@agentkeys-io/mcp

An MCP (Model Context Protocol) server that lets AI agents manage credentials and make proxied API calls through AgentKeys.

Store API keys in AgentKeys and let your agent use them safely through the proxy — without ever seeing the raw secrets.

---

Quick Start

AGENTKEYS_API_KEY=ak_ws_xxxx npx @agentkeys-io/mcp

Get your workspace API key from app.agentkeys.io/settings.

---

Configuration

Environment Variable	Required	Default	Description
AGENTKEYS_API_KEY	✅ Yes	—	Workspace API key (starts with ak_ws_)
AGENTKEYS_URL	No	https://app.agentkeys.io	AgentKeys web app URL
AGENTKEYS_PROXY_URL	No	https://proxy.agentkeys.io	AgentKeys proxy URL

---

MCP Client Configuration

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "agentkeys": {
      "command": "npx",
      "args": ["@agentkeys-io/mcp"],
      "env": {
        "AGENTKEYS_API_KEY": "ak_ws_your_key_here"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json in your project:

{
  "mcpServers": {
    "agentkeys": {
      "command": "npx",
      "args": ["@agentkeys-io/mcp"],
      "env": {
        "AGENTKEYS_API_KEY": "ak_ws_your_key_here"
      }
    }
  }
}

Windsurf / Cline

Same config format — add to your MCP settings:

{
  "mcpServers": {
    "agentkeys": {
      "command": "npx",
      "args": ["@agentkeys-io/mcp"],
      "env": {
        "AGENTKEYS_API_KEY": "ak_ws_your_key_here"
      }
    }
  }
}

---

Available Tools

Credential Management

list_credentials

List all credentials stored in the workspace.

create_credential

Create a new credential in the workspace.

Parameter	Type	Required	Description
name	string	✅	Unique name for this credential
type	string	✅	API_KEY | BASIC_AUTH | CUSTOM_HEADER | QUERY_PARAM | COOKIE
value	string	For API_KEY	The secret value
provider	string	No	Provider name (e.g. stripe, resend, github)
baseUrl	string	No	Provider API base URL (e.g. https://api.resend.com)

delete_credential

Delete a credential by ID. Also revokes all associated proxy tokens.

Agent Management

list_agents

List all agents in the workspace.

create_agent

Create a new agent identity.

Parameter	Type	Required	Description
name	string	✅	Agent name (e.g. marketing-bot)
description	string	No	What this agent does

assign_credential

Assign a credential to an agent. Returns a proxy token.

⚠️ The proxy token is shown once — store it securely.

Proxy Requests

proxy_request

Make an API call through the AgentKeys proxy.

Parameter	Type	Required	Description
proxyToken	string	✅	Proxy token (starts with pxr_)
url	string	✅	Target URL (e.g. https://api.resend.com/emails)
method	string	No	HTTP method (default: GET)
headers	object	No	Additional request headers
body	string	No	JSON string body

---

Typical Workflow

1. list_credentials          → see what's available
2. create_agent              → create agent for this task
3. assign_credential         → get proxy token
4. proxy_request             → call API using proxy token

---

Links

• Dashboard
• Docs
• Support