All vaults

KW
FILTERS help_outline
chevron_right All vaults
person My vault
chevron_right All items
star_border Favorites
vpn_key Login
credit_card Card
badge Identity
note Secure note
key SSH key
chevron_right folder Folders
folder SMM Panels
folder Dispute Rotation
archive Archive
delete Trash
shield Vault Items
search
Website Name Owner Options
Showing 0–0 of 0 accounts
Page 1 of 1

Send

KW
Name arrow_drop_up
Deletion date unfold_more
Options

Send sensitive information safely

Share files and data securely with anyone, on any platform. Your information will remain end-to-end encrypted while limiting exposure.

lock_clock Credential Hub Authenticator (TOTP)

Generate and autofill two-factor authentication codes directly from your encrypted vault.

Active 2FA Codes
0 accounts
search
Add Authenticator Key

Generator

Lio6cfqi1nKmbg
Options
Value must be between 5 and 128. Use 14 characters or more to generate a strong password.
Generator History
No generated history yet.

Import

Destination
Select this option if you want the imported file contents moved to a folder
Data
No file chosen

Export

Only items in your individual vault will export.

api MCP / API & CLI Access

Connect Credential Hub Vault to Cursor, Windsurf, Claude, ChatGPT, or custom AI agents via Model Context Protocol.

⚡ PRO / PAID MEMBER
terminal MCP Server Configuration Setup

Add the snippet below to your IDE's MCP configuration file (e.g. .cursor/mcp.json or claude_desktop_config.json).

{
  "mcpServers": {
    "credential-hub": {
      "command": "node",
      "args": [
        "C:/Users/domok/Documents/GitHub/Credential-Hub_dev/mcp-server/index.js"
      ],
      "env": {
        "CREDENTIAL_HUB_API_KEY": "ch_live_YOUR_KEY_HERE",
        "VAULT_USER_EMAIL": "[email protected]"
      }
    }
  }
}
Local Server: mcp-server/index.js ● Server Status: Active
auto_fix_high Available MCP Tools for AI Models (7 Tools)

Once configured, AI models gain authorized access to call these structured functions:

get_session_token(domain)
Returns active session cookies and bearer tokens for a specified website.
Tokens
get_credentials(domain, [include_secrets])
Returns full login credentials and active session for a specific provider.
Read
search_credentials(query)
Finds username/password entries matching a target provider or app name.
Search
get_secret(key_name)
Retrieves decrypted secrets, private keys, or API tokens from Secrets Manager.
Secrets
list_active_sessions([domain_filter])
Lists all active site sessions currently logged in across browser instances.
List
list_all_accounts([include_secrets, page])
Full vault inventory paginated for comprehensive AI automation.
Accounts
save_account(provider, username, email, ...)
Creates or updates a login account in the user's vault with full auditing.
Write
vpn_key Active MCP & API Access Keys

Manage secret keys for CLI tools, background automation scripts, and local MCP proxies.

Key Name Prefix / Hint Created Scopes Actions
terminal CLI Usage & Custom Prompt Snippets

Use the CLI binary to programmatically query credentials in shell scripts or feed context to local models.

# Fetch session token for TikTok automation
npx @credential-hub/cli get-token --domain tiktok.com --api-key ch_live_9f8a2b7c...
You have access to the Credential Hub MCP server. 
When asked to operate on target websites, call get_session_token(domain) to retrieve authenticated cookies.

Reports

KW

Identify and close security gaps in your online accounts by clicking the reports below.

diamond Upgrade

Exposed passwords

Passwords exposed in a data breach are easy targets for attackers. Change these passwords to prevent potential break-ins.

diamond Upgrade

Reused passwords

Reusing passwords makes it easier for attackers to break into multiple accounts. Change these passwords so that each is unique.

diamond Upgrade

Weak passwords

Weak passwords can be easily guessed by attackers. Change these passwords to strong ones using the password generator.

diamond Upgrade

Unsecure websites

URLs that start with http:// don't use the best available encryption. Change the login URIs for these accounts to https:// for safer browsing.

diamond Upgrade

Inactive two-step login

Two-step login adds a layer of protection to your accounts. Set up two-step login using Credential Hub authenticator for these accounts or use an alternative method.

Data breach

Breached accounts can expose your personal information. Secure breached accounts by enabling 2FA or creating a stronger password.

My account

KW
KW
photo_camera
Your account's fingerprint phrase: help_outline
jolliness-shingle-prewashed-slot-unwind

Change email

Email changes must be requested through support. Your account email is used for authentication and cannot be changed here.

