FREEOpen source, MIT. No cloud, no login.

Every API key your AI apps need. One place.

MCP Creds is a tiny local app for the tokens behind Claude, Cursor, VS Code and every MCP server. Save a key once and your AI fetches it. Nothing ever leaves your machine.

Download for free View on GitHub

macOS (Apple silicon), Windows and Linux. Or run from source: python3 mcpcreds.py ui

Works with every app that speaks MCP

ClClaude Desktop CCClaude Code CuCursor WsWindsurf VSVS Code +Any MCP client

With any model: Claude, GPT, Gemini, Llama, Mistral or your own.

The problem

Ten AI apps. Ten configs. The same token pasted everywhere.

Every new MCP server wants its own key in its own JSON file, in plain text. Rotate a token and you hunt through all of them.

BEFORESecrets scattered in configs

claude_desktop_config.json, mcp.json, .env files, and wherever else you pasted it last.

{
  "github": {
    "command": "npx",
    "args": ["-y", "server-github"],
    "env": {
      "GITHUB_TOKEN": "ghp_9f2kLmQx81zRtY7uW3"
    }
  }
}

AFTEROne local store, zero secrets in configs

MCP Creds hands the key to the server when it starts. One click moves your existing tokens over.

{
  "github": {
    "command": "MCP Creds",
    "args": ["run", "-e", "GITHUB_TOKEN",
             "--", "npx", "-y", "server-github"]
  }
}
// no token here. Rotate it once, in one place.
How it works

Set up in a minute. Never paste a token again.

Paste your keys

Copy a token anywhere and press Cmd V in the app. It spots the service and names the key for you. Or drop in a .env or your existing MCP config.

Connect your apps

One click finds Claude, Cursor, VS Code and the rest on your computer and plugs MCP Creds in. Each config is backed up first, and Disconnect puts it back.

Just ask

"List my open pull requests." When a task needs a key, the AI checks MCP Creds on its own. You never have to name it or paste it.

Features

Small app. Thought through.

Built for people who juggle more tokens than they can remember.

Smart paste

Recognises 20+ services from the key itself and names it for you. Paste ghp_..., get GITHUB_TOKEN.

New key dialog that auto-named a pasted GitHub token GITHUB_TOKEN

One-click connect

Finds the AI apps on your computer and connects them all. Spots tokens sitting in plain text and moves them in.

Connect panel listing Claude Desktop, Claude Code and Cursor with a Connect all button

Bring your setup

Paste or drop a .env, a JSON file or your claude_desktop_config.json. Pick what to keep. Placeholders are skipped.

Multi-part credentials

AWS access key, secret and session token? Paste them together as one key. The AI reads every part, and run hands each one to the right variable.

Keys for any MCP server

Start a server through MCP Creds and it gets its token as an environment variable. The config holds no secret and the AI never sees it.

Every key at a glance

Search by name, note or service. Reveal, copy, edit, export. Keyboard first: N new, Cmd K search. Light and dark mode.

AnthropicOpenAIGitHubAWSSlackNotionStripeGoogleHugging FaceGroqLinearFigmaSupabaseGitLabPerplexityPostgres

Yours, offline

One JSON file on your disk. No account, no server, no telemetry, no dependencies. Read the code in an afternoon.

Security

Honest about what it protects.

No magic, no marketing. Here is exactly how your keys are kept.

What it does

  • Keeps keys in ~/.mcpcreds/store.json, readable only by your user (folder 0700, file 0600). Atomic writes.
  • The app only listens on 127.0.0.1 and opens with a one-time link plus a session cookie, so neither websites nor other accounts on your computer can read your keys.
  • Independently audited with Cloudflare's security-audit method. Read the report.
  • Takes tokens out of your AI app configs, so they stop leaking into backups, screenshots and dotfile repos.
  • Backs up every config before touching it, refuses configs with comments, and never overwrites the original backup.

What it does not

  • It does not encrypt the file. Protection is the same as ~/.aws/credentials or a .env file.
  • Any program running as you can read it, and any AI app you connect can ask for a key. Only connect apps you trust.
  • It is not a team password manager. It is one person's keys on one machine.
FAQ

Questions, answered.

What is MCP Creds?

A small desktop app that keeps all the API keys and tokens your AI apps need in one local file. You save a key once, connect MCP Creds to your AI apps once, and they fetch keys from it through the Model Context Protocol (MCP), the standard plug-in system for AI apps.

Does it work with ChatGPT, Gemini or local models?

Yes. MCP Creds talks to the app, not the model. Any model works inside any app that supports MCP: Claude Desktop, Claude Code, Cursor, Windsurf, VS Code and others. Apps without MCP support cannot use it.

Do I have to tell the AI which key to use?

No. MCP Creds tells the AI to check it whenever a task needs a key. Just ask for the task. For other MCP servers, the token is handed over at startup, so the AI does not need to do anything.

How do I give an MCP server its token without pasting it into the config?

Start the server through MCP Creds: python3 mcpcreds.py run -e GITHUB_TOKEN -- npx your-server. It sets the saved key as an environment variable and starts the server. In the app, "Move them into MCP Creds" rewrites your existing configs this way for you.

How do I store AWS credentials with an access key and a secret?

Paste them together into one key, one per line, or let MCP Creds split them into separate keys. The AI is told to read every part, and run -e AWS_SECRET_ACCESS_KEY=AWS_CREDENTIALS hands just the right part to a server.

Is my data sent anywhere?

No. There is no cloud, account or telemetry. Keys stay in ~/.mcpcreds/store.json on your machine. The code is open source, so you can check.

macOS says the app is from an unidentified developer.

The app is not notarized by Apple yet. Right-click it in Applications and choose Open the first time. After that it opens normally. Prefer not to? Run it from source with python3 mcpcreds.py ui.

Is it free?

Yes. Free and open source under the MIT license. Issues and pull requests are welcome on GitHub.

Stop pasting tokens.
Start asking.

Free, open source and local. Set up in a minute.

Download for free Star on GitHub