mcp-warden is a local MCP credential broker so your coding agent never sees your API keys
Shown on HN Oct 27, the Rust, Apache-2.0 tool keeps secrets in your OS keychain and lets Claude Code, Cursor, Codex or Cline call APIs, SSH or databases only through scoped presets, checking an allow-list before injecting the credential and returning just the result. Sensitive presets can require an approval prompt, and every call lands in a local SQLite audit log (HN).