KSM MCP Server - Secure AI Access to Keeper Secrets

Name: KSM MCP Server - Secure AI Access to Keeper Secrets
Author: Keeper-Security

@Keeper-Security

Repository

About KSM MCP Server - Secure AI Access to Keeper Secrets

Keeper Secrets Manager - MCP (Model Context Protocol) server implementation

#ai #secrets-management #mcp-server

Basic information

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "keeper-mcp-golang-docker": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "\\"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is KSM MCP Server - Secure AI Access to Keeper Secrets?

KSM MCP Server - Secure AI Access to Keeper Secrets is a Model Context Protocol (MCP) server that acts as a secure intermediary between AI language models (like Claude) and Keeper Secrets Manager (KSM). It allows AI agents to manage KSM secrets—listing, creating, retrieving, updating, deleting records and folders—while protecting the application credentials. Sensitive operations require user confirmation to maintain control over data.

How to use KSM MCP Server - Secure AI Access to Keeper Secrets?

Install via Docker (recommended) or a pre-compiled binary. Obtain a base64-encoded configuration string from the Keeper Secrets Vault (under Secrets Manager > Application > Devices). Configure Claude Desktop by adding a ksm server entry in claude_desktop_config.json with the appropriate command and args (e.g., docker run -i --rm -e KSM_CONFIG_BASE64=... keepersecurityinc/ksm-mcp-poc:latest or /path/to/ksm-mcp serve --profile default). Restart Claude Desktop to connect.

Key features of KSM MCP Server - Secure AI Access to Keeper Secrets

Secure intermediary between AI and Keeper Secrets Manager
Full secret lifecycle: list, get, search, create, update, delete
Folder management: list, create, delete (with force delete option)
File operations: upload and download attachments within secrets
Generate secure passwords and TOTP codes
User confirmation required for destructive operations (creates, updates, deletes, unmasking)

Use cases of KSM MCP Server - Secure AI Access to Keeper Secrets

Create a new secret in a new folder via AI instruction
List all secrets and retrieve one with sensitive fields masked
Delete an old secret and then remove its empty folder
Upload a configuration file to an existing record
Generate a strong password and save it to a new record without exposing it to the AI