MCP Server MCP

kdbx

By github 👁 3 views ▲ 0 votes

Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.

Homepage Verified source GitHub

Install

oci:ghcr.io/yarrasys/kdbx:0.3.1

Configuration Example

{
  "remotes": [],
  "packages": [
    {
      "registryType": "oci",
      "identifier": "ghcr.io/yarrasys/kdbx:0.3.1",
      "transport": {
        "type": "stdio"
      },
      "runtimeArguments": [
        {
          "description": "Mount the project directory containing the committed .keepassxc.json pointer file. kdbx discovers the pointer by walking up from the working directory.",
          "isRequired": true,
          "value": "{project_dir}:/work",
          "variables": {
            "project_dir": {
              "description": "Absolute path to the project whose secrets you want available",
              "isRequired": true,
              "format": "filepath"
            }
          },
          "type": "named",
          "name": "-v"
        },
        {
          "description": "Mount the KeePassXC directory holding the vault and its key file. Mounted read-only: every tool this server exposes is a read.",
          "isRequired": true,
          "value": "{keepassxc_dir}:/kpx:ro",
          "variables": {
            "keepassxc_dir": {
              "description": "Absolute path to the KeePassXC directory, usually ~/.config/keepassxc",
              "isRequired": true,
              "format": "filepath"
            }
          },
          "type": "named",
          "name": "-v"
        },
        {
          "description": "Run inside the mounted project so pointer discovery resolves.",
          "value": "/work",
          "type": "named",
          "name": "-w"
        }
      ],
      "packageArguments": [
        {
          "description": "kdbx is a CLI; the MCP server is its `mcp` subcommand.",
          "value": "mcp",
          "type": "positional"
        }
      ],
      "environmentVariables": [
        {
          "description": "Where kdbx looks for vaults inside the container. Must match the mount target above.",
          "default": "/kpx",
          "name": "KEEPASSXC_DIR"
        },
        {
          "description": "Environment to select, overriding the pointer's defaultEnv. Optional.",
          "name": "KDBX_ENV"
        }
      ]
    }
  ]
}

mcp model-context-protocol oci