1
Add it to Claude Code
claude mcp add -e "KEYWAY_API_KEY=${KEYWAY_API_KEY}" keyway -- npx -y @keywaysh/mcpRequired:
KEYWAY_API_KEY2
Make your agent remember this setup
keyway's config, env vars, and the gotchas you hit — recalled in every future Claude Code, Cursor, and Codex session.
npx conare@latestFree · one command · indexes the sessions already on disk. Set up in the browser instead →
What it does
- GitHub-native secrets management
- Secure credential generation and validation
- Prevents sensitive values from appearing in conversation history
- Supports environment diffing
- Secure command execution with masked variable injection
Tools 3
get_secretRetrieves a secret value securely from the Keyway vault.list_secretsLists all available secrets managed by Keyway.validate_secretValidates the integrity or status of a specific credential.Environment Variables
KEYWAY_API_KEYrequiredThe API key used to authenticate with the Keyway service.Try it
→Retrieve the API key for the production database from Keyway.
→List all secrets currently managed in my Keyway vault.
→Check if the AWS credentials stored in Keyway are still valid.
→Inject the production environment variables into the current session.
Original README from keywaysh/keyway-mcp
This repository has been archived
This repository has been merged into the keywaysh/keyway monorepo.
The code now lives at `packages/mcp/`.
Please open all issues and pull requests in the monorepo.