KSM MCP Server - Secure AI Access to Keeper Secrets

What is KSM MCP Server - Secure AI Access to Keeper Secrets?

KSM MCP Server - Secure AI Access to Keeper Secrets is a Model Context Protocol (MCP) server that acts as a secure intermediary between AI language models (like Claude) and Keeper Secrets Manager (KSM). It allows AI agents to manage KSM secrets—listing, creating, retrieving, updating, deleting records and folders—while protecting the application credentials. Sensitive operations require user confirmation to maintain control over data.

How to use KSM MCP Server - Secure AI Access to Keeper Secrets?

Install via Docker (recommended) or a pre-compiled binary. Obtain a base64-encoded configuration string from the Keeper Secrets Vault (under Secrets Manager > Application > Devices). Configure Claude Desktop by adding a ksm server entry in claude_desktop_config.json with the appropriate command and args (e.g., docker run -i --rm -e KSM_CONFIG_BASE64=... keepersecurityinc/ksm-mcp-poc:latest or /path/to/ksm-mcp serve --profile default). Restart Claude Desktop to connect.

Key features of KSM MCP Server - Secure AI Access to Keeper Secrets

• Secure intermediary between AI and Keeper Secrets Manager
• Full secret lifecycle: list, get, search, create, update, delete
• Folder management: list, create, delete (with force delete option)
• File operations: upload and download attachments within secrets
• Generate secure passwords and TOTP codes
• User confirmation required for destructive operations (creates, updates, deletes, unmasking)

Use cases of KSM MCP Server - Secure AI Access to Keeper Secrets

• Create a new secret in a new folder via AI instruction
• List all secrets and retrieve one with sensitive fields masked
• Delete an old secret and then remove its empty folder
• Upload a configuration file to an existing record
• Generate a strong password and save it to a new record without exposing it to the AI

FAQ from KSM MCP Server - Secure AI Access to Keeper Secrets

Where do I