offprompt: MIT-licensed MCP server hands agents API keys without ever exposing them
Vast_Ad_7338 · reddit · 2026-11-02
A developer shares offprompt, a free MIT-licensed MCP server that solves the "paste your API key into the chat" problem.
- Motivation: the team builds on Zama's FHE stack and codes with agents daily; keys pasted into chat end up in transcripts, logs, and model provider servers
- Three tools: collectsecret (agent requests a named key, a local page opens at 127.0.0.1 for you to type it), awaitsecret (waits for submission), cancelsecret
- The value is written straight to .env.local; the agent never sees it. In cloud sandboxes it routes through a Cloudflare quick tunnel with browser-side encryption
- Requires Node 22+; setup is just npx offprompt mcp
The author seeks feedback on splitting collect/await into two tools and which MCP clients handle human-in-the-loop waits without timing out.
More from coding & agent
- Developer's WhatsApp agent now clears its own STOPs with signal-based gate rules — petrusenko_max · 2026-11-03
- Dev open-sources faster-chrome-devtools-skill after analyzing 2,500 agent uses — simpsoka · 2026-11-03
- Turning off preserve_thinking cuts Qwen coding sessions' context use by half with little loss — YetAnotherAnonymoose · 2026-11-03
- Shipping an enterprise project with Claude and Codex: AI writes, judge scores, you decide — kmeanskaran · 2026-11-03
- Neo4j GraphRAG Python package defaults to CPU-only PyTorch wheels to cut install overhead — JeremyCMorgan · 2026-11-03
- Zero-dependency SQLite + FTS5 MCP server adds persistent memory and anti-loop tracking to coding agents — AvocadoJaded8829 · 2026-11-03