Gopass

MCP server for gopass password management. Gives AI agents secure, on-demand access to credentials stored in your gopass (GPG-encrypted, git-backed) password store.

Prerequisites

• Node.js >= 20
• gopass installed and configured (v1.16+)
• A working gopass store (run gopass ls to verify)

Install

git clone https://github.com/inavhq/gopass-mcp.git
cd gopass-mcp
npm install
npm run build

Claude Code Configuration

Add to your Claude Code MCP settings (~/.claude/settings.json or project .claude/settings.local.json):

{
  "mcpServers": {
    "gopass": {
      "command": "node",
      "args": ["/path/to/gopass-mcp/dist/index.js"]
    }
  }
}

Tools

Tool	Description	Write?
list_secrets	List all secret paths, optionally filtered by folder prefix	No
get_secret	Retrieve a secret's content by path	No
search_secrets	Search for secrets by name	No
generate_password	Generate and store a random password	Yes

Environment Variables

Variable	Default	Description
GOPASS_PATH	gopass	Path to gopass binary

Security

• Uses execFile (not exec) — no shell involved, no injection surface
• Path validation blocks directory traversal (.., absolute paths, ~)
• Secret values are never written to stderr or logs
• No insert_secret or delete_secret — too dangerous for LLM automation

Development

npm test          # Run tests
npm run lint      # ESLint + Prettier check
npm run typecheck # tsc --noEmit
npm run build     # Compile to dist/

License

MIT