Passtrami: an MCP server for Apple Passwords that never leaks plaintext into agent transcripts

zats · x · 2026-09-10

Developer zats released Passtrami, a macOS app that gives Apple Passwords (iCloud Keychain) a local MCP interface. Coding agents like Codex, Claude Code, and Cursor can use it, but password values never appear in MCP tool responses — preventing leaks into agent session transcripts. The design borrows from 1Password's Environments MCP: send passwords to the program that needs them without exposing them to the agent. Every retrieval requires Touch ID approval, keeping the user in control. It ships as a menu bar app plus an optional CLI, built on the open-source apw project, requiring Apple Silicon and macOS 26.2+.

Related event: Passtrami Open-Sources MCP Bridge to Apple Passwords for AI Agents(3 posts)→

Original post →

More from coding & agent

coding & agent channel →