mcpbeat Sign in

Janee MCP Server

by rsdouglas Your server? Claim it
local only

Janee runs on your own machine — the client starts it, so there is no endpoint to ping. 186 installs a week from npm. Last commit 17 Mar 2026.

Secure secrets proxy for AI agents — manages API keys so agents never see raw credentials.

Installs per day peak 89 · avg 18 · +500% w/w
a month agotoday
186
Installs / week
npm · @true-and-useful/janee
30
Stars
1 open issue
17 Mar 2026
Last commit
no releases in 90 days
MIT
License
TypeScript

What the code does

We read the source, 3 d ago · rules 995398eba69f

A tool parameter reaches a dangerous call

A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.

A tool parameter reaches a file or shell call Janee.url → packages/create-gh-app/create-gh-app.mjs:430, Janee.url → packages/create-gh-app/create-gh-app.mjs:435
        fs.writeFileSync(path.join(outDir, "app.json"), JSON.stringify(app, null, 2));
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs a command on install [пакет] package.json:1
postinstall: node scripts/postinstall.js
    const proc = spawn(command[0], command.slice(1), {
Builds a file path from a variable src/providers/filesystem.ts:105
      ? path.join(this.secretsDir, prefix)
Reads files and sends them to the network packages/create-gh-app/create-gh-app.mjs:124
  for (const agent of fs.readdirSync(APP_BASE)) {

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

A tool parameter here reaches a dangerous call

That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add janee -- npx -y @true-and-useful/janee
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "janee": {
      "command": "npx",
      "args": [
        "-y",
        "@true-and-useful/janee"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.janee]
command = "npx"
args = ["-y", "@true-and-useful/janee"]
.cursor/mcp.json
{
  "mcpServers": {
    "janee": {
      "command": "npx",
      "args": [
        "-y",
        "@true-and-useful/janee"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "janee": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@true-and-useful/janee"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: JANEE_CONFIG (Path to secrets configuration file).

Alternatives to Janee

same job, measured the same way
Enigmagent MCP
by agnuxo1

Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys.

129 installs/wk local only
E
Eclipse Keyhold MCP
by cyan-eclipse-technologies-llc

credential leases, never raw keys — scoped, expiring secret leases for agents; the agent gets a

local only
Secure Vault
by mdfifty50-boop

Encrypted secrets and credential management for agents

47 installs/wk local only
vault
by meshpop

Secret and credential management MCP — securely store, retrieve, manage API keys and tokens

local only
Queryshield
by bch1212

Secure SQL proxy for AI agents — NL→SQL, AST safety, per-agent RLS, audit log.

63 installs/wk local only
hush
by royashbrook

A secret store for AI agents: the agent never sees the plaintext.

1 tools answering
q-ring
by i4ctime

OS keychain secrets for AI coding agents, over MCP.

278 installs/wk local only
E2b
by mcparmory

Create and manage secure sandboxes for running AI agent code

207 installs/wk local only

Janee — questions

Answers built from our own checks of this server.

Why is there no uptime for Janee?
Janee runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @true-and-useful/janee was installed 186 times last week.
How do I connect Janee?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @true-and-useful/janee straight from npm; nothing to host, nothing to sign up for.
How many people use Janee?
The npm package @true-and-useful/janee was installed 186 times in the last week. Week over week that is +500%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Janee open source?
Yes — it is published under the MIT licence, written in TypeScript, 30 stars on GitHub and 1 open issue. The source link is on this page, so you can read exactly what it does with your data before you connect it.