gopass-mcp

MCP server for gopass password management. Gives AI agents secure, on-demand access to credentials stored in your gopass (GPG-encrypted, git-backed) password store.

Prerequisites

• Node.js >= 20

• gopass installed and configured (v1.16+)

• A working gopass store (run gopass ls to verify)

Related MCP server: onepassword-mcp-server

Install

git clone https://github.com/inavhq/gopass-mcp.git
cd gopass-mcp
npm install
npm run build

Claude Code Configuration

Add to your Claude Code MCP settings (~/.claude/settings.json or project .claude/settings.local.json):

{
  "mcpServers": {
    "gopass": {
      "command": "node",
      "args": ["/path/to/gopass-mcp/dist/index.js"]
    }
  }
}

Tools

Environment Variables

Security

• Uses execFile (not exec) — no shell involved, no injection surface

• Path validation blocks directory traversal (.., absolute paths, ~)

• Secret values are never written to stderr or logs

• No insert_secret or delete_secret — too dangerous for LLM automation

Development

npm test          # Run tests
npm run lint      # ESLint + Prettier check
npm run typecheck # tsc --noEmit
npm run build     # Compile to dist/

License

MIT