How is the vault secured and where is it stored?
The vault is encrypted with Argon2id and AES-256-GCM, and stored only in `chrome.storage.local` — never in `storage.sync` or the cloud.
@Agnuxo1
基本信息
AES-256-GCM + Argon2id encrypted local vault for AI agent credentials. Store API keys, tokens, and passwords safely. Reference them as {{PLACEHOLDER}} in any AI workflow — LangChain, CrewAI, AutoGen, n8n, and 40+ frameworks.
使用下面的配置,将此服务器添加到你的 MCP 客户端。
{
"mcpServers": {
"enigmagent": {
"command": "npx",
"args": [
"-y",
"enigmagent-mcp"
]
}
}
}工具列表暂未提供
当前收录暂时没有可展示的工具列表,不代表服务没有工具。请查阅项目文档了解支持的能力。
点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。
EnigmAgent MCP is a browser extension that acts as a credential vault for AI agents. It intercepts form submissions containing placeholders like {{GITHUB_TOKEN}} and replaces them with real secrets, keeping the actual values hidden from the agent’s context window, logs, or training data. It is designed for anyone who uses AI agents (Claude, ChatGPT, Cursor, browser automation) to perform tasks that require credentials.
Install the extension by loading the unpacked extension/ folder in Chrome, Edge, or Firefox. Open the vault, create a new vault with a strong password, and add secrets using the add SECRET_NAME @domain value command in the chat. Instruct your AI agent to type placeholders like {{SECRET_NAME}} in form fields and submit; EnigmAgent resolves and injects the real credentials automatically.
{{DOC:filename}} for text files.chrome.storage.local, never synced to the cloud.{{OPENAI_API_KEY}} on platform.openai.com without seeing the real key.The vault is encrypted with Argon2id and AES-256-GCM, and stored only in `chrome.storage.local` — never in `storage.sync` or the cloud.
EnigmAgent intercepts the submit event, checks the domain, asks the background service worker to decrypt the secret, injects the real value into the form, and re-submits. The plaintext exists in memory for about one event-loop tick.
Yes, it works with any AI agent that interacts with web forms in the browser — Claude, ChatGPT, Cursor, GitHub Copilot, n8n, Zapier, and more.
When adding a secret with `add NAME @domain value`, the secret is pinned to that domain. EnigmAgent only resolves the secret on forms that match the bound domain, refusing mismatched origins.
Signed releases for the Chrome Web Store and Mozilla AMO are in progress. Currently, you must load the extension manually via developer mode.

Agent-ready sports intelligence API: live scores, odds, line movement, public betting splits, and explainable bet confidence — via 16 MCP tools at https://lumify.ai/mcp. Get a free key instantly — no signup, email, or ca

scvd.store is an evidence observatory for agentic commerce. Independent signed observation of what other people's endpoints, artifacts and payments actually did among other things. USDC on Base, Arbitrum One, World Chain

Docs: https://botchelor.com/agents and https://botchelor.com/llms.txt . Botchelor is a blind-date show for fictional characters, and AI agents are welcome to play. Over MCP, your agent builds an original character in w
NetFoundry MCP Gateway enables secure, isolated access to Model Context Protocol (MCP) tools across distributed systems without exposing public endpoints. Zero trust gateway for MCP servers. Aggregate, filter, and secure
Detect and redact PII, PHI, PCI and secrets — SSNs, credit cards, passports, API keys and cloud credentials — in text and in local files, using the Strac DLP API. Five tools: redact_text, detect_sensitive_data, detect_fi
评论