← knowledge.oriz.in

MCP no-key in repo, keyed in Smithery

rule Fri Jun 26 2026 00:00:00 GMT+0000 (Coordinated Universal Time) mcpsmitheryapi-keyssecuritytool-config

MCP no-key in repo, keyed in Smithery

Rule

No-API-key MCP servers → committed to this repo as claude mcp add config entries in scripts/ or .claude.json snippets
Keyed/auth MCP servers → installed via Smithery CLI (npx @smithery/cli install <server>) into the chirag127 toolbox (Smithery-hosted, not committed)
Never commit API keys, tokens, or env secrets into any repo file

Rationale

This repo is public (chirag127/workspace)
.env is gitignored — only .env.example with documentation blocks is committed
Smithery handles authentication server-side; keys stay in Smithery's vault
When cloning fresh: git clone gets all no-key MCPs + instructions; keyed MCPs need Smithery login

Current no-key MCPs in repo config

MCP	Type	Source
searxng	Web search	npx mcp-searxng (baresearch.org)
duckduckgo	Web search	npx duckduckgo-mcp-server
open-websearch	Web search (8 engines)	npx open-websearch
playwright	Browser automation	npx @playwright/mcp
fetch	URL fetch	uvx mcp-server-fetch
github	GitHub API	Docker (uses GITHUB_PERSONAL_ACCESS_TOKEN from .env)

Keyed MCPs in Smithery toolbox

These live in the chirag127 Smithery endpoint, NOT in repo config. Install via: npx @smithery/cli install <server> --client claude