kbroughton

kbroughton/downscoping-mcp

Plugin Claude Code

Least-privilege credential injection for CLI tools and MCP servers. Intercepts Bash tool calls and MCP tool calls, swapping in the least-privileged auth token for each operation based on .claude/downscoping.yaml config.

kbroughton/downscoping-mcp

MCP server Claude CodeCodexCursor

MCP server "credential-downscope-proxy" as configured in kbroughton/downscoping-mcp. Runs credential_downscope.mcp_proxy with python3. Needs 1 environment variable to run.