Keeper Secrets Manager for VS Code
io.github.wyre-ai/keeper-mcp
Read-only multitenant Streamable HTTP bridge over Keeper Secrets Manager's MCP server.
client:VS Code
transport:stdio
runtime:oci
Install Keeper Secrets Manager in VS Code
.vscode/mcp.json
{
"inputs": [
{
"type": "promptString",
"id": "port",
"description": "PORT",
"password": true
},
{
"type": "promptString",
"id": "ksm-mcp-bin",
"description": "KSM_MCP_BIN",
"password": true
},
{
"type": "promptString",
"id": "child-home",
"description": "CHILD_HOME",
"password": true
},
{
"type": "promptString",
"id": "idle-evict-ms",
"description": "IDLE_EVICT_MS",
"password": true
},
{
"type": "promptString",
"id": "spawn-timeout-ms",
"description": "SPAWN_TIMEOUT_MS",
"password": true
}
],
"servers": {
"keeper-mcp": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/wyre-ai/keeper-mcp:v1.0.3"
],
"env": {
"PORT": "${input:port}",
"KSM_MCP_BIN": "${input:ksm-mcp-bin}",
"CHILD_HOME": "${input:child-home}",
"IDLE_EVICT_MS": "${input:idle-evict-ms}",
"SPAWN_TIMEOUT_MS": "${input:spawn-timeout-ms}"
}
}
}
}VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs