Trusty Squire
Coding agent signs up for SaaS and vaults the API keys write-only: never in .env or agent context.
Links
README
From the repo.
Trusty Squire
Empower agents with auth and payments.
What you can do
Ask your coding agent to:
- Get an API key. "Sign me up for Pinecone and get an API key." It signs up, verifies the email, creates the key, and stores it in your vault instead of the chat.
- Sign in anywhere. It uses your Google or GitHub account on any site that offers it.
- Buy things. "Order one Glow Serum from whitejade.xyz." You approve the purchase once, and your card number never reaches the agent.
- Call APIs with stored keys. The agent uses a saved key without ever seeing it.
- Finish setup. OAuth apps, dashboards, and verification steps, end to end.
Install
npx @trusty-squire/mcp connect
Sign in with Google or GitHub, and Trusty Squire adds itself to your coding agent. Restart the agent and ask for what you need.
To pick the agent yourself:
npx @trusty-squire/mcp connect --target=codex
Works with Claude Code, Codex, Cursor, OpenCode, Goose, Cline, Continue, and Hermes.
Config for your environment
Replace {MCP_ENDPOINT_URL} with this MCP’s endpoint URL (from its repo or docs above). No API key — you connect directly.
Tool
OS
Config file: ~/.cursor/mcp.json
{
"mcpServers": {
"mcp-server": {
"url": "{MCP_ENDPOINT_URL}"
}
}
}Paste into mcpServers in the config file. Restart Cursor after saving.
If this MCP is also published on mcpchannel.ai, you can subscribe from Browse and use the gateway config there instead.