vault-ask

MCP server that lets the agent request API keys and passwords from you through an end-to-end encrypted one-time link and pass them to exactly one command or file, without the value ever entering the chat or context.