io.github.Trusty-Squire/mcp — Model Context Protocol (MCP) Server

Trusty Squire is an MCP credential broker that signs your AI agent up to SaaS developer tools, operating within a signed spending mandate. It targets workflows involving API keys, website login, and website signup, with support for model-context-protocol integration and related automation.

🛠️ Key Features

Credential brokering for AI agents
Signs agent sign-ups to SaaS dev tools
Enforces a signed spending mandate
Uses secrets management for credentials
Focus on API keys, website-login, and website-signup

🚀 Use Cases

Browser automation that requires authenticated access
Coding agents that need to register with SaaS dev tools
Managing secrets for integrations requiring API keys
Automating website signup flows for developer services

⚡ Developer Benefits

Fits MCP-based model-context-protocol setups
Centralizes credential handling for agent automation
Provides a mechanism bounded by signed spending limits

⚠️ Limitations

Described functionality is limited to agent sign-up credential brokering within a signed spending mandate

What you can do

Ask your coding agent to:

Get an API key. "Sign me up for Pinecone and get an API key." It signs up, verifies the email, creates the key, and stores it in your vault instead of the chat.

Sign in anywhere. It uses your Google or GitHub account on any site that offers it.

Buy things. "Order one Glow Serum from whitejade.xyz." You approve the purchase once, and your card number never reaches the agent.

Call APIs with stored keys. The agent uses a saved key without ever seeing it.

Finish setup. OAuth apps, dashboards, and verification steps, end to end.

Install

bash

npx -y @trusty-squire/mcp@latest connect

Sign in with Google or GitHub, and Trusty Squire adds itself to your coding agent. Restart the agent and ask for what you need.

To pick the agent yourself:

bash

npx -y @trusty-squire/mcp@latest connect --target=codex

On Linux, connect registers and starts a systemd user service; on macOS, a launchd user agent. A working user service manager is required. MCP clients connect to that broker and report "broker not running" after bounded retries if it is stopped. Installer-written client entries use @trusty-squire/mcp@latest.

Works with Claude Code, Codex, Cursor, OpenCode, Goose, Cline, Continue, and Hermes.

io.github.Trusty-Squire/mcp