Secrets vault for Claude Code. Encrypt API keys, tokens and passwords with AES-256. Full audit logs, MCP access rules, and zero-knowledge mode. Secrets never appear in chat.
Overview
SecureCode MCP Server
A secrets vault designed for Claude Code. Store your API keys, tokens, and passwords encrypted. Claude Code accesses them via MCP without ever seeing the raw values.
Features
- AES-256 encryption with Cloud KMS envelope encryption
- Full audit logs: who accessed what, when, which AI model, from what IP
- MCP Access Rules: block, require confirmation, restrict by model, notify by email
- Zero-knowledge mode: secrets injected to your app, never shown in chat
- SDK included: runtime access via loadEnv() or getSecret()
Install
claude mcp add securecode -- npx -y @securecode/mcp-server
Then tell Claude Code: "Set up SecureCode in this project"
Links
- Website: https://securecodehq.com
- SDK: https://www.npmjs.com/package/@securecode/sdk
- Free tier: 50 secrets, 10K accesses/month
Server Config
{
"mcpServers": {
"securecode": {
"command": "npx",
"args": [
"-y",
"@securecode/mcp-server"
]
}
}
}