mcp-secrets-runner · Office #48,508

What it is

Calls itself “runner”.

• Calls itself: runner

“…mcp-secrets-runner sits between the MCP client and the server.”

Where it puts itself

Claims “single biggest”. Rules out “plaintext API keys in .mcp.json”.

• Superlative claim: single biggest
• Says it will not: plaintext API keys in .mcp.json

“…mcp-secrets-runner sits between the MCP client and the server.”

“It is the single biggest reason MCP stalls at the security review in a company.”

Who it sells to

Sells to developers.

• Sells to: developers

“DEVELOPER WORKFLOWS Actions Automate any workflow”

How it runs

A command-line tool for Windows. Runs locally and works offline. Distributed through the npm. Open source. AI is a side feature.

• Kind: cli
• Runs on: Windows
• Runs where: on the device, offline
• Distributed via: npm
• Open source: yes
• AI role: a side feature

“…npm install -g mcp-secrets-runner”

“It resolves executables through PATHEXT on Windows.”

What it works with

Integrates with 1Password, HashiCorp Vault and Infisical. Names AWS Secrets Manager, Doppler and 2 more on its pages.

• Integrates with: 1Password · HashiCorp Vault · Infisical
• Names: AWS Secrets Manager · Doppler · GitHub Copilot · +1

“Starts MCP servers with secrets pulled from Infisical, 1Password or HashiCorp Vault.”

“AWS Secrets Manager and Doppler would both fit.”

What it offers as proof

Live, no waitlist. Publishes docs.

“You must be signed in to change notification settings”

“README.md -> https://github.com/wiktormalyska/mcp-secrets-runner/blob/master/README.md”