stored config
`totp_store`	Store a TOTP configuration from otpauth:// URI
`totp_list`	List all stored TOTP configurations
`totp_delete`	Delete a TOTP configuration
`create_share_link`	Create encrypted, expiring share link for a secret
`receive_share`	Receive and decrypt a shared secret
`deadman_status`	Check dead man's switch status
`deadman_checkin`	Reset dead man's switch timer
`sso_status`	Check SSO/OIDC authentication status

Web Dashboard

Manage your secrets from a browser at **app.keyblind.dev**. Start the HTTP server:

bash

keyblind start --http

Then sign in with your license key at app.keyblind.dev/login. Features:

View, add, copy, and delete secrets
Audit log with full access history
License management
Pro/Team tier status

Browser Extension

The Keyblind Chrome Extension detects and blocks secrets from being pasted into AI chat interfaces (Claude.ai, ChatGPT, Copilot).

Features:

Detects 12+ API key formats (OpenAI, GitHub, Stripe, AWS, etc.)
Intercepts paste events on AI chat sites
Warning banner when secrets are detected
Popup with vault connection status

Located in `browser-extension/`. Load as unpacked extension from `chrome://extensions`.

Pricing

Free	Pro	Team
Price	$0	$79/year	$29/user/month
Secrets	5	Unlimited	Unlimited
Local vault	✓	✓	✓
Sandbox / Unsandbox	✓	✓	✓
MCP server	✓	✓	✓
Dashboard	✓	✓	✓
Browser extension	✓	✓	✓
7 backends	✓	✓	✓
Team vaults	—	✓	✓
Audit log	—	✓	✓
Secret sharing	—	✓	✓
Dead man's switch	—	✓	✓
TOTP 2FA	—	✓	✓
Biometric gate	—	✓	✓
SSO/OIDC	—	—	✓
CI/CD integration	—	✓	✓

bash

# Buy a license at keyblind.dev, then activate:
keyblind activate 

# Check your status
keyblind status

Backends

Keyblind supports multiple secret backends:

bash

keyblind backends                          # List available backends
keyblind backend 1password                 # Switch to 1Password
keyblind backend bitwarden                 # Switch to Bitwarden

Backend	Read	Write	Requires
local (default)	✓	✓	Nothing
1password	✓	✓	`op` CLI
bitwarden	✓	—	`bw` CLI
env	✓	—	Nothing
aws	✓	✓	`aws` CLI
gcp	✓	✓	`gcloud` CLI
azure	✓	✓	`az` CLI

Keyblind vs Cloak

Keyblind	Cloak
Protocol	MCP (all editors)	VS Code extension only
Editors	Claude Code, Cursor, Copilot, Windsurf, Cline, Zed	VS Code, Cursor
Storage	AES-256-GCM SQLite	AES-256-GCM file
Backends	Local, 1Password, Bitwarden, Env, AWS, GCP, Azure	Local only
Sandbox	Deterministic HMAC fakes	AES-256-GCM encrypted
Web dashboard	✓ (app.keyblind.dev)	—
Browser extension	✓ (Chrome)	—
TOTP 2FA	✓	—
Secret sharing	✓ (encrypted URL fragment)	—
Dead man's switch	✓	—
Touch ID	✓ (macOS biometric gate)	✓
CI/CD	`keyblind run` for env injection	—
Network	Zero (fully local)	Zero
License	MIT	Proprietary
Free tier	✓ (5 secrets)	✓
Pro	$79/year (unlimited)	—

Security

AES-256-GCM encryption with PBKDF2 key derivation (600K iterations)
Machine-identity-bound key — encryption key XOR-wrapped with machine fingerprint
Zero network, zero telemetry — no cloud, no accounts, no analytics
Vault stored at `~/.keyblind/` with `0700` permissions
Deterministic sandbox fakes using HMAC-SHA256 per project + key name

CLI Reference

code

keyblind init                 Initialize the encrypted vault
keyblind set            Store a secret (value from stdin)
keyblind set  -         Store a secret (prompts securely)
keyblind get            Resolve and print a secret
keyblind list                 List all stored secrets
keyblind delete         Delete a secret
keyblind setup-mcp            Auto-configure MCP for Claude Code
keyblind sandbox [.env]       Replace .env with deterministic fakes
keyblind unsandbox [.env]     Restore real .env values
keyblind run      Run command with secrets as env vars
keyblind start                Start MCP server (stdio — for AI agents)
keyblind start --http         Start MCP HTTP server (for dashboard)
keyblind start --biometric    Start MCP server with biometric requirement
keyblind backends             List available backends
keyblind backend        Switch backend
keyblind activate        Activate a Pro/Team license
keyblind deactivate           Remove current license
keyblind status               Show license and vault status
keyblind audit                Show secret resolution audit log
keyblind check --expired      List secrets past expiry
keyblind rotate         Update a secret value
keyblind team init [path]     Create a shared team vault
keyblind team push      Push a secret to team vault
keyblind team pull            Pull secrets from team vault
keyblind team list            List secrets in team vault
keyblind totp set       Store TOTP 2FA config
keyblind totp code      Generate current TOTP code
keyblind totp list            List all TOTP configs
keyblind totp delete    Delete a TOTP config
keyblind share          Create encrypted share link
keyblind receive         Receive a shared secret
keyblind deadman setup        Configure dead man's switch
keyblind deadman checkin      Reset dead man's switch timer
keyblind deadman status       Show dead man's switch status
keyblind deadman disable      Disable dead man's switch
keyblind sso configure        Set up SSO/OIDC for team access
keyblind sso login            Authenticate via browser SSO
keyblind sso logout           Clear SSO session
keyblind sso status           Show SSO auth status
keyblind doctor               Run vault health check
keyblind generate       Generate a strong random secret
keyblind import [.env]        Bulk import from .env file
keyblind export               Export all secrets
keyblind completions [shell]  Generate shell completion script

Development

bash

git clone https://github.com/aarifmms/keyblind.git
cd keyblind
npm install
npm run build       # Compile TypeScript
npm test            # Run tests
npm run dev         # Watch mode

License

MIT

Frequently asked questions

What is keyblind?

keyblind is keyblind

How do I install keyblind?

Open the GitHub repository and follow its README. Most MCP servers are added to your client's MCP config, then called by your agent.

Is keyblind open source?

Yes — it is hosted on GitHub at https://github.com/aarifmms/keyblind and has 3 stars.

Related MCP tools

servers

Model Context Protocol Servers

90,051 TypeScript

UI-TARS-desktop

The Open-Source Multimodal AI Agent Stack: Connecting Cutting-Edge AI Models and Agent Infra

38,840 TypeScript

agentvlmvision+11

n8n-mcp

A MCP for Claude Desktop / Claude Code / Windsurf / Cursor to build n8n workflows for you

22,825 TypeScript

mcpmcp-servern8n+1

Figma-Context-MCP

MCP server to provide Figma layout information to AI coding agents like Cursor

15,766 TypeScript

aicursorfigma+2

inbox-zero

The world's best AI personal assistant for email. Open source app to help you reach inbox zero fast.

12,148 TypeScript

aiemailnextjs+14

instant

Instant is the best backend for AI-coded apps. You get auth, permissions, storage, presence, and streams — everything you need to ship apps your users will love.

10,507 TypeScript

Run your own MCP server? See who uses it and what to fix.

Measure it with TrackMCP