# key-guard A local MCP server that keeps API keys off Claude's servers. ## Why This Exists When Claude reads a file containing an API key, the raw key content gets sent to Claude's servers. key-guard prevents this by acting as a local middleman — Claude calls a tool, the tool reads the key and makes the API call locally, and only the result is returned to Claude.
key-guard intercepts api key usage by routing authenticated requests through a local mcp server, preventing raw credentials from reaching claude's servers. supports key validation, masked file reads, and authenticated api calls.
