Credentials. The agent can run commands on a live server with the saved item, so save only hosts the agent should reach.
Who it is forA developer or ops engineer whose agent must deploy a build to a server that needs a password or private key.
The problemAgents stall on SSH prompts, and pasting server passwords or keys into chat exposes them.
The outcomeThe agent deploys the build and verifies the service while the password or key stays hidden from the model.
What you need first
- A Windows, macOS or Linux machine to run the OpenKeylet desktop app
- An MCP-capable agent client such as Codex, Claude Code or Cursor
- The target server, website or API account and its credentials
- For browser filling on Chrome, Edge or Brave: one manual extension load on first use
Steps
- Download the portable build for your platform and open Open Keylet.
- Open Settings, then Agent connection, connect your detected client, and start a new agent session.
- Save an item with a unique name such as Production Server and add the SSH host, port, username, and password or private key modules.
- Ask the agent to use that item name in Open Keylet MCP for the deploy task.
- Review the local activity records to confirm which client requested which action.
Prompt for your agent
Using the OpenKeylet MCP server from omaekumiko2-create/OpenKeylet, use the item "<item name>" to upload the current build to <remote path> over SFTP and run <deploy command> over SSH. Report the command output and confirm the service responds. Verify that no password or key appears in your response.
Caveat. Open Keylet does not pin or compare SSH host fingerprints, so you must verify the server identity yourself.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for omaekumiko2-create/OpenKeylet and "Deploy to a server over SSH without pasting the password"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer