# Ainoakari Keymaster MCP server

Source: https://glimind.com/server/mcp-registry%2Fio.github.ainoakari%2Fkeymaster-mcp
Registry id: `mcp-registry/io.github.ainoakari/keymaster-mcp`
Status: unknown

## Install

```json
{
  "mcpServers": {
    "ainoakari-keymaster-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@akari-os/keymaster-mcp"
      ]
    }
  }
}
```

Claude Code:

```sh
claude mcp add ainoakari-keymaster-mcp-server -- npx -y @akari-os/keymaster-mcp
```

## Tools (5)

- `get_secret`: Retrieve a secret from Vault through the read-only Keymaster boundary.
- `healthcheck`: Run a full status sweep across known secrets.
- `list_secrets`: List retrievable secret paths in service/key_name form.
- `list_services`: List known service and key-name pairs, including whether each key can be verified upstream.
- `rotate_secret`: Keymaster MCP is intentionally read-only. This tool explains the safe Vault-side rotation path instead of performing writes.

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.