Kdbx MCP Server

kdbx keeps a project's secrets in a per-project, per-environment KeePassXC vault (KDBX4, unlocked by a key file only - no master password) and gets them into the tools that need them without kdbx ever printing them into a transcript, a log file, or your shell history.

People who need security tools inside Claude, Cursor, VS Code, or another MCP client. The project is written in Go.

VERIFIED ACTIVE

LAST COMMIT 2026-08-20 · ★ 4 · #151 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

MIT · Go servers · how we verify → /methodology

01 · Install Kdbx

before you install - you'll need

The README does not document required environment variables for a basic install.

Docker

docker run -i --rm ghcr.io/yarrasys/kdbx:0.3.1

Claude Desktop - add to config

{
  "mcpServers": {
    "yarrasys-kdbx": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/yarrasys/kdbx:0.3.1"
      ]
    }
  }
}

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as container (OCI image) - can be sandboxed away from your filesystem

repo age created 2026-07-25 - young repo, little track record yet

license MIT - declared in the repository

registry namespace io.github.yarrasys is GitHub-verified and matches the repo owner

03 · What Kdbx can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.3.1 · 2026-08-03

show kdbx's own message after the kind (#27) (@nabsha) · prepare v0.3.1 (self-explaining error lines) (#28) (@nabsha)

v0.3.0 · 2026-08-03

mcp-publish is dispatch-only; the release trigger could never fire (#23) (@nabsha) · bootstrap a project with --here, or wherever no pointer exists (#24) (@nabsha) · confirm before using a parent directory's pointer…

v0.2.1 · 2026-08-01

drop the version field from the OCI registry package (#21) (@nabsha) · fix MCP registry publishing, make its failures loud and retryable (#20) (@nabsha) · prepare v0.2.1 (MCP registry image label) (#22) (@nabsha)

04 · Who maintains Kdbx

kdbx is maintained by yarrasys. It's the only MCP server we track from this author; the repo dates to Jul 2026.

05 · Facts

repository: github.com/yarrasys/kdbx
website: https://github.com/yarrasys/kdbx#agent-and-editor-integration
category: security - ranked #151 of 182 actively-maintained security servers as of 2026-08-25.
release cadence: 8 releases in the last 90 days (latest 2026-08-03)
registry: io.github.yarrasys/kdbx (active, first published 2026-08-01 · 3 versions)
packages: oci:ghcr.io/yarrasys/kdbx:0.3.1

06 · Kdbx FAQ

What is Kdbx?

Is Kdbx still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-20 and it shipped 8 releases in the last 90 days. We re-verify nightly.

How do I install Kdbx?

Run `docker run -i --rm ghcr.io/yarrasys/kdbx:0.3.1`. The README does not document required environment variables for a basic install. You can also paste the ready-made client config above.

07 · Alternatives to Kdbx

Alternatives to Kdbx

Maintained security servers if Kdbx isn't the fit.

Pairs well with

Servers that cover what Kdbx doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Webcheck · Pyobfus MCP · Code Factory · VMware NSX Security · 1Claw Vault

More Go MCP servers · Tela · Web Researcher MCP · Seamless · ToolTrust Scanner · Dibs · see all