io.github.sathergate/lockbox
Encrypted secrets for Next.js. AES-256-GCM with no vault needed.
MCP server · by sathergate
About
io.github.sathergate/lockbox is an MCP server published by sathergate. Marketplaces we read that list it: 1 (Official MCP Registry). We first saw it on 2026-10-11 and have recorded no change since. As of our marketplace pass on 2026-10-12.
What it asks for
- Runs on your machine
None of the marketplaces we read publishes its tools or the settings it asks for.
What it declares, asks for and runs, in full
Only install plugins from developers you trust. We list what marketplaces publish and do not test plugins.
Connect
Commands and configs built only from what its marketplaces declare. We do not run them for you and do not test plugins.
As a local MCP server: npm package
Built from what Official MCP Registry declares.
claude mcp add --transport stdio lockbox -- npx -y vaultbox[mcp_servers.lockbox]
command = "npx"
args = ["-y", "vaultbox"]{
"mcpServers": {
"lockbox": {
"command": "npx",
"args": [
"-y",
"vaultbox"
]
}
}
}We do not store launch arguments. If the server needs any, its own documentation names them.
Where it is published
| Marketplace | Status | Version | Figures | Verified | First seen |
|---|---|---|---|---|---|
| Official MCP Registry (Open the registry record) | Listed | 0.1.1 | Forks (GitHub): 0 Stars (GitHub): 107 |
Not marked |
Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.
What changed
Nothing has moved on this plugin since we started watching it.
Possibly the same plugin
Listings that share a signal with this one but not enough for us to treat them as the same product.
Similar plugins
Products whose own names, descriptions, tools and skills are closest in meaning to this one, on every marketplace we read. Closeness is ranked within this list only.
-
infisical-mcp io.github.mrfentmen/infisical-mcp
Infisical API: manage secrets via universal auth.
-
Encrypted store for API keys and database URLs your code needs. Use them without reading them.
-
Secure environment variable management with Varlock for secrets, API keys, credentials, and sensitive configuration.
-
Encrypted env variables manager with zero-leak capabilities.
-
securecode io.github.juanisidoro/securecode
Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.
-
wundervault-mcp io.github.wundervault/wundervault-mcp
Zero-knowledge MCP secrets vault for AI agents: secrets injected at runtime, never seen by the model
-
prophetkey-mcp io.github.LBZ558/prophetkey-mcp
ProphetKey MCP bridge - encrypted local-first API key vault for AI agents, keys never exposed
-
AI agents use your Obsidian secrets by name — values never reach their context.
-
secenv-mcp io.github.chirag127/secenv-mcp
Centralized secrets manager MCP server. Generate .env files, rotate keys, sync to GitHub Actions.
-
Encrypted secrets vault for AI agents — secrets resolved at runtime, never seen by LLMs.
Similar plugins by marketplace
The same question asked of one marketplace at a time: is there an analog of this plugin there?
Has a listing on Claude Code: claude-plugins-community (5)
-
Secure environment variable management with Varlock for secrets, API keys, credentials, and sensitive configuration.
-
Manage GPG-encrypted environment secrets from Claude Code - a secure alternative to plaintext .env files. Store, retrieve, share, and revoke secrets in `dotsecenv` vaults where…
-
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
-
Scan your codebase for exposed secrets and API keys, generate .env templates from environment variable usage, validate .env files against .env.example, and rotate secrets. Keeps…
-
Secure MCP servers with OAuth 2.1, token introspection, dynamic client registration, and CIMD so AI agents can call your MCP tools with verified identities
Has a listing on Claude Code: claude-plugins-official (5)
-
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
-
WorkOS integration skills for AuthKit, SSO, Directory Sync, RBAC, Vault, Audit Logs, migrations, and API references.
-
Skills for the Cloudflare developer platform: Workers, Durable Objects, Agents SDK, MCP servers, Wrangler CLI, and web performance.
-
Appwrite tools for Claude Code, including SDK skills, Appwrite MCP servers, and deployment commands.
-
Build and deploy Base44 full-stack apps with CLI project management and JavaScript/TypeScript SDK development skills
Has a listing on Claude: knowledge-work-plugins (5)
-
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
-
Build and deploy Base44 full-stack apps with CLI project management and JavaScript/TypeScript SDK development skills
-
Deploy, debug, and monitor applications on Render. Includes skills, an agent, slash commands, and a render.yaml validation hook.
