MCP.so
Sign In
P

Proxykey

@neostorm112-boop

Repository

About Proxykey

proxykey is a credential proxy and vault for API keys. Your real keys (OpenAI, Anthropic, Telegram, Stripe and 25+ providers) are encrypted with AES-256-GCM and never leave the server. Apps and AI agents authenticate with revocable "passes" (vlt_...) that carry per-pass IP bindin

#api-keys#security#credential-proxy#secrets-management#ai-agents#openai#anthropic#rate-limiting

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "proxykey": {
      "url": "https://mcp.proxykey.org/mcp",
      "headers": {
        "Authorization": "Bearer mcp_YOUR_TOKEN"
      }
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Proxykey?

Proxykey is a credential proxy and vault for API keys. It encrypts real keys (OpenAI, Anthropic, Telegram, Stripe and 25+ providers) with AES-256-GCM, keeping them on the server. Apps and AI agents authenticate using revocable "passes" (vlt_...) with per-pass IP binding, rate limits, and full request logs. The server provides 13 tools for managing those passes.

How to use Proxykey?

Connect via Streamable HTTP to the hosted endpoint https://mcp.proxykey.org/mcp. Authenticate with a Bearer mcp_... token minted in the panel at https://app.proxykey.org. No local installation is required.

Key features of Proxykey

  • 13 tools to manage passes (list, create, update, revoke, delete, etc.)
  • Real API keys encrypted with AES-256-GCM, never exposed to agents
  • Revocable passes with per-pass IP binding and rate limits
  • Full request logs and pass statistics
  • Supports 25+ providers (OpenAI, Anthropic, Telegram, Stripe, etc.)
  • No "read the real key" tool exists — only humans can view keys in the panel

Use cases of Proxykey

  • AI agents use temporary, scoped passes to access API keys without seeing the originals
  • Revoke a leaked pass instantly without affecting the underlying API key
  • Enforce strict rate limits and IP restrictions per agent or application
  • Audit all credential usage through detailed pass logs and stats
  • Manage team credentials centrally with minimal trust exposure

FAQ from Proxykey

How does authentication work for the MCP server?

Authentication uses a Bearer mcp_... token generated in the panel at https://app.proxykey.org. This token is passed with each MCP request to the hosted endpoint.

What happens if a pass is leaked?

A leaked pass is a non-event: the wrong IP is denied, rate limits cap abuse, and revocation is one click without touching the original API key.

Can an agent read the real API key through this server?

No. The toolset does not include any "read the real key" operation — only a human can view the original key in the panel.

Which providers are supported?

Proxykey supports 25+ providers including OpenAI, Anthropic, Telegram, Stripe, and many others. The list_providers tool shows all available providers.

Where are the encrypted keys stored?

Keys are encrypted with AES-256-GCM and never leave the server. They are stored securely in the Proxykey vault, accessible only via the panel or through pass-based MCP tools.

Frequently asked questions

How does authentication work for the MCP server?

Authentication uses a Bearer `mcp_...` token generated in the panel at `https://app.proxykey.org`. This token is passed with each MCP request to the hosted endpoint.

What happens if a pass is leaked?

A leaked pass is a non-event: the wrong IP is denied, rate limits cap abuse, and revocation is one click without touching the original API key.

Can an agent read the real API key through this server?

No. The toolset does not include any "read the real key" operation — only a human can view the original key in the panel.

Which providers are supported?

Proxykey supports 25+ providers including OpenAI, Anthropic, Telegram, Stripe, and many others. The `list_providers` tool shows all available providers.

Where are the encrypted keys stored?

Keys are encrypted with AES-256-GCM and never leave the server. They are stored securely in the Proxykey vault, accessible only via the panel or through pass-based MCP tools.

Comments

Basic information

Category

Developer Tools

Transports

stdio

Author

neostorm112-boop

Submitted by

neostorm112-boop

More Developer Tools MCP servers

ZeroBeacon — 1000-Tool Collision-Proof Commerce Router

DavidFox998

ZeroBeacon.ai — Collision-proof commerce router for AI agents. 1000 MCP tools: commerce, trust, billing, sovereign ID + everyday tools. LIVE.

S

SecondSim

econdSim provisions real UK mobile numbers (non-VoIP) via eSIM, built for freelancers, sole traders, small businesses, and enterprise teams. Unlike VoIP apps and virtual numbers, SecondSim numbers register as genuine phy

Altronis

sypherin

MCP server + CLI for Altronis — Singapore AI consulting. Ask the Lyra consultant, generate a grant-matched AI transformation plan, pull curated SG AI events/news. Read-only, wraps altronis.sg.

TaskerArmy Agent

TaskerArmy

Ask Claude or ChatGPT what Shopify theme optimization tasks are pending on your store, a remote MCP server for TaskerArmy Agent accounts.

discoverGPT

Joe Monastiero

discoverGPT is visualAI's unified MCP gateway for AI commerce, exposing 29 tools across four capabilities on one canonical product catalog: trimodal search (natural-language, precise-color, and image-similarity), AI cata