Hush MCP Server
a secret store for AI agents, the one with no get . get a secret once into the OS keychain, then inject it into commands forever, the value never hits stdout, the transcript, or the cloud. It is available as a remote MCP endpoint.
Teams that want a hosted security endpoint instead of running a local process. The project is written in Shell.
VERIFIED ACTIVE
LAST COMMIT 2026-08-14 · ★ 20 · #128 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25
MIT · Shell · how we verify → /methodology
01 · Install Hush
before you install - you'll need
The README does not document required environment variables for a basic install.
Claude Code
claude mcp add royashbrook-hush --transport http https://royashbrook.com/hushClaude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"royashbrook-hush": {
"url": "https://royashbrook.com/hush"
}
}
}Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
https://royashbrook.com/hush
transport: streamable-http
endpoint alive - responded to MCP initialize · probed 2026-08-25
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as remote - your agent's requests go to royashbrook.com
endpoint auth accepted our unauthenticated MCP initialize - no credentials needed to connect
license MIT - declared in the repository
registry vendor namespace com.royashbrook - domain-verified with the official MCP registry
03 · Who maintains Hush
hush is maintained by royashbrook. We track 2 MCP servers from royashbrook - 2 actively maintained, 21 combined GitHub stars, oldest repo from Jun 2026.
04 · Facts
- repository
- github.com/royashbrook/hush
- category
- security - ranked #128 of 182 actively-maintained security servers as of 2026-08-25.
- registry
- com.royashbrook/hush (active, first published 2026-06-29)
05 · Hush FAQ
What is Hush?
a secret store for AI agents, the one with no get . get a secret once into the OS keychain, then inject it into commands forever, the value never hits stdout, the transcript, or the cloud. It is available as a remote MCP endpoint.
Is Hush still maintained?
Yes - as of 2026-08-25, its last commit was 2026-08-14. We re-verify nightly.
How do I install Hush?
Run `claude mcp add royashbrook-hush --transport http https://royashbrook.com/hush`. The README does not document required environment variables for a basic install. You can also paste the ready-made client config above.
Does Hush require authentication?
No - the endpoint accepted our unauthenticated MCP initialize when probed on 2026-08-25; you can connect without credentials.
06 · Alternatives to Hush
Alternatives to Hush
Maintained security servers if Hush isn't the fit.
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,102 · 2026-08-24
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 632 · 2026-08-24
- Decionis MCP Server Fail-closed policy gate for AI agent actions, with local evaluation and native pre-tool hooks. ★ 533 · 2026-08-24
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 470 · 2026-08-25
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 409 · 2026-08-23
- Bradesco MCP server for Bradesco - Pix, Cobrança (boleto), Arrecadação, Extrato (OAuth2 + mTLS) ★ 269 · 2026-08-12
Pairs well with
Servers that cover what Hush doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · Janee · Audit · Code Sentinel · Sapiom MCP Server