Keyfold MCP server
by codewithkolin·
io.github.codewithkolin/keyfold·v1.0.1Use API keys from your Keyfold vault in commands and .env files. No tool returns a secret value.
A88/100grade A
Adoption
New
0 stars
Reviews
Write oneNobody has reviewed Keyfold yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Keyfold tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-26 · same rubric, same numbers if you re-run it
no findings
- –Code scanpackage could not be scannedn/a
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 6 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
How Keyfold compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 85% of 915 Security servers
Install Keyfold in Claude Code, Cursor or VS Code
The registry entry has no remote endpoint or installable package.
Keyfold: common questions
- Is Keyfold MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the Keyfold safety report
- Does Keyfold need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Keyfold maintained?
- The last commit was 15 days ago (2026-10-20). The latest release is v1.0.1.
- What can I use instead of Keyfold?
- Servers from other publishers that do the same job: Secret Scanner MCP server, Secret Scanner MCP server and Keyspoor MCP server.
Alternatives to Keyfold
Same job from other publishers: the closest match first, then the best rated.
- not reviewedGrowingA
- not reviewedGrowingA
- KeyspoorOffline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.not reviewedGrowingA
- Phantom SecretsValue-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.not reviewedGrowingC
- SkylosDead code, security, secrets detection and code quality for Python, TypeScript, Go.not reviewedEstablishedC