Credential Broker for VS Code
io.github.sarutobisasuke8/credential-broker-mcp
Local-first credential broker: agents use gated APIs through scoped, audited requests, never keys.
client:VS Code
transport:stdio
runtime:npm
Install Credential Broker in VS Code
.vscode/mcp.json
{
"inputs": [
{
"type": "promptString",
"id": "broker-agent-id",
"description": "BROKER_AGENT_ID",
"password": true
},
{
"type": "promptString",
"id": "broker-policy-file",
"description": "BROKER_POLICY_FILE",
"password": true
},
{
"type": "promptString",
"id": "broker-audit-file",
"description": "BROKER_AUDIT_FILE",
"password": true
},
{
"type": "promptString",
"id": "broker-approvals-file",
"description": "BROKER_APPROVALS_FILE",
"password": true
},
{
"type": "promptString",
"id": "broker-hot-reload",
"description": "BROKER_HOT_RELOAD",
"password": true
},
{
"type": "promptString",
"id": "broker-allow-key-requests",
"description": "BROKER_ALLOW_KEY_REQUESTS",
"password": true
}
],
"servers": {
"credential-broker-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@sarutobi-sasuke/credential-broker-mcp"
],
"env": {
"BROKER_AGENT_ID": "${input:broker-agent-id}",
"BROKER_POLICY_FILE": "${input:broker-policy-file}",
"BROKER_AUDIT_FILE": "${input:broker-audit-file}",
"BROKER_APPROVALS_FILE": "${input:broker-approvals-file}",
"BROKER_HOT_RELOAD": "${input:broker-hot-reload}",
"BROKER_ALLOW_KEY_REQUESTS": "${input:broker-allow-key-requests}"
}
}
}
}
VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs