How do I install Two Key?

Two Key is a local plugin. Install it using PyPI package: two-key and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Two Key safe to use?

Two Key scored 5.4/10 (moderate risk) in MCP Marketplace's automated security scan. It has 3 high or critical findings to review. It's listed, but review the security report on this page before installing.

What AI apps work with Two Key?

Two Key uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Two Key MCP Server

by Insomniac VibeLabs

Developer ToolsModerate5.4MCP RegistryLocal

Free

Server data from the Official MCP Registry

Authorization proxy for another MCP server: a rule check and AI judges approve each tool call

About

Authorization proxy for another MCP server: a rule check and AI judges approve each tool call

Security Report

5.4

Moderate5.4Moderate Risk

Two-Key is a well-documented authorization layer for AI agents with dual-path policy checks, single-use capability tokens, and an encrypted hash-chained ledger; the visible code shows deliberate hardening (no secrets on argv, 0600 token files, no overwrite, strict JSON parsing) and no exfiltration or malicious patterns. The only concerns are minor: the reviewed portion is truncated so not all modules were inspected, and the server's MCP proxy and config commands run upstream server commands and read env variables by design, which matches its stated purpose. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

4 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

system_info

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-insomniac-vibelabs-two-key": {
      "args": [
        "-y",
        "two-key-diagrams"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!

4.8

Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.

Two Key MCP Server

About

Security Report

Findings (9)Action required

Permissions Required

How to Install

Reviews

No reviews yet

More Developer Tools MCP Servers

Rea

Paperclip

Fetch

Git

Toleno

MCP Marketplace