
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@keyid/agent-kit
Advanced tools
KeyID MCP for signup sessions, browser continuity, agent email, SMS, OTP/TOTP, persona state, and durable secrets.
Remote-first endpoint: https://keyid.ai/mcp
Local stdio fallback: npx -y @keyid/agent-kit
{
"mcpServers": {
"keyid": {
"command": "npx",
"args": ["-y", "@keyid/agent-kit"]
}
}
}
claude mcp add keyid -- npx -y @keyid/agent-kit
{
"mcpServers": {
"keyid": {
"command": "npx",
"args": ["-y", "@keyid/agent-kit"]
}
}
}
https://keyid.ai/mcp
Hosted mode creates a managed install identity for the connector and stores the private key encrypted at rest. Local mode uses the Ed25519 keypair supplied through KEYID_PUBLIC_KEY and KEYID_PRIVATE_KEY, or generates one if they are missing.
| Tool | Description |
|---|---|
provision_identity | Create or reveal the email identity for this MCP session. |
get_identity | Fetch the current KeyID identity, address, phone, and reputation. |
request_phone_number | Assign a phone number to the current KeyID identity. |
| Tool | Description |
|---|---|
list_messages | List email or SMS messages with search and inbox filters. |
wait_for_message | Poll until a matching inbound message arrives. |
get_message | Fetch the full details for a single message. |
send_email | Send an email from the current identity. |
reply_to_message | Reply to a message, optionally as reply-all. |
update_message | Update message flags such as read or starred state. |
| Tool | Description |
|---|---|
list_threads | List conversation threads for the current identity. |
get_thread | Fetch a thread and all of its messages. |
| Tool | Description |
|---|---|
get_verification_codes | Read OTP or verification codes from a message, or from the latest matching message. |
follow_verification_link | Follow a verification link directly or from an extracted message link list. |
| Tool | Description |
|---|---|
start_registration_session | Start a signup session that correlates email, SMS, or TOTP artifacts for one service. |
list_registration_sessions | List current and historical signup sessions for this identity. |
get_registration_session | Fetch one signup session, including its latest artifact summary and lease state. |
wait_for_registration_artifact | Poll a signup session until an artifact arrives or the session expires, blocks, or times out. |
get_registration_artifacts | Fetch the normalized artifacts attached to a signup session in priority order. |
save_browser_state | Store cookies and browser session state for a signup session in the KeyID vault. |
load_browser_state | Load the saved browser state for a signup session. |
complete_registration_session | Mark a signup session complete after the browser flow succeeds. |
block_registration_session | Mark a signup session blocked and record why the flow could not continue. |
| Tool | Description |
|---|---|
list_totp_entries | List registered authenticator/TOTP entries for the identity. |
get_totp_code | Generate the current TOTP code for a stored authenticator entry. |
| Tool | Description |
|---|---|
get_persona | Fetch the synthetic persona used for registrations. |
create_or_update_persona | Create a persona or update the existing one with explicit overrides. |
save_registration | Create or update a registration record for an external service. |
list_registrations | List saved service registrations. |
get_registration | Fetch one registration record by ID. |
| Tool | Description |
|---|---|
list_secrets | List vault keys without exposing secret values. |
get_secret | Retrieve a decrypted vault entry by key. |
put_secret | Create or update a vault entry. |
delete_secret | Delete a vault entry. |
| Tool | Description |
|---|---|
web_search | Search the web via Google. Returns titles, URLs, and snippets. Rate-limited to 100 searches per day. |
| Tool | Description |
|---|---|
list_files | List files stored for the current agent. |
store_file | Upload or overwrite a file. Content should be base64-encoded for binary, or plain text (which will be base64-encoded automatically). |
get_file | Download a stored file by key. Returns base64-encoded content. |
delete_file | Delete a stored file by key. |
| Tool | Description |
|---|---|
get_auto_reply | Fetch the current auto-reply configuration. |
set_auto_reply | Enable, disable, or edit the auto-reply responder. |
get_forwarding | Fetch the current forwarding address. |
set_forwarding | Set or clear the forwarding address. |
get_signature | Fetch the current email signature. |
set_signature | Set or clear the email signature. |
| Tool | Description |
|---|---|
list_contacts | List saved contacts for the identity. |
upsert_contact | Create a contact by email or update one by contact ID. |
delete_contact | Delete a contact by ID. |
| Tool | Description |
|---|---|
list_webhooks | List webhook subscriptions for the identity. |
create_webhook | Create a webhook subscription. |
get_webhook_deliveries | Inspect recent webhook delivery attempts. |
| Tool | Description |
|---|---|
get_metrics | Fetch usage metrics for the current identity. |
get_reputation | Fetch the current reputation score and factor breakdown. |
| Prompt | Description |
|---|---|
set-up-agent-communications | Provision email, inspect identity, and enable the communication settings the user asks for. |
complete-email-verification | Use the low-level verification tools to watch for one verification message and surface the best link or code. |
run-signup-session | Start a signup session, keep browser state aligned, and finish or block the flow with explicit state. |
resume-signup-session | Load saved browser state, continue a paused signup, and wait for the next artifact only if needed. |
fetch-latest-code | Retrieve the newest verification code from email, SMS, or TOTP. |
triage-inbox | List recent messages, highlight urgent items, and suggest the safest next reply action. |
autonomous-signup | Create or update a persona, run a signup session, and record the completed registration with durable state. |
reply-conservatively | Reply briefly, avoid inventing commitments, and keep tone factual. |
| Resource | Description |
|---|---|
keyid://identity/current | Current email, phone, and profile state. |
keyid://inbox/unread | Recent unread inbound messages. |
keyid://reputation/current | Current reputation score and factor breakdown. |
keyid://totp/services | Stored TOTP entries. |
keyid://registrations/recent | Recent service registrations. |
keyid://vault/keys | Stored secret keys without their values. |
keyid://registration-sessions/active | Recent signup sessions for the current identity, newest first. |
FAQs
KeyID MCP server for agent email, SMS, OTP/TOTP, and signup verification
The npm package @keyid/agent-kit receives a total of 49 weekly downloads. As such, @keyid/agent-kit popularity was classified as not popular.
We found that @keyid/agent-kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.