Hey we are launching Docs.dev, a full feature docs product that lets you host your developer docs on Cloudflare in a couple minutes.Why this exists:We don’t think every early stage startup should need to pay $300-$500 a month for beautiful docs, in fact every startup should just have beautiful human and agent ready docs ready to go. Additionally the workflow for docs is a lot different now in...
https://github.com/keyboard-dev/keyboard-local
Hello HN, we're Andrew and Stephen from Keyboard (https://www.keyboard.dev/).After building AI tools for the past year, we recently made a YouTube video on building MCP servers and realized MCP is a total game-changer. It essentially lets AI do anything by connecting to your apps. But the deeper we dove, the clearer it became that security and privacy were complete afterthoughts. Coming from...
Write me a 10 Slides google slides presentation on the current news -> Claude will hit the plan tool -> come up with plan and recognize it has access to a codespace with the googleapis npm installed and it has a scoped Google User Token -> it will then write code to create the slide deck -> You can then approve or deny that code -> if approved the code is executed to create the slide deck -> then you can approve whether to share the result with Claude or not
After building AI tools for the past year, we recently made a YouTube video on building MCP servers and realized MCP is a total game-changer. It essentially lets AI do anything by connecting to your apps. But the deeper we dove, the clearer it became that security and privacy were complete afterthoughts. Coming from backgrounds at Okta and Stripe, this made us pretty uncomfortable.
We kept seeing the same pattern: every app needs its own MCP server, each storing sensitive tokens, with minimal security controls. It felt like we were back to the early days of OAuth implementations. Functional, but scary.
How Keyboard fixes this:
- Isolated execution: Your API keys live in your own GitHub Codespace secrets, Bearer OAuth tokens in encrypted files on your machine. Your credentials stay in your trust radius
- Ephemeral environments: Codespaces can be destroyed/recreated, limiting blast radius
- Built-in access controls: GitHub's enterprise-grade security model protects your credentials
- Zero-trust architecture: Only you can access your API keys and execution environment
What makes this different:
- Real code execution: Claude can run JavaScript/Node.js with npm packages and your API credentials
- Reusable workflows: Save complex scripts as "Keyboard Shortcuts" for instant reuse
- Universal integration: One setup connects Linear, Slack, Google Workspace, GitHub, and more
- Auto-environment management: Codespaces created/managed automatically as needed
The GitHub Codespace approach came from experimental work with interactive documentation. We realized Codespaces might be the most secure place to execute these tasks - isolated, ephemeral, with enterprise-grade controls.
We need your help: If this resonates, give us a star on GitHub! We're looking for early users and contributors who want to help make MCP more powerful and more secure.
We'd love your feedback, especially if you've been experimenting with MCP yourself!
If you want to try it here is the quickstart: https://docs.keyboard.dev/getting-started/quickstart
Just curious what everybody thinks about how we will use MCP servers in the future. The thing I am stuck on is the future of the integration pattern.Right now we go into our MCP client of choice like Claude, Cursor, and Windsurf and we manually add the servers ourselves after we done a bit of research to make sure it isn't too sketchy.I think this is fine but what if we are working with...