mcpbeat Sign in

Janee MCP Server

by rsdouglas Your server? Claim it
local only

Janee runs on your own machine — the client starts it, so there is no endpoint to ping. 100 installs a week from npm. Last commit 17 Mar 2026.

Secure secrets proxy for AI agents — manages API keys so agents never see raw credentials.

Installs per day peak 54 · avg 14 · +200% w/w
a month agotoday
100
Installs / week
npm · @true-and-useful/janee
30
Stars
1 open issues
17 Mar 2026
Last commit
0 releases in 90 days
MIT
License
TypeScript

What the code does

We read the source, 20 h ago · rules 3dff92dd89df

A tool parameter reaches a dangerous call

A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.

A tool parameter reaches a file or shell call Janee.url → packages/create-gh-app/create-gh-app.mjs:430, Janee.url → packages/create-gh-app/create-gh-app.mjs:435
        fs.writeFileSync(path.join(outDir, "app.json"), JSON.stringify(app, null, 2));
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs a command on install [пакет] package.json:1
postinstall: node scripts/postinstall.js
    const proc = spawn(command[0], command.slice(1), {
Builds a file path from a variable src/providers/filesystem.ts:105
      ? path.join(this.secretsDir, prefix)
Reads files and sends them to the network packages/create-gh-app/create-gh-app.mjs:124
  for (const agent of fs.readdirSync(APP_BASE)) {
Dumps the whole environment src/providers/env.ts:66
    return Object.keys(process.env)

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

A tool parameter here reaches a dangerous call

That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add janee -- npx -y @true-and-useful/janee
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "janee": {
      "args": [
        "-y",
        "@true-and-useful/janee"
      ],
      "command": "npx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.janee]
command = "npx"
args = ["-y", "@true-and-useful/janee"]
.cursor/mcp.json
{
  "mcpServers": {
    "janee": {
      "args": [
        "-y",
        "@true-and-useful/janee"
      ],
      "command": "npx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "janee": {
      "args": [
        "-y",
        "@true-and-useful/janee"
      ],
      "command": "npx"
    }
  }
}

This one needs environment variables set before it will start: JANEE_CONFIG (Path to secrets configuration file). The author declared them in the registry entry; get the values from the project itself.

Alternatives to Janee

same job, measured the same way
Enigmagent MCP
by agnuxo1

Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys.

60 installs/wk local only
Secure Vault
by mdfifty50-boop

Encrypted secrets and credential management for agents

35 installs/wk local only
vault
by meshpop

Secret and credential management MCP — securely store, retrieve, manage API keys and tokens

local only
Queryshield
by bch1212

Secure SQL proxy for AI agents — NL→SQL, AST safety, per-agent RLS, audit log.

56 installs/wk local only
Phantom Secrets
by ashlrai

Stop AI coding agents from leaking API keys. Local proxy swaps real secrets for phm_ tokens.

51 installs/wk local only
hush
by royashbrook

A secret store for AI agents: the agent never sees the plaintext.

1 tools answering
q-ring
by i4ctime

OS keychain secrets for AI coding agents, over MCP.

712 installs/wk local only
E2b
by mcparmory

Create and manage secure sandboxes for running AI agent code

238 installs/wk local only

Janee — questions

Answers built from our own checks of this server.

Why is there no uptime for Janee?
Janee runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @true-and-useful/janee was installed 100 times last week.
How do I connect Janee?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @true-and-useful/janee straight from npm; nothing to host, nothing to sign up for.
How many people use Janee?
The npm package @true-and-useful/janee was installed 100 times in the last week. Week over week that is +200%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Janee open source?
Yes — it is published under the MIT licence, written in TypeScript, 30 stars on GitHub and 1 open issue. The source link is on this page, so you can read exactly what it does with your data before you connect it.