OS keychain secrets for AI coding agents, over MCP. Native vault storage (macOS Keychain, Linux Secret Service, Windows Credential Vault), policy-governed access, audit log — CLI + 44 MCP tools.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add q-ring --env QRING_FILE_PASSPHRASE='<QRING_FILE_PASSPHRASE>' -- npx -y @i4ctime/q-ring~/.codex/config.toml
[mcp_servers.q-ring]
command = "npx"
args = ["-y", "@i4ctime/q-ring"]
env = { QRING_FILE_PASSPHRASE = "<QRING_FILE_PASSPHRASE>" }
# codex mcp add q-ring --env QRING_FILE_PASSPHRASE='<QRING_FILE_PASSPHRASE>' -- npx -y @i4ctime/q-ring~/.cursor/mcp.json
{
"mcpServers": {
"q-ring": {
"command": "npx",
"args": [
"-y",
"@i4ctime/q-ring"
],
"env": {
"QRING_FILE_PASSPHRASE": "<QRING_FILE_PASSPHRASE>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"q-ring": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@i4ctime/q-ring"
],
"env": {
"QRING_FILE_PASSPHRASE": "<QRING_FILE_PASSPHRASE>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"q-ring": {
"command": "npx",
"args": [
"-y",
"@i4ctime/q-ring"
],
"env": {
"QRING_FILE_PASSPHRASE": "<QRING_FILE_PASSPHRASE>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"q-ring": {
"command": "npx",
"args": [
"-y",
"@i4ctime/q-ring"
],
"env": {
"QRING_FILE_PASSPHRASE": "<QRING_FILE_PASSPHRASE>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"q-ring": {
"command": "npx",
"args": [
"-y",
"@i4ctime/q-ring"
],
"env": {
"QRING_FILE_PASSPHRASE": "<QRING_FILE_PASSPHRASE>"
}
}
}
}Environment variables
QRING_FILE_PASSPHRASE
Replace the placeholders with your own credentials and keep them out of version control.