kru
★ 129
vs
agents-shipgate
★ 90
kru vs agents-shipgate
kru: KRU is a free, open-source, local-first credential manager and MCP server designed for AI agents. It enables agents to securely use passwords, API keys, and SSH credentials for various tasks without exposing plaintext to the model context.; agents-shipgate: Agents Shipgate is an open-source CLI and GitHub Action that serves as a deterministic merge gate for AI-generated agent capability changes. It performs local-first, static Tool-Use Readiness review, scanning various agent artifacts to ensure explicit approval policies, scope coverage, and idempotency evidence before merging.
01
TL;DR
kruSecurity & Safety · ★ 129
Automate Server Operations: AI agents can securely connect to servers via SSH to deploy builds or verify services using saved credentials.
agents-shipgateSecurity & Safety · ★ 90
Reviewing and validating new or changed agent tool definitions before merging pull requests.
02
Side-by-Side Comparison
Field
kruagents-shipgateCategory
Security & Safety
Security & Safety
Stars
★ 129
★ 90
License
MIT
Apache-2.0
Install Command
kru mcp stdio
pipx install agents-shipgate
Updated
5d ago
5d ago
Open Source
Yes
Yes
Tags
Credential Manager, AI Agents, Password Vault
AI Agents, Tool-Use Readiness, Static Analysis
03
Features
kru01Local Encrypted Credential Vault: Stores sensitive data (passwords, API keys, SSH keys, TOTP) locally, encrypted with XChaCha20-Poly1305, without requiring a cloud account.
02AI Agent Credential Relay (MCP Server): Functions as a local stdio MCP server, allowing AI agents to perform authenticated actions without exposing plaintext secrets to the model context.
03Flexible Credential Item Modules: Supports customizable credential items by combining various modules (username, password, API key, SSH key, TOTP, host, URL, custom fields).
04Cross-Platform & Portable: Available on Windows, macOS, and Linux, with portable builds and no installation/registration required.
05Diverse Credential Actions: Enables agents to perform actions like browser field filling, SSH command execution/file transfer, and authenticated HTTP requests.
agents-shipgate01Acts as a deterministic merge gate for AI-generated agent capability changes.
02Performs local-first, static analysis without agent execution or LLM calls.
03Scans and validates tool definitions from various sources (MCP, OpenAPI, OpenAI SDK, LangChain, CrewAI, etc.).
04Generates comprehensive Tool-Use Readiness Reports and PR comments with merge verdicts.
05Supports CI/CD integration as a GitHub Action for automated review.
04
Use Cases
kru↳Automate Server Operations: AI agents can securely connect to servers via SSH to deploy builds or verify services using saved credentials.
↳Integrate with Authenticated APIs: Agents can make authenticated API calls (e.g., to DNS providers) without exposing API keys directly.
↳Streamline Browser Sign-ins: Automate browser login processes by having agents use saved credentials to fill form fields and submit them.
↳Secure Terminal Command Execution: Allow agents to run local or remote terminal commands with hidden modules substituted for sensitive arguments.
↳Managed File Transfers: Agents can securely upload or download files and directories over SFTP using their saved SSH identities.
agents-shipgate↳Reviewing and validating new or changed agent tool definitions before merging pull requests.
↳Enforcing approval policies, scope coverage, and idempotency for agent actions in CI/CD pipelines.
↳Providing static evidence for security and GRC reviewers without executing agent code.
↳Blocking risky capabilities, such as financial transactions, if explicit safeguards are not declared.
↳Integrating with coding agents (e.g., Claude Code, Codex, Cursor) to automate self-correction during development.
FAQ
FAQ
What is the difference between kru and agents-shipgate?
Both kru and agents-shipgate are in the Security & Safety category. kru has 129 stars, while agents-shipgate has 90 stars.
Which is better, kru or agents-shipgate?
The best choice depends on your use case. Choose kru if Automate Server Operations: AI agents can securely connect to servers via SSH to deploy builds or verify services using saved credentials., and agents-shipgate if Reviewing and validating new or changed agent tool definitions before merging pull requests..
Is kru free or open source?
Yes, kru is open source on GitHub (MIT).
Is agents-shipgate free or open source?
Yes, agents-shipgate is open source on GitHub (Apache-2.0).
Cloud Infrastructure
AdDeploy on DigitalOcean
Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.
→