Agent Plugins Marketplace
← All plugins

knox

v0.1.0+codex.20260622193804

Knox local MCP secret broker with capability-scoped, short-lived sessions.

CodexClaude Code1 MCP serverstdio

By KnoxLicense: MIT0 GitHub starsUpdated 2 weeks ago

Directory evidence

Runtimes
Codex and Claude Code
Parsed components
1 skill or MCP entry
Source updated
Oct 4, 2026
Manifest status
Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install knox for Codex and Claude Code

Installs for the current user
codex plugin marketplace add eidos-agi/eidos-marketplace
codex plugin marketplace upgrade eidos-agi
codex plugin add knox@eidos-agi

Paste and run these commands in a terminal with Codex. They add and refresh the eidos-agi catalog, then install this plugin.

Compatibility: the page URL and API slug “knox” remain stable.

  • Codex: knox@agent-plugin-marketplace → knox@eidos-agi

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually
git clone https://github.com/eidos-agi/eidos-marketplace

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/knox/.

Plugin files

plugins/knox/
├── .codex-plugin/plugin.json
├── .claude-plugin/plugin.json
└── .mcp.json

MCP servers1

knoxstdio
command
python3
args
${CLAUDE_PLUGIN_ROOT}/scripts/knox/bootstrap.py
env.PYTHONPATH
${CLAUDE_PLUGIN_ROOT}
env.KNOX_APPROVAL_MODE
code
env.KNOX_APPROVAL_TIMEOUT_SECONDS
90
env.KNOX_REQUIRE_PAIRING
1

MCP configuration uses runtime-provided plugin path placeholders such as ${PLUGIN_ROOT} or ${CLAUDE_PLUGIN_ROOT}. Review the manifest for the runtime-specific expansion rules.

Plugin manifests2

plugins/knox/.codex-plugin/plugin.json
{
  "name": "knox",
  "version": "0.1.0+codex.20260622193804",
  "description": "Knox local MCP secret broker with capability-scoped, short-lived sessions.",
  "author": {
    "name": "Knox"
  },
  "homepage": "https://github.com/eidos-agi/knox",
  "repository": "https://github.com/eidos-agi/knox",
  "license": "MIT",
  "interface": {
    "displayName": "Knox",
    "shortDescription": "Capability-based local MCP secret broker.",
    "longDescription": "Knox keeps credentials in macOS Keychain and enforces short-lived, policy-scoped action tokens. The model only gets tool outputs, never raw secrets.",
    "developerName": "Knox",
    "category": "Productivity",
    "capabilities": [
      "secret-management",
      "tool-authorization",
      "session-scoping",
      "audit-trail"
    ],
    "defaultPrompt": "Issue a short-lived Knox session and invoke allowed provider operations with scoped sessions."
  },
  "mcpServers": "./.mcp.json"
}
plugins/knox/.claude-plugin/plugin.json
{
  "name": "knox",
  "version": "0.2.0",
  "description": "Knox local MCP secret broker with capability-scoped sessions and proxy tokens.",
  "author": {
    "name": "Knox"
  },
  "homepage": "https://github.com/eidos-agi/knox",
  "repository": "https://github.com/eidos-agi/knox",
  "license": "MIT",
  "keywords": [
    "mcp",
    "agent",
    "secret-management",
    "session-scoping",
    "macos",
    "biometric"
  ],
  "interface": {
    "displayName": "Knox",
    "shortDescription": "Local capability-based broker for scoped MCP actions and short-lived sessions/proxy tokens.",
    "longDescription": "Knox keeps credentials in macOS Keychain and enforces per-action scope checks with TTL and revocation. Models never see raw secrets.",
    "developerName": "Knox",
    "category": "Productivity",
    "capabilities": [
      "secret-management",
      "tool-authorization",
      "proxy-token",
      "session-scoping"
    ]
  },
  "security": {
    "posture": "strict-local-first",
    "notes": [
      "macOS Keychain required for secret storage.",
      "No plaintext fallback in v1.",
      "Fail-closed when keychain is unavailable."
    ]
  },
  "mcpServers": {
    "knox": {
      "command": "python3",
      "args": [
        "scripts/knox/bootstrap.py"
      ],
      "env": {
        "PYTHONPATH": "${PLUGIN_DIR}",
        "KNOX_APPROVAL_MODE": "code",
        "KNOX_APPROVAL_TIMEOUT_SECONDS": "90",
        "KNOX_REQUIRE_PAIRING": "1"
      }
    }
  }
}

For maintainers

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[knox on Agent Plugins Marketplace](https://pluginsmp.com/plugins/knox)