MCP-warden AI agents use your API keys without seeing them

mcp-warden is a local-first credential broker for the Model Context Protocol that stores secrets in the OS keychain and lets AI coding agents call high-level tools like proxy_http, with the secret injected server-side so it never enters the agent's context window. Presets define named, scoped actions validated against an allow-list before credential injection, sensitive presets trigger approval prompts, and every action is recorded in a local SQLite audit log. It is installable via cargo or pre-built binaries, and v0.4.0 splits the project into mcp-warden-core and mcp-warden crates and makes the Telegram approval transport selectable.