mcpbeat Sign in

q-ring MCP Server

local only

q-ring runs on your own machine — the client starts it, so there is no endpoint to ping. 278 installs a week from npm. Last commit 31 Oct 2026.

OS keychain secrets for AI coding agents, over MCP.

Installs per day peak 159 · avg 23 · +60% w/w
a month agotoday
278
Installs / week
npm · @i4ctime/q-ring
4
Stars
6 open issues
31 Oct 2026
Last commit
8 releases in 90 days
AGPL-3.0
License
TypeScript

What the code does

We read the source, 1 d ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

    const child = spawn(opts.command, opts.args, {
Builds a database query by concatenation src/dashboard-client/main.js:753
  const lastUpdate = snap ? "updated " + fmtRelative(snap.timestamp) : "—";
Dumps the whole environment src/core/exec.ts:196, src/core/wrap.ts:412
  for (const [k, v] of Object.entries(process.env)) {
Image downloads and pipes straight to shell Dockerfile:5
RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates curl git && curl -fsSL https://deb.nodesource.com/setup_24.x | bash - && apt-get install -y --no-install-recommends nodejs && npm install -g [email protected] [email protected] && node --version && curl -Ls…

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add q-ring -- npx -y @i4ctime/q-ring
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "q-ring": {
      "command": "npx",
      "args": [
        "-y",
        "@i4ctime/q-ring"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.q-ring]
command = "npx"
args = ["-y", "@i4ctime/q-ring"]
.cursor/mcp.json
{
  "mcpServers": {
    "q-ring": {
      "command": "npx",
      "args": [
        "-y",
        "@i4ctime/q-ring"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "q-ring": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@i4ctime/q-ring"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: QRING_BACKEND (Secret storage backend. Defaults to the OS keychain; set to "file" for headless hosts with no Secret Service (CI, containers)), QRING_FILE_PASSPHRASE (Passphrase for the encrypted file backend (AES-256-GCM). Required only when QRING_BACKEND=file — without it the file backend fails closed), QRING_FILE_BACKEND_PATH (Custom path for the encrypted file store (default: ~/.config/q-ring/file-backend.enc)), QRING_CONFIG_DIR (Directory for q-ring's registries — hooks, entanglement, approvals, canary webhooks, agent memory (default: ~/.config/q-ring)).

Alternatives to q-ring

same job, measured the same way
Switchboard
by wkoverfield

One firewall and password manager for all your AI coding agents' MCP servers and secrets.

77 installs/wk local only
Bridgeguard MCP
by kota1026

BridgeGuard MCP Server - Cross-chain bridge security audit tools for AI coding agents. Scan bri...

43 installs/wk local only
Agent Sec
by kernora

Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.

2 tools answering
Tokenectomy Razor
by daffa2555

Autonomous log surgery & secret redaction MCP server for AI coding agents.

local only
Defenter Proxy
by defenter-ai

Real-time semantic security for AI coding agents and MCP tools

76 installs/wk local only
Janee
by rsdouglas

Secure secrets proxy for AI agents — manages API keys so agents never see raw credentials.

186 installs/wk local only
Ovrin
by joshluberisse

Secure Linux sandboxes for AI agents, as MCP tools.

88 installs/wk local only
Shadowgate MCP
by josephibra

Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.

answering

q-ring — questions

Answers built from our own checks of this server.

Why is there no uptime for q-ring?
q-ring runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @i4ctime/q-ring was installed 278 times last week.
How do I connect q-ring?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @i4ctime/q-ring straight from npm; nothing to host, nothing to sign up for.
How many people use q-ring?
The npm package @i4ctime/q-ring was installed 278 times in the last week. Week over week that is +60%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is q-ring open source?
Yes — it is published under the AGPL-3.0 licence, written in TypeScript, 4 stars on GitHub and 6 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.