kru is a local-first MCP credential manager keeping plaintext out of the model's context.

omaekumiko2-create/kru, created August 24 and at 88 stars, exposes passwords, API keys, SSH identities and TOTP codes to an agent over MCP without the plaintext entering the transcript. It targets the specific leak path where secrets loaded for a tool call end up in transcripts, traces and provider logs. (GitHub) Star count is low and it's single-sourced, so I wouldn't trust maturity claims, but the design goal is the right one.