GhostKey FAQs

Question 1

What security measures does GhostKey employ to protect credentials?

Accepted Answer

GhostKey implements robust security with Argon2id for key derivation, AES-256-GCM for authenticated encryption of all stored credentials, SSRF/CRLF prevention, error sanitization, buffer zeroing, and strict file permissions to ensure defense-in-depth.

Question 2

How does GhostKey prevent AI agents from accessing raw secrets?

Accepted Answer

AI agents utilize GhostKey's MCP tools (e.g., `ghostkey_request`) to perform authenticated actions. GhostKey transparently injects the necessary authentication details or manages persistent connections, ensuring agents never directly see or store the sensitive credentials.

Question 3

What is GhostKey and how does it benefit AI agents?

Accepted Answer

GhostKey is an MCP-native credential vault designed for AI agents. It allows agents to authenticate with services without ever directly handling sensitive secrets, dramatically improving security by preventing secret exposure and leakage.

Question 4

What types of authentication patterns does GhostKey support?

Accepted Answer

GhostKey supports 7 diverse authentication patterns including Bearer tokens, HTTP Basic, API Key headers, custom headers, XML-RPC, OAuth2 (with automatic token refresh), and secrets injected as URL query parameters.

Question 5

Is GhostKey compatible with popular AI development environments?

Accepted Answer

Yes, GhostKey is designed to work with any Model-Context Protocol (MCP) client. It offers auto-setup functionality for popular clients like Claude Code, Cursor, and VS Code (Copilot), and can be manually configured for others like Gemini CLI and Continue.

GhostKey

GhostKey

主要功能

使用案例

主要功能

使用案例