-
Build and deploy on Val Town. Bundles the Val Town MCP server and platform skills (HTTP vals, cron/intervals, SQLite, email, OAuth, React UI, third-party integrations, templates).
-
An authenticated hosted MCP server that accesses your PlanetScale organizations, databases, branches, schema, and Insights data. Query against your data, surface slow queries, and…
Has a listing on Codex: openai-curated (openai/plugins) (5)
-
Cloudflare platform plugin with curated skills for Workers, Wrangler, and Agents SDK plus the official Cloudflare API MCP server.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Manage Supabase projects directly through ChatGPT. Execute SQL queries on PostgreSQL databases, design and modify table schemas, deploy serverless edge functions, and configure…
-
Build web apps with frontend asset design, browser testing, UI components, payments, and database guidance.
-
Comprehensive skill for the entire Temporal lifecycle — developing applications, using the Temporal CLI, running and managing Temporal Server, and working with Temporal Cloud.
Has a listing on Community GitHub marketplaces (5)
-
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
-
Skills for the Cloudflare developer platform: Workers, Durable Objects, Agents SDK, MCP servers, Wrangler CLI, and web performance.
-
4da-mcp-server io.github.4DA-Systems/4da-mcp-server
Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.
-
HTTP/REST client with saved collections, env secrets, and SSRF-safe host allowlisting.
-
Blocks Claude Code from writing or committing leaked secrets.
Has a listing on Copilot CLI: github/awesome-copilot (5)
-
Vercel deployment platform integration. Manage deployments, check build status, access logs, configure domains, and control your frontend infrastructure directly from Claude Code.
-
netlify
Netlify platform skills covering functions, edge functions, blobs, database, identity, image CDN, forms, config, CLI, frameworks, caching, AI Gateway, and deployment — plus the…
-
Interactive GitHub Copilot canvas for discovering, connecting, and managing hosted MCP servers from an Azure Connector Namespace.
-
Transform Claude into an Azure expert. This plugin integrates the Azure MCP server and specialized Azure skills to move beyond generic advice. It enables Claude to perform…
-
Complete toolkit for building Model Context Protocol (MCP) servers in TypeScript/Node.js using the official SDK. Includes instructions for best practices, a prompt for generating…
Has a listing on Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
code-apps-preview
Build and deploy Power Apps code apps using React, Vite, and Power Platform connectors.
-
Build Power Apps Canvas Apps using the Canvas Authoring MCP server.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
mobile-app
Build and deploy Power Apps code apps for mobile using Expo (React Native), with native device functionality and Power Platform connectors
Has a listing on Cursor: cursor/plugins (5)
-
Build apps, scripts, and automations with the TypeScript SDK.
-
Skills for building on the Cursor Origin API. Fetch the live spec first, then follow the Origin rules for credentials, scopes, webhooks, paging, and errors. Includes a skill that…
-
Fan large tasks out across parallel cloud agents with planners, workers, verifiers, and structured handoffs.
-
Inspect and manage feature gates, experiments, dynamic configs, and metrics.
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
Has a listing on Docker MCP Catalog (5)
-
next-devtools-mcp is a Model Context Protocol (MCP) server that provides Next.js development tools and utilities for AI coding assistants.
-
Give your AI agents trusted access to the full Postman platform.
-
Heroku Platform MCP Server using the Heroku CLI.
-
npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcp
Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
Has a listing on Official MCP Registry (5)
-
infisical-mcp io.github.mrfentmen/infisical-mcp
Infisical API: manage secrets via universal auth.
-
Encrypted store for API keys and database URLs your code needs. Use them without reading them.
-
Encrypted env variables manager with zero-leak capabilities.
-
securecode io.github.juanisidoro/securecode
Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.
-
wundervault-mcp io.github.wundervault/wundervault-mcp
Zero-knowledge MCP secrets vault for AI agents: secrets injected at runtime, never seen by the model
Found by meaning, not by shared code or a shared repository: similar plugins stay separate products, and this is not a review or a recommendation.
Is this your plugin?
Prove you maintain it with a file in its repository, a file on your domain or a DNS record. You get alerts when a marketplace lists it, drops it, changes its verified mark or what it asks for, and can put its remote endpoint on monitoring as a web service.
Data comes from the Official MCP Registry (registry.modelcontextprotocol.io), CC0 1.0. Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.