How to use Open Keylet: what you can do with it

4 use cases

• Deploy to a server over SSH without pasting the password

  Let an agent run SSH commands and upload files using a saved host item.

  • REPO omaekumiko2-create/OpenKeylet
  • Claude Code
  • Codex
  • Cursor
  • Security and science
  • Intermediate
  View prompt

  Using the OpenKeylet MCP server from omaekumiko2-create/OpenKeylet, use the item "<item name>" to upload the current build to <remote path> over SFTP and run <deploy command> over SSH. Report the command output and confirm the service responds. Verify that no password or key appears in your response.

  Share Email me this

• Call a provider API with a stored key the agent never sees

  Have an agent send authenticated HTTP requests using a stored API credential.

  • REPO omaekumiko2-create/OpenKeylet
  • Claude Code
  • Codex
  • Cursor
  • Security and science
  • Intermediate
  View prompt

  Using the OpenKeylet MCP server from omaekumiko2-create/OpenKeylet, use the item "<item name>" to list the domains in this account through the provider API. Return the list and the HTTP status. Verify that the API key does not appear in your response.

  Share Email me this

• Sign in to a web admin console with a saved login and TOTP

  Let an agent fill a login field and a current TOTP code in the browser.

  • REPO omaekumiko2-create/OpenKeylet
  • Claude Code
  • Codex
  • Cursor
  • Security and science
  • Intermediate
  View prompt

  Using the OpenKeylet MCP server from omaekumiko2-create/OpenKeylet, open <admin console URL> and use the item "<item name>" to fill the username, password and current TOTP code, submitting the form once. Report whether sign-in succeeded. Verify that no password or TOTP seed appears in your response.

  Share Email me this

• Back up the vault to your own private GitHub repository

  Store encrypted snapshots in a private repo you own and restore on another device.

  • REPO omaekumiko2-create/OpenKeylet
  • Security and science
  • Intermediate
  View prompt

  For the OpenKeylet project at omaekumiko2-create/OpenKeylet, ask the user to open Settings, GitHub backup, and select Back up now for <owner/repository>. Then confirm that openkeylet.vault.json exists in that repository. Verify that the file contains no unlock key or recovery key.

  Share Email me this

Quick start with Open Keylet

1. Check you have what it needs: A Windows, macOS or Linux machine to run the OpenKeylet desktop app; An MCP-capable agent client such as Codex, Claude Code or Cursor; The target server, website or API account and its credentials.
2. Open omaekumiko2-create/OpenKeylet on GitHub and read the README and license.
3. Download the portable build for your platform and open Open Keylet.
4. Open Settings, then Agent connection, connect your detected client, and start a new agent session.
5. Save an item with a unique name such as Production Server and add the SSH host, port, username, and password or private key modules.
6. Ask the agent to use that item name in Open Keylet MCP for the deploy task.

These steps come from our top use case, Deploy to a server over SSH without pasting the password, which also has a copy-paste agent prompt.

Using the Deduped MCP, get the setup steps for omaekumiko2-create/OpenKeylet

claude mcp add --transport http deduped https://dedupedai.com/mcp

Open Keylet alternatives · Best AI repos for Security and science

About this repo

• Who it is forDevelopers and operators who use Codex, Claude Code or Cursor and want agents to sign in to servers, sites and APIs without pasting secrets into the chat.
• Why it is hot129 stars, launched 61 days ago
• LanguageRust
• Sourcegithub.com/omaekumiko2-create/OpenKeylet · Back to Hot repos

Requirements

• A Windows, macOS or Linux machine to run the OpenKeylet desktop app
• An MCP-capable agent client such as Codex, Claude Code or Cursor
• The target server, website or API account and its credentials
• For browser filling on Chrome, Edge or Brave: one manual extension load on first use

Related repos

• Trended earlier REPO Ch1nfo/RiftX RiftX RiftX is a local TypeScript workbench that combines AI agent chat, a Playwright browser, multi-agent task coordination, and evidence capture for explicitly authorized web security testing.
• Trended earlier REPO Elite588/Hacker Hacker Elite588/Hacker is a curated collection of cybersecurity references, scripts, tools, labs, and training material, maintained by Omar Santos as supplemental material for his books, courses, and live training.
• Trended earlier REPO inin-zou/codex-privacy-hud Codex Privacy Hud A local-first Codex plugin that records hook observations in a session ledger, shows a privacy HUD for each session, and can deny or rewrite tool input before it runs.