MCP低风险未认领
demipass
Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context.
dustforge.comdustforge.com/demipass
server.json
{
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
"name": "com.dustforge/demipass",
"description": "Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context.",
"repository": {
"url": "https://github.com/bildow/demipass",
"source": "github"
},
"version": "2.5.0",
"websiteUrl": "https://dustforge.com",
"packages": [
{
"registryType": "npm",
"identifier": "demipass",
"version": "2.5.0",
"transport": {
"type": "stdio"
},
"environmentVariables": [
{
"description": "Dustforge JWT bearer token. Self-onboard at https://dustforge.com/.well-known/silicon or mint via the 2FA email flow.",
"isRequired": true,
"isSecret": true,
"name": "DEMIPASS_TOKEN"
},
{
"description": "API base URL (default https://api.dustforge.com)",
"name": "DEMIPASS_URL"
}
]
}
]
}权限
声明检测
运行代码—
node安装—
npm:demipass@2.5.0安装时运行脚本—无
网络无无
需要的凭据
DEMIPASS_TOKENDEMIPASS_TOKEN工作区外的路径—无
智能体工具—无
检查
低风险 · 没有发现需要提醒的地方。
未经人工审核 · 已做规则检查;模型审核尚未开启。
版本
- #12.5.0最新2026年10月7日
demipass在 Codeg 中打开