Is io.github.Insomniac-VibeLabs/two-key safe to use?

io.github.Insomniac-VibeLabs/two-key has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.

How do I install io.github.Insomniac-VibeLabs/two-key?

io.github.Insomniac-VibeLabs/two-key supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.Insomniac-VibeLabs/two-key do?

io.github.Insomniac-VibeLabs/two-key provides 3 tools: resolved_by, constitution_loaded, check_decision_digests. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.Insomniac-VibeLabs/two-key?

io.github.Insomniac-VibeLabs/two-key is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.Insomniac-VibeLabs/two-key actively maintained?

io.github.Insomniac-VibeLabs/two-key is actively maintained - last commit was 1 day ago. It has 2 GitHub stars.

io.github.Insomniac-VibeLabs/two-key

two-key

Authorization proxy for another MCP server: a rule check and AI judges approve each tool call

2 3 tools GitHub PyPI

No known CVEs

Apache-2.0 license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio, sse, http

3 tools · ~85 tok

Grade A · 0.0% of 200K ctx

MCPpedia last refreshed this data 21h ago

Edit this pageView history

io.github.Insomniac-VibeLabs/two-key is an MCP server that authorization proxy for another MCP server: a rule check and AI judges approve each tool call. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 87/100 on MCPpedia's security, maintenance and efficiency rubric.

Security

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-insomniac-vibelabs-two-key": {
      "args": [
        "two-key"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-insomniac-vibelabs-two-key)](https://mcppedia.org/s/io-github-insomniac-vibelabs-two-key)

Read me

What io.github.Insomniac-VibeLabs/two-key does

Authorization proxy for another MCP server: a rule check and AI judges approve each tool call

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

87/100across 5 weighted dimensions

How we score →

0255075100

−13

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked two-key against OSV.dev.

Inventory

Tools (3)

Click any tool to inspect its schema.

~85 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.Insomniac-VibeLabs/two-key safe to use?: io.github.Insomniac-VibeLabs/two-key has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
How do I install io.github.Insomniac-VibeLabs/two-key?: io.github.Insomniac-VibeLabs/two-key supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.Insomniac-VibeLabs/two-key do?: io.github.Insomniac-VibeLabs/two-key provides 3 tools: resolved_by, constitution_loaded, check_decision_digests. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.Insomniac-VibeLabs/two-key?: io.github.Insomniac-VibeLabs/two-key is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.Insomniac-VibeLabs/two-key actively maintained?: io.github.Insomniac-VibeLabs/two-key is actively maintained - last commit was 1 day ago. It has 2 GitHub stars.

Similar servers

Others in security

View all →

io.github.vmoranv/jshookmcp95

Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.

2.1k 2

io.github.KryptosAI/mcp-observatory92

MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.

120 4

io.github.CakeRepository/1password92

MCP server for 1Password service accounts — tools and resources for vaults and credentials

22 8

io.github.arthurpanhku/dvalincode92

Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.

120 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.Insomniac-VibeLabs/two-key and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Security

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-insomniac-vibelabs-two-key": {
      "args": [
        "two-key"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-insomniac-vibelabs-two-key)](https://mcppedia.org/s/io-github-insomniac-vibelabs-two-key)

Read me

What io.github.Insomniac-VibeLabs/two-key does

Authorization proxy for another MCP server: a rule check and AI judges approve each tool call

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

Two-Key

Two independent keys must turn before an AI agent can act. No human needed.

AI agent authorization and MCP gateway with dual-path authorization. Deterministic bytecode policy combined with AI judge approval, single-use capability tokens, and an encrypted ledger.

🎯 The Problem

AI agents can be given permission to use a tool without being given authority to perform every consequential action that tool can perform.

Traditional tool permissions answer:

"Can this agent call this tool?"

Two-Key asks a different question:

"Is this specific action authorized to execute?"

Two-Key is an authorization layer for AI agents that use tools. Before a consequential tool call executes, Two-Key requires independent authorization through a deterministic policy path and an independent judge path:

The policy key (Path A). The rules you sign compile to bytecode. A small deterministic VM checks every call against fields read from the call's own arguments: the tool, the amount, the counterparty, the data class, and fields you define. It reads no prose, so no prompt can talk it out of a rule.
The judgment key (Path B). One or more AI judges, each with its own credential, review the call against your written constitution. Two-Key refuses to start with a judge that holds the agent's own credential.

Only when both keys turn does Two-Key issue a single-use token, bound to the exact arguments, the signed constitution, and the ledger state. The gateway runs the tool only with that token, and every decision, allowed or denied, is written to an encrypted, hash-chained ledger with a signed head.

What you get:

Works with the agent you have. Grok, ChatGPT, Claude, Gemini, or a local model (i.e. Ollama) proposes the call as data; Two-Key decides.
Judges you choose. xAI, OpenAI, Anthropic, Gemini, or a local model. One judge is enough to start; the high_assurance profile asks for judges from two makers and a yes from a local one.
In front of any MCP server (0.5.0). two-key mcp-proxy shows the agent only the tools you signe

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

87/100across 5 weighted dimensions

How we score →

0255075100

−13

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked two-key against OSV.dev.

Inventory

Tools (3)

Click any tool to inspect its schema.

~85 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.Insomniac-VibeLabs/two-key safe to use?: io.github.Insomniac-VibeLabs/two-key has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
How do I install io.github.Insomniac-VibeLabs/two-key?: io.github.Insomniac-VibeLabs/two-key supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.Insomniac-VibeLabs/two-key do?: io.github.Insomniac-VibeLabs/two-key provides 3 tools: resolved_by, constitution_loaded, check_decision_digests. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.Insomniac-VibeLabs/two-key?: io.github.Insomniac-VibeLabs/two-key is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.Insomniac-VibeLabs/two-key actively maintained?: io.github.Insomniac-VibeLabs/two-key is actively maintained - last commit was 1 day ago. It has 2 GitHub stars.

Similar servers

Others in security

View all →

io.github.vmoranv/jshookmcp95

Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.

2.1k 2

io.github.KryptosAI/mcp-observatory92

MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.

120 4

io.github.CakeRepository/1password92

MCP server for 1Password service accounts — tools and resources for vaults and credentials

22 8

io.github.arthurpanhku/dvalincode92

Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.

120 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.Insomniac-VibeLabs/two-key and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?