kdbx

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-10-14T02:16:43.504921Z",
      "publishedAt": "2026-10-14T02:16:43.504921Z",
      "statusChangedAt": "2026-10-14T02:16:43.504921Z"
    }
  },
  "server": {
    "name": "io.github.yarrasys/kdbx",
    "title": "kdbx",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.3.2",
    "packages": [
      {
        "transport": {
          "type": "stdio"
        },
        "identifier": "ghcr.io/yarrasys/kdbx:0.3.2",
        "registryType": "oci",
        "packageArguments": [
          {
            "type": "positional",
            "value": "mcp",
            "description": "kdbx is a CLI; the MCP server is its `mcp` subcommand."
          }
        ],
        "runtimeArguments": [
          {
            "name": "-v",
            "type": "named",
            "value": "{project_dir}:/work",
            "variables": {
              "project_dir": {
                "format": "filepath",
                "isRequired": true,
                "description": "Absolute path to the project whose secrets you want available"
              }
            },
            "isRequired": true,
            "description": "Mount the project directory containing the committed .keepassxc.json pointer file. kdbx discovers the pointer by walking up from the working directory."
          },
          {
            "name": "-v",
            "type": "named",
            "value": "{keepassxc_dir}:/kpx:ro",
            "variables": {
              "keepassxc_dir": {
                "format": "filepath",
                "isRequired": true,
                "description": "Absolute path to the KeePassXC directory, usually ~/.config/keepassxc"
              }
            },
            "isRequired": true,
            "description": "Mount the KeePassXC directory holding the vault and its key file. Mounted read-only: every tool this server exposes is a read."
          },
          {
            "name": "-w",
            "type": "named",
            "value": "/work",
            "description": "Run inside the mounted project so pointer discovery resolves."
          }
        ],
        "environmentVariables": [
          {
            "name": "KEEPASSXC_DIR",
            "default": "/kpx",
            "description": "Where kdbx looks for vaults inside the container. Must match the mount target above."
          },
          {
            "name": "KDBX_ENV",
            "description": "Environment to select, overriding the pointer's defaultEnv. Optional."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/yarrasys/kdbx",
      "source": "github"
    },
    "websiteUrl": "https://github.com/yarrasys/kdbx#agent-and-editor-integration",
    "description": "Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected."
  }
}