AI & MemoryMCP RegistrynpmB · 79

Trusty Squire MCP server

ai.trustysquire · Updated today

Provision, ship, and pay from your coding agent — keys and cards never leave the vault.

At a glance

Trusty Squire is an MCP server in the AI & Memory category. It runs locally over stdio via `npx -y @trusty-squire/mcp`, and declares no required credentials. It scores B (79/100) on the MCP Skills Hub health score as of Oct 28, 2026.

Source 3

One-click install

VS Code VS Code Insiders Cursor

Opens your editor and pre-fills the config. Your editor will ask before adding it.

How to install Trusty Squire in your AI client

Setup for Claude Code, Claude Desktop, Cursor, Codex, Windsurf, Cline and VS Code — copy-paste ready.

How to install Trusty Squire in Claude CodeAnthropic's agentic CLI

Add the server

bash

claude mcp add trusty-squire -- npx -y @trusty-squire/mcp

2
Verify it's connected
bash
```
claude mcp list
```
Sharing it with your team?
Add `--scope project` to write it to .mcp.json in the repository root, which you can commit (with the secrets left as environment variables).
Use it in a session
Ask Claude to use the tools this server exposes. It discovers them automatically.

How to install Trusty Squire in Claude DesktopDesktop app (MCP config)

Open your MCP config
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\claude_desktop_config.json

Add this server

json

{
  "mcpServers": {
    "trusty-squire": {
      "command": "npx",
      "args": [
        "-y",
        "@trusty-squire/mcp"
      ]
    }
  }
}

Restart Claude Desktop
The tools appear under the 🔌 menu once the app reloads.

How to install Trusty Squire in CursorAI-first code editor

Create / edit .cursor/mcp.json in your project

json

{
  "mcpServers": {
    "trusty-squire": {
      "command": "npx",
      "args": [
        "-y",
        "@trusty-squire/mcp"
      ]
    }
  }
}

Enable it
Cursor Settings → MCP → toggle the server on. Tools become available to the Composer/Agent.

How to install Trusty Squire in Codex CLIOpenAI coding agent

Add to ~/.codex/config.toml

toml

[mcp_servers.trusty-squire]
command = "npx"
args = ["-y", "@trusty-squire/mcp"]

Run Codex
Codex loads MCP servers from config.toml on startup and exposes their tools to the agent.

How to install Trusty Squire in WindsurfCodeium's agentic IDE

Edit ~/.codeium/windsurf/mcp_config.json

json

{
  "mcpServers": {
    "trusty-squire": {
      "command": "npx",
      "args": [
        "-y",
        "@trusty-squire/mcp"
      ]
    }
  }
}

Reload
Windsurf → Cascade → refresh MCP servers. Cascade can now call the tools.

How to install Trusty Squire in ClineVS Code autonomous agent

Open Cline → MCP Servers → Configure
Adds to cline_mcp_settings.json.

Add the server

json

{
  "mcpServers": {
    "trusty-squire": {
      "command": "npx",
      "args": [
        "-y",
        "@trusty-squire/mcp"
      ]
    }
  }
}

How to install Trusty Squire in VS CodeCopilot / MCP support

Create .vscode/mcp.json

json

{
  "servers": {
    "trusty-squire": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@trusty-squire/mcp"
      ]
    }
  }
}

Start it
VS Code shows a ▶ Start action above the server entry. Agent mode (Copilot Chat) can then use the tools.

What tools does Trusty Squire expose?

This server runs as a local package. We only query remote servers for their tool list — asking this one would mean executing it, so its tools are listed in the documentation below.

What the code can do

Read from the published package source — never executed. Parsed 80 of 136 source files.

This server can run other programs on your machine, read and write files and make network requests.

How it was published

Published by a verified CI identity (github trusted publishing) rather than a personal token.
Has a provenance attestation tying this artifact to the commit it was built from.
1 npm maintainer — a single point of compromise · last published by GitHub Actions.

Maintainer of this package and think something here is wrong? Tell us and we'll correct it.

Before you install

Signals gathered from the source repo and package registry — not a safety verdict.

What it can reach

Runs code on your machine — Executes as a local process with your user's permissions, including filesystem access.
Downloads at launch — The package is fetched from its registry each run unless you pin a version.

Last commit today — Actively maintained.
3 GitHub stars — Very little community usage so far.

Client compatibility

Claude Code: NativeClaude Desktop: NativeCursor: NativeCodex CLI: NativeWindsurf: NativeCline: NativeVS Code: Native

Health score

B · 79

Maintenance, adoption, transparency and packaging — not a safety audit. How this is calculated

Maintenance30%100%
Last commit 0 days ago.
Adoption20%18%
3 stars.
Transparency20%75%
3/4: ✓ public source repo, ✓ declared license, ✓ documentation, ✗ discoverable tool list.
Provenance15%100%
Package and registry entry point at the same repository.
Packaging15%100%
Publishes a pinned version (1.1.38).

Documentation

Full README

Trusty Squire

<strong>Empower agents with auth and payments.</strong>

What you can do

Ask your coding agent to:

Get an API key. "Sign me up for Pinecone and get an API key." It signs up, verifies the email, and stores the key in your vault instead of the chat.
Sign in anywhere. It uses your Google or GitHub account on any site that offers it.
Buy things. "Order one Glow Serum from whitejade.xyz." You approve once, and Trusty Squire fills the card fields in its browser.
Call APIs with stored keys. The agent uses a saved key without ever seeing it.

Install

bash

npx -y @trusty-squire/mcp@latest connect

Sign in with Google or GitHub, and Trusty Squire adds itself to your coding agent. Restart the agent and ask for what you need. Add --target=codex (or another agent) to pick the agent yourself.

Works with Claude Code, Codex, Cursor, OpenCode, Goose, Cline, Continue, and Hermes.

Full setup, CLI options, and tools: docs/reference.md. To build approvals into your own app, use `@trusty-squire/sdk`.

Alternatives to Trusty Squire

Maintain Trusty Squire? Add a badge to your README

Shows its health grade, and links readers to install steps for every client.

markdown

[![Trusty Squire on MCP Skills Hub](https://mcp-skills-hub.vercel.app/badge/ai-trustysquire-trusty-squire)](https://mcp-skills-hub.vercel.app/mcps/ai-trustysquire-trusty-squire)

Catalog data refreshed Oct 28, 2026. Something wrong? Report it.