Demipass MCP server
{
"mcpServers": {
"dustforge-demipass": {
"command": "npx",
"args": [
"-y",
"demipass@latest"
],
"env": {
"DEMIPASS_URL": "https://...",
"DEMIPASS_TOKEN": "<demipass_token>",
"BUOY_URL": "https://...",
"BUOY_TOKEN": "<buoy_token>"
}
}
}
}{
"mcpServers": {
"dustforge-demipass": {
"command": "npx",
"args": [
"-y",
"demipass@latest"
],
"env": {
"DEMIPASS_URL": "https://...",
"DEMIPASS_TOKEN": "<demipass_token>",
"BUOY_URL": "https://...",
"BUOY_TOKEN": "<buoy_token>"
}
}
}
}{
"mcpServers": {
"dustforge-demipass": {
"command": "npx",
"args": [
"-y",
"demipass@latest"
],
"env": {
"DEMIPASS_URL": "https://...",
"DEMIPASS_TOKEN": "<demipass_token>",
"BUOY_URL": "https://...",
"BUOY_TOKEN": "<buoy_token>"
}
}
}
}{
"servers": {
"dustforge-demipass": {
"command": "npx",
"args": [
"-y",
"demipass@latest"
],
"env": {
"DEMIPASS_URL": "${input:demipass_url}",
"DEMIPASS_TOKEN": "${input:demipass_token}",
"BUOY_URL": "${input:buoy_url}",
"BUOY_TOKEN": "${input:buoy_token}"
}
}
},
"inputs": [
{
"id": "demipass_url",
"type": "promptString",
"description": "Demipass url",
"password": true
},
{
"id": "demipass_token",
"type": "promptString",
"description": "Demipass token",
"password": true
},
{
"id": "buoy_url",
"type": "promptString",
"description": "Buoy url",
"password": true
},
{
"id": "buoy_token",
"type": "promptString",
"description": "Buoy token",
"password": true
}
]
}{
"mcpServers": {
"dustforge-demipass": {
"command": "npx",
"args": [
"-y",
"demipass@latest"
],
"env": {
"DEMIPASS_URL": "https://...",
"DEMIPASS_TOKEN": "<demipass_token>",
"BUOY_URL": "https://...",
"BUOY_TOKEN": "<buoy_token>"
}
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsoninstall npx -y demipassversion 2.5.0
Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context.
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.