Hush MCP server
{
"mcpServers": {
"royashbrook-hush": {
"type": "http",
"url": "https://royashbrook.com/hush"
}
}
}{
"mcpServers": {
"royashbrook-hush": {
"type": "http",
"url": "https://royashbrook.com/hush"
}
}
}{
"mcpServers": {
"royashbrook-hush": {
"type": "http",
"url": "https://royashbrook.com/hush"
}
}
}{
"servers": {
"royashbrook-hush": {
"type": "http",
"url": "https://royashbrook.com/hush"
}
}
}{
"mcpServers": {
"royashbrook-hush": {
"type": "http",
"url": "https://royashbrook.com/hush"
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsonversion 1.3.0
What it does
Hush is a secret store for AI agents that ensures secrets never appear in plaintext in chat transcripts or outputs. Agents can store secrets in the OS keychain, generate random values, and inject them directly into commands without ever seeing the values themselves.
- Store API tokens and credentials in the OS keychain once, then inject them into tool commands without the agent ever viewing the plaintext.
- Generate random secrets like API keys and store them directly in the keychain for use by downstream commands.
- Sync secrets from external password managers like LastPass, Bitwarden, or KeePass into the local keychain for agent access.
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.