A standalone, boundary-only secret broker — reference a secret by name, the value is injected only at the execution boundary, never inside an LLM or agent context. Free and open source.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add portunus -- docker run -i --rm ghcr.io/mdostal/portunus:0.34.0~/.codex/config.toml
[mcp_servers.portunus]
command = "docker"
args = ["run", "-i", "--rm", "ghcr.io/mdostal/portunus:0.34.0"]
# codex mcp add portunus -- docker run -i --rm ghcr.io/mdostal/portunus:0.34.0~/.cursor/mcp.json
{
"mcpServers": {
"portunus": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/mdostal/portunus:0.34.0"
]
}
}
}.vscode/mcp.json
{
"servers": {
"portunus": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/mdostal/portunus:0.34.0"
]
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"portunus": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/mdostal/portunus:0.34.0"
]
}
}
}claude_desktop_config.json
{
"mcpServers": {
"portunus": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/mdostal/portunus:0.34.0"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"portunus": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/mdostal/portunus:0.34.0"
]
}
}
}