security-manager

Manage MCP tokens in macOS Keychain and 1Password via Bash CLIs.

Updated Feb 27, 2026
One-click install
npx skills add https://github.com/ChanghwanK/dotfiles --skill security-manager
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-manager
Source: https://github.com/ChanghwanK/dotfiles/tree/main/claude/.claude/skills/security-manager
Command: npx skills add https://github.com/ChanghwanK/dotfiles --skill security-manager

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill streamlines the management of sensitive MCP tokens by securely storing, retrieving, and synchronizing them with macOS Keychain and 1Password, ensuring secure access to various services.

Core Features & Use Cases

  • Token Management: Add, view, update, and delete MCP tokens.
  • 1Password Synchronization: Seamlessly sync tokens between Keychain and 1Password.
  • New Server Onboarding: Facilitates the setup of new MCP servers by managing their credentials.
  • Use Case: When your GitHub Personal Access Token expires, use this Skill to update it in both Keychain and 1Password with a single command.

Quick Start

Use the security-manager skill to add a new token for the 'newservice' with the provided token value.

Frequently Asked Questions about security-manager

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I store and manage MCP tokens in macOS Keychain?

You can manage MCP tokens in macOS Keychain by using a Skill that executes Bash commands to interact directly with the `security` CLI for adding, retrieving, updating, and deleting credentials.

Can I synchronize MCP credentials between macOS Keychain and 1Password?

Yes, this Skill synchronizes MCP credentials between macOS Keychain and 1Password by utilizing the `op` CLI, allowing you to update tokens across both platforms simultaneously.

What is the best way to rotate expired MCP server tokens?

The best way to rotate expired MCP server tokens is using a credential management Skill that updates the expired values and synchronizes the new credentials across Keychain and 1Password.

Does this token management Skill require the 1Password CLI to function?

Yes, the Skill requires the 1Password CLI (`op`) and macOS `security` CLI to execute Bash commands for secure credential handling and synchronization.

How do I onboard a new MCP server and manage its credentials?

You can onboard a new MCP server by using the Skill to add its initial token to macOS Keychain, which then synchronizes the new credentials with your 1Password vault.

Why use a CLI-based approach for MCP token management instead of manual entry?

A CLI-based approach automates MCP token management to prevent manual entry errors, securely storing credentials in Keychain and ensuring immediate synchronization with 1Password.