Keeper Secrets Manager runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 20 Oct 2026.
Read-only multitenant Streamable HTTP bridge over Keeper Secrets Manager's MCP server.
What the code does
We read the source, 3 h ago · rules 995398eba69f
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
const child = this.children.get(credHash) ?? this.spawn(creds, credHash);
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
const child = this.children.get(credHash) ?? this.spawn(creds, credHash);
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found things in this code
Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Keeper Secrets Manager and you get told the day something new turns up.
Alternatives to Keeper Secrets Manager
same job, measured the same wayRead-only multitenant Streamable HTTP bridge over Keeper Secrets Manager's MCP server.
Read-only Claude access to WordPress over MCP: secrets hidden, sandboxed, works on broken sites.
MCP server for MariaDB. Read-only by default, row caps, timeouts, secrets never logged.
MCP server for MySQL. Read-only by default, row caps, statement timeouts, secrets never logged.
MCP server for PostgreSQL. Read-only by default, row caps, timeouts, secrets never logged.
MCP server for AI assistants: read, write, edit, and manage files securely on local filesystem.
Read-only Kubernetes MCP server: inspect resources, logs, events, and metrics. Secrets are masked.
Secure read-only MCP server for Slack workspaces
Keeper Secrets Manager — questions
Answers built from our own checks of this server.