Credential Broker MCP
未认领Local-first MCP credential broker: agents use gated APIs through scoped, audited requests without ever seeing the secret.
01 / 选择客户端
03 / 添加配置
claude mcp add --transport stdio 'credential-broker-mcp' -- 'npx' '-y' '@sarutobi-sasuke/credential-broker-mcp'04 / 在客户端中确认
打开客户端的 MCP 设置，确认服务器已连接并列出工具。复制配置不代表连接成功。
更多Security服务器
浏览完整目录安全概况
已认领和已认证的服务器每周接受一次静态扫描，显示代码能触及的范围（外部服务、环境变量、shell 命令、代理配置目录）以及带有已知公告的依赖。认领此列表即可获得。 安全概况的工作原理
文档中列出的工具 (5)
内容来自项目文档。服务器握手不会验证每个工具的说明或行为。
broker_explain_request
Dry run: would this request be permitted, which rule decides it, and is an approval required or satisfied? No upstream call, no secret touched.
broker_list_credentials
Granted credentials: id, kind, base URL, provisioned or not. Never values.
broker_mutate
POST, PUT, PATCH, or DELETE. Annotated destructive and non-idempotent, because its strongest capability is. May require an approval and an idempotency key.
broker_read
GET or HEAD through a granted credential. Honestly annotated read-only.
broker_whoami
Show the authenticated agent and its per-credential operation grants.