Backup settings

Download or copy member account environment configuration

auth.env configuration file
Contains account email, Member ID, membership tier, API key, MCP key, vault endpoints, and environment variables.

Danger zone

settings Settings chevron_right Integrations

Integrations • GitHub & Developer Accounts

Connect third-party developer platforms to sync repositories, manage environment secrets, and trigger CI/CD builds.

1 Active Integration

Security

KW
Session timeout
Master password
Two-step login
Devices
Keys

Session timeout

Appearance

KW
expand_more
Choose a theme for your web vault.
help_outline
expand_more
Change the language used by the web vault.

Subscription

KW
Subscription
Payment details
Billing history
You have the Credential Hub Free plan

Upgrade for complete security

Unlock more security features with Premium, or start sharing items with Families

Premium

Advanced online security
$1.65 / Monthly
✓ Built-in authenticator
✓ Secure file storage
✓ Emergency access
✓ Breach monitoring
✓ MCP / API / CLI Access for IDEs & AI (Cursor, ChatGPT)
✓ And more!

Families

Premium security for your family
$3.99 / Monthly
✓ 6 premium accounts
✓ Unlimited sharing - choose who sees what
✓ Unlimited family collections
✓ Shared storage for important family info
Prices exclude tax. Monthly or annual billing options available.
View business plans ↗

Domain rules

KW

If you have the same login across multiple different website domains, you can mark the website as "equivalent". "Global" domains are ones already created for you by Credential Hub.

Custom equivalent domains

Enter a list of domains separated by commas. Only "base" domains are allowed. Do not enter subdomains. For example, enter "google.com" instead of "www.google.com". You can also enter "androidapp://package.name" to associate an android app with other website domains.

Global equivalent domains

ameritrade.com, tdameritrade.com more_vert
bankofamerica.com, bofa.com, mbna.com, usfcuf.com more_vert
sprint.com, sprintpcs.com, nextel.com more_vert
youtube.com, google.com, gmail.com more_vert
apple.com, icloud.com more_vert
wellsfargo.com, wf.com, wellsfargoadvisors.com more_vert
mymerrill.com, ml.com, merrilledge.com more_vert
accountonline.com, citi.com, citibank.com, citicards.com, citibankonline.com more_vert
cnet.com, cnettv.com, com.com, download.com, news.com, search.com, upload.com more_vert
bing.com, hotmail.com, live.com, microsoft.com, msn.com, passport.net, windows.com, microsoftonline.com, office.com, office365.com, search.msn.com, xbox.com, azure.com, cloud.microsoft more_vert
paypal.com, paypal-search.com more_vert
amazon.com, amazon.co.uk, amazon.de, amazon.ca, amazon.fr, amazon.co.jp, amazon.in, amazon.cn, amazon.com.mx more_vert
verizon.com, verizon.net more_vert
dropbox.com, getdropbox.com more_vert
discordapp.com, discord.com more_vert
proton.me, protonmail.com, protonvpn.com more_vert
twitter.com, x.com more_vert

Emergency access

KW

Grant and manage emergency access for trusted contacts. Trusted contacts may request access to either View or Takeover your account in case of an emergency. Visit our help page for more information and details into how zero knowledge sharing works. Learn more about emergency access

Trusted emergency contacts

diamond Upgrade
You have not added any emergency contacts yet, invite a trusted contact to get started.

Designated as emergency contact

You have not been designated as an emergency contact for anyone yet.
folder_shared

Credential Manager

Security Check & Priority Account Recovery Hub
KW
search
category Categories
language Sites (0)
badge

Selected Credential Details

Select a category and site on the left to view reset URLs and stored credentials.

verified_user

Recovery Priority Sequence Guide

1. Email Recovery
First Priority
Essential for recovering password reset links for all services.
2. Financial Security
Second Priority
Secure banking, credit union, and payment apps (PayPal, Revolut).
3. Data Protection
Third Priority
Recover cloud storage (Google Drive, iCloud, Dropbox, OneDrive).
4. Social & Gaming
Fourth Priority
Address gaming accounts (PSN, Steam) & social platforms.
5. Communication
Final Priority
Restore messaging platforms (Telegram, WhatsApp, Slack, Teams).

vpn_key Central Identity Broker

Manage authenticated cookies distributed via Cloudflare KV & Credential Hub Vault

GitHub
KayWat GitHub Ecosystem

GitHub Repositories

Explore KayWat's public and private repositories, manage encrypted secrets, and sync environment variables.

0 Repositories
0 Secrets