@agentkeys-io/mcp

An MCP (Model Context Protocol) server that lets AI agents manage credentials and make proxied API calls through AgentKeys.

Store API keys in AgentKeys and let your agent use them safely through the proxy — without ever seeing the raw secrets.

---

Quick Start

AGENTKEYS_API_KEY=ak_ws_xxxx npx @agentkeys-io/mcp

Get your workspace API key from app.agentkeys.io/settings.

---

Configuration

| Environment Variable | Required | Default | Description | |------------------------|----------|------------------------------|----------------------------------------------------| | AGENTKEYS_API_KEY | ✅ Yes | — | Workspace API key (starts with ak_ws_) | | AGENTKEYS_URL | No | https://app.agentkeys.io | AgentKeys web app URL | | AGENTKEYS_PROXY_URL | No | https://proxy.agentkeys.io | AgentKeys proxy URL |

---

MCP Client Configuration

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "agentkeys": {
      "command": "npx",
      "args": ["@agentkeys-io/mcp"],
      "env": {
        "AGENTKEYS_API_KEY": "ak_ws_your_key_here"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json in your project:

{
  "mcpServers": {
    "agentkeys": {
      "command": "npx",
      "args": ["@agentkeys-io/mcp"],
      "env": {
        "AGENTKEYS_API_KEY": "ak_ws_your_key_here"
      }
    }
  }
}

Windsurf / Cline

Same config format — add to your MCP settings:

{
  "mcpServers": {
    "agentkeys": {
      "command": "npx",
      "args": ["@agentkeys-io/mcp"],
      "env": {
        "AGENTKEYS_API_KEY": "ak_ws_your_key_here"
      }
    }
  }
}

---

Available Tools

Credential Management

`list_credentials`

List all credentials stored in the workspace.

`create_credential`

Create a new credential in the workspace.

| Parameter | Type | Required | Description | |---------------|----------|----------|-------------| | name | string | ✅ | Unique name for this credential | | type | string | ✅ | API_KEY \| BASIC_AUTH \| CUSTOM_HEADER \| QUERY_PARAM \| COOKIE | | value | string | For API_KEY | The secret value | | provider | string | No | Provider name (e.g. stripe, resend, github) | | baseUrl | string | No | Provider API base URL (e.g. https://api.resend.com) |

`delete_credential`

Delete a credential by ID. Also revokes all associated proxy tokens.

Agent Management

`list_agents`

List all agents in the workspace.

`create_agent`

Create a new agent identity.

| Parameter | Type | Required | Description | |--------------|--------|----------|-------------| | name | string | ✅ | Agent name (e.g. marketing-bot) | | description | string | No | What this agent does |

`assign_credential`

Assign a credential to an agent. Returns a proxy token.

⚠️ The proxy token is shown once — store it securely.

Proxy Requests

`proxy_request`

Make an API call through the AgentKeys proxy.

| Parameter | Type | Required | Description | |-------------|--------|----------|-------------| | proxyToken | string | ✅ | Proxy token (starts with pxr_) | | url | string | ✅ | Target URL (e.g. https://api.resend.com/emails) | | method | string | No | HTTP method (default: GET) | | headers | object | No | Additional request headers | | body | string | No | JSON string body |

---

Typical Workflow

1. list_credentials          → see what's available
2. create_agent              → create agent for this task
3. assign_credential         → get proxy token
4. proxy_request             → call API using proxy token

---

agentkeys-mcp