q-ring MCP server
io.github.I4cTime/q-ring·v0.19.0·4 starsOS keychain secrets for AI coding agents, over MCP.
not scanned yet
4 stars128 downloads/wk
Reviews
Write oneNobody has reviewed q-ring yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
q-ring tools
No tool declarations could be read from the package source. They show once the server is installed.
How q-ring compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 65/100
- higher than 20% of 48,243 servers
- GitHub stars
- 4
- more than 82% of 28,706 servers
- Downloads a week
- 128
- more than 68% of 12,306 servers with a package
Release history: 3 versions in the registry since 2026-09-16, latest 2026-11-05, typically one every 39 days.
Install q-ring in Claude Code, Cursor or VS Code
Runs npx -y @i4ctime/q-ring on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add q-ring -- npx -y @i4ctime/q-ring
What the publisher says
From the q-ring repository's README, as published. We do not edit it. Read it on GitHub
q-ring
OS keychain secrets for AI coding agents, over MCP.
Stop pasting API keys into plain-text .env files or wrestling with clunky secret managers. q-ring securely anchors your credentials to your OS's native vault (macOS Keychain, Linux Secret Service, Windows Credential Vault) and supercharges them with mechanics from quantum physics.
📖 View the Official Documentation for a complete CLI reference, MCP prompt cookbooks, and architecture details.
Why q-ring?
- Superposition: Store one key with multiple states (dev/staging/prod) that collapse based on context.
- Entanglement: Link keys across projects so rotating one automatically updates them all.
- Tunneling: Create ephemeral, in-memory secrets that self-destruct after a set time or read count.
- Teleportation: Securely pack and share AES-256-GCM encrypted secret bundles.
- Seamless AI Integration: 44 built-in MCP tools for native use in Cursor, Kiro, and Claude Code.
🚀 Installation
q-ring is designed to be installed globally so it's available anywhere in your terminal. Pick your favorite package manager:
# pnpm (recommended)
pnpm add -g @i4ctime/q-ring
# npm
npm install -g @i4ctime/q-ring
# yarn
yarn global add @i4ctime/q-ring
# Homebrew (macOS / Linux)
brew install i4ctime/tap/qringDocker (MCP server)
The repo ships a Dockerfile that builds the MCP server and exposes it through mcp-proxy — useful for hosted MCP deployments (e.g. Glama) or keeping the server off the host entirely:
git clone https://github.com/I4cTime/q-ring.git
cd q-ring
docker build -t qring-mcp .
docker run --rm -p 8080:8080 qring-mcpShortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-09-19restoreF → Cscore 65: Shell command built from a string (injection risk)
q-ring: common questions
- Is q-ring MCP server safe?
- With care: it is graded C, so read the findings first (65/100). Read the q-ring safety report
- How do I install q-ring?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does q-ring need an API key?
- Yes. The registry entry asks for
QRING_FILE_PASSPHRASE. - Is q-ring maintained?
- The last commit was 24 days ago (2026-10-13). The latest release is v0.19.0.
- What can I use instead of q-ring?
- Servers from other publishers that do the same job: Deja Vu MCP server.
- How does q-ring compare with other MCP servers?
- safety score 65/100 (higher than 20% of 48,243 servers); github stars 4 (more than 82% of 28,706 servers); downloads a week 128 (more than 68% of 12,306 servers with a package). Full comparison.
Alternatives to q-ring
Same job from other publishers: the closest match first, then the best rated.
- Deja Vudeja-vu: local memory over the session histories of forty-three coding agents.not reviewedEstablishedA