Credentials. The stored credential can reach any HTTP or HTTPS destination the agent chooses, so review the task scope before you run it.
Who it is forA developer or account admin whose agent must list or change resources in a provider such as a DNS host.
The problemAgents need API keys to work with a provider, but keys pasted into chat leak into logs and context.
The outcomeThe agent completes the API task and reports results while the credential stays local to Open Keylet.
What you need first
- A Windows, macOS or Linux machine to run the OpenKeylet desktop app
- An MCP-capable agent client such as Codex, Claude Code or Cursor
- The target server, website or API account and its credentials
- For browser filling on Chrome, Edge or Brave: one manual extension load on first use
Steps
- Download the portable build for your platform and open Open Keylet.
- Open Settings, then Agent connection, connect your detected client, and start a new agent session.
- Save an item such as DNS Provider with an API credential module and the service URL, which is saved as a default.
- Ask the agent to use that item name in Open Keylet MCP to run the API task.
- Check the agent output to confirm the request succeeded.
Prompt for your agent
Using the OpenKeylet MCP server from omaekumiko2-create/OpenKeylet, use the item "<item name>" to list the domains in this account through the provider API. Return the list and the HTTP status. Verify that the API key does not appear in your response.
Caveat. A saved service URL is a default and relative-path base, not an Origin restriction, so the agent may call other destinations.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for omaekumiko2-create/OpenKeylet and "Call a provider API with a stored key the agent never sees"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer