SecureInput: open-source local secret input for MCP coding agents
rishabhgusain · reddit · 2026-11-03
An MIT-licensed MCP server (macOS/Linux, Node.js 22+) that lets coding agents receive API keys safely: input via inline MCP App or a paired localhost browser, delivery via stdin, env var or .env file, with the MCP result reporting status only. The author spells out the trust boundaries — host/command must be trusted, filesystem-capable agents may read .env, inline mode skips browser command review — and ships a security-model doc.
More from coding & agent
- Aider, the 50k-star pioneer that predated Claude Code, sees 6 months of silence — RobertTLange · 2026-11-03
- AI turns 2D engineering drawings into CNC-ready 3D CAD in six-figure Dutch steel deal — jxnlco · 2026-11-03
- 7 Karpathy repos that take you from one neuron to autonomous AI research — atullchaurasia · 2026-11-03
- Workers founders push back on "software is dead" narrative, bet on verification as compute — julianweisser · 2026-11-03
- GenReasoning claims first public recipe for training agent collectives, hard-to-verify RL next — rosstaylor90 · 2026-11-03
- GitHub org/repo secrets can't be secured — use environments instead — AccBalanced · 2026-11-03