kru

KRU is a free, open-source, cross-platform password manager, credential vault, and local stdio MCP server for AI agents. It lets MCP clients such as Codex, Claude Code, Cursor, OpenCode, and OpenClaw use saved passwords, API credentials, SSH keys, TOTP codes, and custom secrets while hidden plaintext stays outside the normal model context.

Use KRU when an agent needs to sign in to a website, connect to a server, call an authenticated API, or finish a terminal prompt without asking you to paste a secret into the conversation.

Use KRU like this

Once KRU is connected, describe the task normally. Include the unique KRU item name for the most reliable match, or simply tell the agent to check KRU when authentication is needed.

The quoted text is the item name saved in KRU. If you omit it, the agent can inspect KRU's item list and choose a match.

What KRU does

KRU is a small local MCP tool for saving and using credentials without breaking an agent's workflow. The agent controls the task, while KRU performs credential operations locally—filling a focused field, running local or SSH commands, transferring files and directories, or sending authenticated API requests.

KRU stores credentials as independent modules rather than fixed “login / SSH / API” item types. Username, password, API credential, private key, key passphrase, TOTP, host, port, URL, and custom fields can be combined in one item. The available MCP actions are derived automatically from that combination.

There is no KRU account, subscription, cloud vault, or remote MCP service. KRU is free and open source, runs on Windows, macOS, and Linux, and keeps vault data encrypted on the current device. Its local stdio MCP starts only when an agent calls it.

Start in three steps

1. Download and open KRU Choose the portable build for your platform. No registration is required.

2. Connect your agent Open Settings → Agent connection, connect a detected client, then start a new agent session.

3. Save an item Give it a unique name and add only the modules you need. You can start from a preset or build the item module by module.

KRU registers a local stdio MCP command. The MCP process starts on demand when the agent calls it.

MCP client compatibility

KRU's Agent connection screen can detect, connect, and repair local configuration for Codex, Claude Code, Cursor, OpenCode, and OpenClaw. Other AI assistants and coding agents can connect through the manual configuration below whenever they support a local stdio MCP server.

One item, several actions

An item may advertise more than one action. KRU has no observation, diagnostic, restricted, or execution mode: if ssh_run is available, the agent sends the command the task actually requires.

Plaintext visibility is per module

Every module has its own Agent visibility switch:

• Hidden — the default for credential modules. KRU can use the value, but it is not included in MCP responses.
• Visible — the value may be returned to the agent only after you explicitly enable the switch.
• TOTP — KRU derives the current six-digit code; the permanent seed is never returned.

The eye and copy controls in the editor are for the local owner. The optional six-digit PIN locks plaintext viewing in the GUI; it does not replace vault encryption and does not disable MCP actions.

Built for local use

Browser, SSH, and API behavior

Browser filling

Reliable unattended browser filling uses the bundled Chromium extension. KRU writes one selected field into the currently focused control; when the agent explicitly sets submit=true, it can submit that field's form in the same call. It does not inspect the page, choose a field, or export cookies. Chrome, Edge, and Brave require one manual extension load on first use.

SSH

KRU supports password and private-key authentication, unrestricted-length commands and output, direct stdin, and recursive SFTP upload/download. Host, port, and username may be saved as defaults or supplied for the current task. Destination parent directories are created automatically and existing file or directory targets are replaced only after a complete temporary copy is ready. KRU does not pin or compare SSH host fingerprints. Authentication plaintext is not returned to the agent.

HTTP APIs

KRU recognizes common API providers and Basic combinations, and falls back to Bearer Token when no provider matches. A saved service URL is a default and relative-path base, not an Origin restriction; the agent may use any HTTP/HTTPS destination required by the task. Other protocols can place {{kru:module name}} placeholders in the URL, headers, query, JSON/text body, or form values, and KRU resolves them locally. Redirects are followed, responses have no default size limit and may stream directly to a local file, and multipart uploads are supported.

Local app controls

The Settings page includes:

• desktop shortcut (where supported) and launch-at-login controls;
• close-to-tray or quit behavior;
• optional six-digit local PIN;
• Agent connection and repair;
• Browser Bridge pairing;
• encrypted backup import/export and direct access to the local data folder.

Replacing or upgrading the executable does not remove your vault. KRU intentionally reuses the current OS user's data directory:

Exported .mvault packages are encrypted and portable, but they contain their own unlock material for easy import. Protect a backup file as carefully as the original credentials.

Common questions

Is KRU a password manager for AI agents?

Yes. KRU combines a locally encrypted credential vault with an MCP server that agents can call when a task reaches an authentication step. It is designed for AI coding agents, terminal agents, and other local MCP clients.

Does KRU give my password to the LLM?

Not by default. Hidden modules are used locally by KRU and are excluded from MCP responses and normal model context. You can explicitly make an individual module visible when a workflow genuinely requires the value.

What credentials can KRU store and use?

KRU supports usernames, passwords, API keys and tokens, SSH private keys and passphrases, TOTP seeds, hosts, ports, service URLs, and custom fields. Modules can be combined freely in one item.

Does KRU require a cloud account?

No. KRU is a local-first, account-free secrets manager. The app, vault, MCP server, activity records, and backups remain under your control on the current device.

Downloads