black-vault

security MCP Server

Open-source API key firewall for AI agents. Proxy gateway with per-token rate limits, budget caps, model restrictions, and instant kill switch. Agents never see the real key.

VerifiedInstall Ready
securitysecurity
3 views7 stars1 forksv0.1.0MIT

Why This Matters

Discovered via github-topic:mcp and last synced 2mo ago.

VerifiedInstall Ready
Source
github-topic:mcp
Stars
7
Last synced
2mo ago
Install
Instructions detected

Install

1. Install the package

npm install black-vault
27
Tools
0
Resources
0
Prompts
Standard I/O
Transport

Available Tools (27)

chat

Runs a completion on any allowed model (`gpt-*`, `claude-*`, `gemini-*`, open-source via Nebius). BlackVault injects the real key, enforces budget/rate/model limits, and audits the call.

NEXT_PUBLIC_APP_URL

Your deployment URL

API

tRPC 11

Variable

Source

429

500 RPD for a batch agent

Auth

Clerk

OpenAI

None (native)

CLERK_SECRET_KEY

[Clerk](https://clerk.com)

402

$5.00 for a demo agent

Encryption

AES-256-GCM (Node.js crypto)

Anthropic

OpenAI ↔ Anthropic Messages API

DATABASE_URL

[Neon](https://neon.tech)

403

Only your server IP

Charts

Recharts

Scenario

How BlackVault helps

Control

What it does

Database

Neon Postgres + Drizzle ORM

NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY

[Clerk](https://clerk.com)

Styling

Tailwind CSS v4 + Framer Motion

Nebius

None (OpenAI-compatible)

UPSTASH_REDIS_REST_URL

[Upstash](https://upstash.com)

Tool

What it does

list_models

Lists the models this token may use, across your vaulted provider keys.

UPSTASH_REDIS_REST_TOKEN

[Upstash](https://upstash.com)

Layer

Technology

VAULT_MASTER_KEY

`openssl rand -hex 32`

Framework

Next.js 16 + React 19 + TypeScript