github JavaScript re-analysis due

AInoAKARI/keymaster-mcp

Name: AInoAKARI/keymaster-mcp
Author: AInoAKARI

Read-only runtime secret retrieval from HashiCorp Vault via Keymaster for autonomous AI agents.

maintainer: AInoAKARI
license: —
first seen: 2026-06-03
last seen: 2026-08-29
releases · 30d: 0
short id

AInoAKARI/keymaster-mcp is an MCP server distributed on github, maintained by AInoAKARI, tracked here since June 2026. It has shipped 0 releases and exposes 6 tools. Tools include get_secret, healthcheck, list_secrets, list_services, rotate_secret, secret_status. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 6 tools appear to reach filesystem and network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →

tools 6