@securecode/mcp-server

@securecode/mcp-server

MCP Server for SecureCodeHQ. Lets Claude Code access your secrets securely without exposing them in the chat.

Setup (2 minutes)

1. Get your API key from securecodehq.com/en/settings

2. Add to your Claude Code config:

Edit ~/.claude.json (or ~/.claude/claude_desktop_config.json):

{
  "mcpServers": {
    "securecode": {
      "command": "npx",
      "args": ["@securecode/mcp-server"],
      "env": {
        "SECURECODE_API_KEY": "sc_your_key_here"
      }
    }
  }
}

3. Restart Claude Code. That's it.

What Claude Can Do

Once connected, Claude Code can:

"Get my Stripe API key" → reads from your vault
"List my production secrets" → shows names without values
"Save this new API key as OPENAI_KEY" → creates a secret

Available Tools

Tool	Description	Input
get-secret	Get a secret value by name	name: string
list-secrets	List all secrets (names only, no values)	tags?: string[]
create-secret	Create a new secret	name, value, description?, tags?

How It Works

• Secrets are stored encrypted in Google Secret Manager
• Every access is logged in your audit trail (including which AI model accessed it)
• API keys are scoped to your account with sc_ prefix
• The MCP server runs locally via stdio transport — no data goes through third parties

Requirements

• Node.js >= 18
• A SecureCodeHQ account with an API key

License

MIT