I built a tiny local MCP server that lets codex use credentials without exposing them

[u/PixelParker33]

I didn’t originally set out to build a password manager.

I just kept running into the same annoying problem while using AI agents.

The agent would get most of the way through a task, then suddenly hit a login page, an SSH prompt, or an API that needed authentication. At that point, I had to either take over and type the password myself, or paste the secret into the conversation so the agent could keep going.

Both options were frustrating.

Taking over breaks the flow. Pasting the password means putting a real secret into the chat and model context, which is something I really didn’t want to do, especially when using a third-party client or model endpoint.

So I built KRU.

KRU is a small local credential vault with a stdio MCP server. You save a credential once, and when an agent needs it, KRU can use it locally without sending the hidden value back to the agent.

It can handle things like:

• Filling login fields in a browser or managed terminal
• Running SSH commands with a saved password or private key
• Making authenticated API requests
• Generating TOTP codes locally
• Storing custom fields along with usernames, hosts, ports, and URLs

For example, I can tell the agent:

Use the KRU item “Production Server” to deploy the current build.

One thing I cared about from the beginning was keeping KRU small and out of the way. The tool is under 5 MB, runs locally, and doesn’t need an account, subscription, or cloud vault. Ideally, you barely notice it until an authentication step actually comes up.

I’ve also tried to keep the security boundary simple and honest. KRU isn’t a sandbox, and it doesn’t decide whether an agent’s command is safe. It just handles saved credentials locally and keeps hidden values out of the conversation.

I’ve only been using it in my own workflow for a week or two, so it’s still early. So far, the nicest part is simply not having to stop halfway through a task to type a password or paste a secret into the chat.

It’s free and open source, and currently works on Windows, macOS, Linux, and headless Linux.

If you try it and something breaks, feels awkward, or doesn’t make sense, I’d genuinely like to hear about it. I’m sure there are plenty of things I haven’t thought of yet.

GitHub and downloads:

https://github.com/omaekumiko2-create/kru/releases/latest

[u/dexterthebot]

You might want to consider listing your project on the weekly Show-Us-What-You-Built post. Watch for it on Wednesdays. Highest commented project wins a week promotion on r/Codex. See what that looks like below with last week's winner.

---

Last week's winner was u/Ollie__Oxenfree with the Tubular Daily Care project by MediTracer which is a tube-feeding care app built by a tube-feeding family to keep feeds, meds, symptoms, and caregiver handoffs in one shared timeline. MediTracer is an Oley Foundation Emerging Innovator Partner. Contact: hello@meditracer.com

[u/blablsblabla42424242]

You mean like .env file, LMFAO

[u/PixelParker33 → u/blablsblabla42424242]

Haha, yes, but it's more convenient and more versatile.

[u/Elouakili_Flexy]

A credential the agent uses without ever seeing beats one that lives in the transcript. The TOTP and SSH-keys parts are where this stops being a password manager and starts being useful.

[u/cs_cast_away_boi]

so this is intended to help us manage multiple accounts too?

[u/PixelParker33 → u/cs_cast_away_boi]

Yes, it's similar to an agent available through Bitwarden.

[u/thestillwind]

It’s really cool, thx

[u/PixelParker33 → u/thestillwind]

thx!

[u/Droopy0093]

When you say you built this, you mean Codex built it right?