MCPLow riskUnclaimed

q-ring

OS keychain secrets for AI coding agents, over MCP.

I4cTimei4ctime/q-ring★ 4Updated Sep 27, 2026

server.json

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "io.github.I4cTime/q-ring",
  "description": "OS keychain secrets for AI coding agents, over MCP.",
  "title": "q-ring",
  "repository": {
    "url": "https://github.com/I4cTime/q-ring",
    "source": "github"
  },
  "version": "0.18.0",
  "websiteUrl": "https://qring.i4c.studio",
  "icons": [
    {
      "src": "https://qring.i4c.studio/assets/icon-192.png",
      "mimeType": "image/png",
      "sizes": [
        "192x192"
      ]
    },
    {
      "src": "https://qring.i4c.studio/assets/icon-512.png",
      "mimeType": "image/png",
      "sizes": [
        "512x512"
      ]
    }
  ],
  "packages": [
    {
      "registryType": "npm",
      "identifier": "@i4ctime/q-ring",
      "version": "0.18.0",
      "runtimeHint": "npx",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "description": "Secret storage backend. Defaults to the OS keychain; set to \"file\" for headless hosts with no Secret Service (CI, containers).",
          "default": "keyring",
          "choices": [
            "keyring",
            "file"
          ],
          "name": "QRING_BACKEND"
        },
        {
          "description": "Passphrase for the encrypted file backend (AES-256-GCM). Required only when QRING_BACKEND=file — without it the file backend fails closed.",
          "isSecret": true,
          "name": "QRING_FILE_PASSPHRASE"
        },
        {
          "description": "Custom path for the encrypted file store (default: ~/.config/q-ring/file-backend.enc).",
          "format": "filepath",
          "name": "QRING_FILE_BACKEND_PATH"
        },
        {
          "description": "Directory for q-ring's registries — hooks, entanglement, approvals, canary webhooks, agent memory (default: ~/.config/q-ring).",
          "format": "filepath",
          "name": "QRING_CONFIG_DIR"
        }
      ]
    }
  ]
}

Permissions

DeclaredDetected
Runs code—node
Installs—npm:@i4ctime/q-ring@0.18.0
Runs install scripts—None
NetworkNoneNone
Needs credentialsQRING_FILE_PASSPHRASEQRING_FILE_PASSPHRASE
Outside the workspace—None
Agent tools—None

Checks

Low risk · Nothing worth a warning was found.

Not reviewed by a person · Checked by rules; the model review is not switched on yet.

Versions

  1. #10.18.0latestOct 7, 2026