Home › Security › q-ring

q-ring

OS keychain secrets for AI coding agents, over MCP.

TypeScript Local macOSWindowsLinux

★ 5 stars Last pushed 2026-11-09 License: AGPL-3.0

View repository → Website →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (npm 0.19.0)

npx -y @i4ctime/[email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "q-ring": {
      "command": "npx",
      "args": [
        "-y",
        "@i4ctime/[email protected]"
      ],
      "env": {
        "QRING_FILE_PASSPHRASE": "<YOUR_VALUE>"
      }
    }
  }
}

QRING_BACKEND — Secret storage backend. Defaults to the OS keychain; set to "file" for headless hosts with no Secret Service (CI, containers).
QRING_FILE_PASSPHRASE secret — Passphrase for the encrypted file backend (AES-256-GCM). Required only when QRING_BACKEND=file — without it the file backend fails closed.
QRING_FILE_BACKEND_PATH — Custom path for the encrypted file store (default: ~/.config/q-ring/file-backend.enc).
QRING_CONFIG_DIR — Directory for q-ring's registries — hooks, entanglement, approvals, canary webhooks, agent memory (default: ~/.config/q-ring).