offprompt: let goose ask for API keys without seeing them

[valerioleo]

I built offprompt, a 100% local MCP server for one job: when the agent needs an API key, it calls collect_secret, you type the value into a page on 127.0.0.1, and it's written to .env.local. The agent never sees the value.

Dead-simple to install: just npx offprompt init and everything is set up for you.

Repo: https://github.com/offprompt/offprompt.
Feedback from goose users is welcome.

[redbotster]

cool project. for anyone who also wants the secret available across sessions or shareable with a team without re-entering it each time, there are a few options in this space, including 1Claw, which keeps keys in an HSM-backed vault and hands the agent a short-lived scoped token so the raw value never appears in context or env. disclosure: i work on 1Claw. offprompt's local-only, no-account approach is a genuinely useful tradeoff for solo dev workflows though.