baton-auth 0.1.5

Try it · User guide · Security

baton is a local authentication broker for AI agents and MCP tools. It lets an agent use your GitHub, cloud, or API credentials without putting the secret value into its chat or tool output.

Save a credential once, then let an agent use it directly or through a context or expiring lease. baton runs the command or HTTP request with the credential and hides known secrets in the result.

Try it

Requires Python 3.10+ and uv. Install baton-auth from PyPI:

uv tool install baton-auth

baton import                     # import existing local logins (gh, aws, npm, ...)
# or prompt privately for a single service:
baton add github

baton run -- gh api /user
baton http https://api.github.com/user
baton setup --auto               # connect installed MCP clients

baton add SERVICE prompts privately for required fields (or reads from piped stdin). Commands run in your working directory with a temporary HOME containing only that context's CLI settings.

baton setup --auto configures detected MCP clients (cursor, claude-desktop, windsurf, zed, vscode, muse-code, hermes-agent), or pass --client CLIENT (codex, claude-code, agents-md, ...). baton setup prints portable MCP config JSON. Agents with command access can use baton run or baton http.

Cryptography at a glance

Learn more

• User guide — contexts, leases, providers, refresh, and MCP tools.
• Security and limits — what baton protects, how it stores secrets, and where its boundary ends.

The distribution is named baton-auth and also provides the baton-auth command. The Python import is baton_auth.

baton runs locally for one user on one machine. A temporary HOME keeps CLI configuration separate; it is not a full operating-system sandbox.