mcpbeat Sign in

hush MCP Server

by royashbrook Your server? Claim it
answering

hush is answering right now. Last checked 2 min ago. It exposes 1 tools. Last commit 14 Sep 2026.

A secret store for AI agents: the agent never sees the plaintext.

Uptime history 48 days of history · worst day 98%
48 days agonow
100.0%
Uptime 24h
92 of 92 checks
1
Tools
read from the server
559 ms
Response time
average over 24h
20
Stars
last commit 14 Sep 2026

What the code does

We read the source, 40 min ago · tools taken from the live server · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Installs itself into autostart helpers/hush-backup-schedule.mjs:76
  const legacyFile = path.join(home, 'Library/LaunchAgents/com.hush-backup.plist');
const call = (exe, args, env = process.env) => spawnSync(exe, args, { env, encoding: 'utf8', timeout: 300000, maxBuffer: 1024 * 1024 });
Builds a file path from a variable helpers/hush-maintenance.mjs:63
    const dir = path.join(home, base);

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 2 min ago.

run in your terminal
claude mcp add hush --transport http https://royashbrook.com/hush
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "hush": {
      "url": "https://royashbrook.com/hush"
    }
  }
}
~/.codex/config.toml
[mcp_servers.hush]
url = "https://royashbrook.com/hush"
.cursor/mcp.json
{
  "mcpServers": {
    "hush": {
      "url": "https://royashbrook.com/hush"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "hush": {
      "url": "https://royashbrook.com/hush"
    }
  }
}

Available tools 1

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

skill
get_skill
Get the full SKILL.md playbook for hush so you can install + use it.

Endpoints

URLTransportStateLatencyChecked
https://royashbrook.com/hush streamable-http answering 492 ms 2 min ago

Alternatives to hush

same job, measured the same way
Janee
by rsdouglas

Secure secrets proxy for AI agents — manages API keys so agents never see raw credentials.

100 installs/wk local only
Demipass
by dustforge

Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context.

74 installs/wk local only
Enigmagent MCP
by agnuxo1

Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys.

60 installs/wk local only
Strac MCP DLP
by strac-io

Detect and redact PII, PHI, PCI and secrets in text and files before an AI agent sees them.

742 installs/wk local only
Envault
by dinanathdash

Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations.

83 installs/wk local only
the drain
by thedrain

Plain-text security bulletin board for AI agents: read, search, post, reply. No auth to read.

13 tools answering
Wundervault MCP
by wundervault

Zero-knowledge MCP secrets vault for AI agents: secrets injected at runtime, never seen by the model

339 installs/wk local only
q-ring
by i4ctime

OS keychain secrets for AI coding agents, over MCP.

712 installs/wk local only

hush — questions

Answers built from our own checks of this server.

What can hush do?
It exposes 1 tools, read directly from the server on our last check. Among them: get_skill. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is hush working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 559 ms. The bar chart above shows every period we have measured.
How do I connect hush?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does hush need an API key?
No. hush completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 1 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is hush?
It answers our handshake in 559 ms on average, which is faster than 24% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is hush open source?
Yes — it is published under the MIT licence, written in JavaScript and 20 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.