Local-first MCP password and credential manager for AI agents. Use passwords, API keys, SSH identities, and TOTP without exposing hidden plaintext to the model.
Unlocks once the catalog security scan passes (runs nightly).
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
The deep catalog scan for this skill is still queued. Run an instant dependency check now instead.
# Add to your Claude Code skills
git clone https://github.com/omaekumiko2-create/kruGuides for using ai agents skills like kru.
KRU is a free, open-source, cross-platform password manager, credential vault, and local stdio MCP server for AI agents. It lets MCP clients such as Codex, Claude Code, Cursor, OpenCode, and OpenClaw use saved passwords, API credentials, SSH keys, TOTP codes, and custom secrets while hidden plaintext stays outside the normal model context.
Use KRU when an agent needs to sign in to a website, connect to a server, call an authenticated API, or finish a terminal prompt without asking you to paste a secret into the conversation.
Once KRU is connected, describe the task normally. Include the unique KRU item name for the most reliable match, or simply tell the agent to check KRU when authentication is needed.
| Goal | Example |
|---|---|
| Server task | Use "Production Server" in KRU MCP to deploy the current build and verify the service. |
| Authenticated API | Use "DNS Provider" in KRU MCP to list the domains in this account. |
| Browser sign-in | Open the admin console. When credentials are required, use "Admin Account" in KRU MCP. |
| Automatic lookup | Continue the task. If authentication is required, check KRU first. |
The quoted text is the item name saved in KRU. If you omit it, the agent can inspect KRU's item list and choose a match.
KRU is a small local MCP tool for saving and using credentials without breaking an agent's workflow. The agent controls the task, while KRU performs credential operations locally—filling a focused field, running local or SSH commands, transferring files and directories, or sending authenticated API requests.
KRU stores credentials as independent modules rather than fixed “login / SSH / API” item types. Username, password, API credential, private key, key passphrase, TOTP, host, port, URL, and custom fields can be combined in one item. The available MCP actions are derived automatically from that combination.
There is no KRU account, subscription, cloud vault, or remote MCP service. KRU is free and open source, runs on Windows, macOS, and Linux, and keeps vault data encrypted on the current device. Its local stdio MCP starts only when an agent calls it.
Download and open KRU Choose the portable build for your platform. No registration is required.
Connect your agent Open Settings → Agent connection, connect a detected client, then start a new agent session.
Save an item Give it a unique name and add only the modules you need. You can start from a preset or build the item module by module.
KRU registers a local stdio MCP command. The MCP process starts on demand when the agent calls it.
KRU's Agent connection screen can detect, connect, and repair local configuration for Codex, Claude Code, Cursor, OpenCode, and OpenClaw. Other AI assistants and coding agents can connect through the manual configuration below whenever they support a local stdio MCP server.
| Action | When KRU advertises it | What happens locally |
|---|---|---|
| Fill | The item contains a credential module | KRU writes the selected value into a focused browser, desktop control, or managed terminal |
| SSH | The item contains a password or private key | KRU authenticates locally; the host, port, and username can be saved defaults or supplied for the task |
| File transfer | The item contains a password or private key | KRU recursively uploads or downloads files and directories over SFTP |
| HTTP | The item contains any configured secret | KRU injects built-in authentication or resolves hidden-module placeholders locally |
| Terminal | The agent runs a local command or opens a managed terminal | KRU can substitute hidden modules without returning them to the agent |
An item may advertise more than one action. KRU has no observation, diagnostic, restricted, or execution mode: if ssh_run is available, the agent sends the command the task actually requires.
Every module has its own Agent visibility switch:
The eye and copy controls in the editor are for the local owner. The optional six-digit PIN locks plaintext viewing in the GUI; it does not replace vault encryption and does not disable MCP actions.
Reliable unattended browser filling uses the bundled Chromium extension. KRU writes one selected field into the currently focused control; when the agent explicitly sets submit=true, it can submit that field's form in the same call. It does not inspect the page, choose a field, or export cookies. Chrome, Edge, and Brave require one manual extension load on first use.
KRU supports password and private-key authentication, unrestricted-length commands and output, direct stdin, and recursive SFTP upload/download. Host, port, and username may be saved as defaults or supplied for the current task. Destination parent directories are created automatically and existing file or directory targets are replaced only after a complete temporary copy is ready. KRU does not pin or compare SSH host fingerprints. Authentication plaintext is not returned to the agent.
KRU recognizes common API providers and Basic combinations, and falls back to Bearer Token when no provider matches. A saved service URL is a default and relative-path base, not an Origin restriction; the agent may use any HTTP/HTTPS destination required by the task. Other protocols can place {{kru:module name}} placeholders in the URL, headers, query, JSON/text body, or form values, and KRU resolves them locally. Redirects are followed, responses have no default size limit and may stream directly to a local file, and multipart uploads are supported.
The Settings page includes:
Replacing or upgrading the executable does not remove your vault. KRU intentionally reuses the current OS user's data directory:
| Platform | Vault location |
|---|---|
| Windows | %APPDATA%\mcp-vault\v2 |
| macOS | ~/Library/Application Support/mcp-vault/v2 |
| Linux | ${XDG_DATA_HOME:-~/.local/share}/mcp-vault/v2 |
Exported .mvault packages are encrypted and portable, but they contain their own unlock material for easy import. Protect a backup file as carefully as the original credentials.
Yes. KRU combines a locally encrypted credential vault with an MCP server that agents can call when a task reaches an authentication step. It is designed for AI coding agents, terminal agents, and other local MCP clients.
Not by default. Hidden modules are used locally by KRU and are excluded from MCP responses and normal model context. You can explicitly make an individual module visible when a workflow genuinely requires the value.
KRU supports usernames, passwords, API keys and tokens, SSH private keys and passphrases, TOTP seeds, hosts, ports, service URLs, and custom fields. Modules can be combined freely in one item.
No. KRU is a local-first, account-free secrets manager. The app, vault, MCP server, activity records, and backups remain under your control on the current device.
| Target | Package | Notes |
|---|---|---|
| Windows x64 | .zip |
Portable GUI, tray, desktop input, and |
kru is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by omaekumiko2-create. Local-first MCP password and credential manager for AI agents. Use passwords, API keys, SSH identities, and TOTP without exposing hidden plaintext to the model. It has 88 GitHub stars.
kru's catalog security scan is still queued. You can run an instant dependency and prompt-injection check now with the "Scan for vulnerabilities" button above.
Clone the repository with "git clone https://github.com/omaekumiko2-create/kru" and add it to your Claude Code skills directory (see the Installation section above).
kru is primarily written in Rust. It is open-source under omaekumiko2-create on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh kru against similar tools.
No comments yet. Be the first to share your thoughts!