Passtrami: an MCP server for Apple Passwords that never leaks plaintext into agent transcripts
zats · x · 2026-09-10
Developer zats released Passtrami, a macOS app that gives Apple Passwords (iCloud Keychain) a local MCP interface. Coding agents like Codex, Claude Code, and Cursor can use it, but password values never appear in MCP tool responses — preventing leaks into agent session transcripts. The design borrows from 1Password's Environments MCP: send passwords to the program that needs them without exposing them to the agent. Every retrieval requires Touch ID approval, keeping the user in control. It ships as a menu bar app plus an optional CLI, built on the open-source apw project, requiring Apple Silicon and macOS 26.2+.
Related event: Passtrami Open-Sources MCP Bridge to Apple Passwords for AI Agents(3 posts)→
More from coding & agent
- shadcn's /improve skill paired with Grok on SuperGrok Heavy for plowing through issues — shadcn · 2026-10-27
- Paradigm Launches Envoys: Your Claude Code and Codex on Your Research Graph, Free — tensorqt · 2026-10-27
- AXL launches remote MCP server exposing 1,284 sales and marketing APIs to Claude and Codex — EdTech_Padre · 2026-10-27
- GitHub's Thomas Dohmke ships Entire, a Git forge built for agent-human collaboration — carrycooldude · 2026-10-27
- OmarchyTV hits GitHub: Omarchy-style TV launcher with AI TUI and MCP — alexcovo_eth · 2026-10-27
- AWS on agent prompt caching: explicit + implicit patterns to slash token costs — AWS ML Blog · 2026-10-27