dropthejase plugs Louis into outside tools, with the keys locked away

The fork can now call external services as if they were built-in skills - and the credentials never sit in plain text.

integrationsecurity

dropthejase has wired Louis up to MCP, a standard way for AI assistants to reach out to outside tools and data sources and treat them as first-class abilities rather than bolt-ons. The seed connection points at a UK government legal-AI service, but the plumbing is general - any compatible service can slot in.

The interesting move is on the security side. Rather than parking access tokens in environment variables or config files (where they tend to leak into logs and screenshots), Louis pulls each server's credential from a managed secrets vault at startup, scoped per service. It's the sort of pattern an enterprise security review would actually pass, and it's reusable by anyone forking Mike who needs to connect to paid APIs, internal knowledge bases, or partner systems without the usual credential-sprawl headaches.

So what Worth a look for legal-tech teams thinking about how to safely extend an AI assistant with external tools without handing junior engineers production secrets.

View this fork on GitHub →

Spotted something wrong? Or know the PR text has fresher detail than the writeup above?

Commits in this thread

4 commits from dropthejase/louis, oldest first. Source extracted verbatim from the harvested git log.

SHA Subject Author Date
06467772 feat(mcp): add MCP server support Jason Lee 2026-05-15 ↗ GitHub
commit body
Admin uploads mcp.json to the admin S3 bucket (Claude Code format).
Agent loads and caches config on cold start, wires McpClient[] into
tools filtered by per-user disabled list. Users toggle servers on/off
in Agent Settings. DB migration adds disabled_mcp_servers jsonb column.
Seeded with data.gouv.fr public MCP endpoint.
eec41f4e chore(mcp): swap seed server to lex.lab.i.ai.gov.uk Jason Lee 2026-05-15 ↗ GitHub
38f9c4ae feat(mcp): add Bearer token auth via Secrets Manager Jason Lee 2026-05-15 ↗ GitHub
commit body
Optional authSecretName per server in mcp.json - agent fetches secret
from louis/mcp/* at cold start and sends as Authorization: Bearer.
AgentCore role granted GetSecretValue on louis/mcp/* prefix.
README and Agent Settings help panel updated with format, limitations
(no OAuth/3LO), and auth instructions.
3f247e45 feat: merge feature/mcp-support - MCP server support with Secrets Manager auth Jason Lee 2026-05-15 ↗ GitHub

Capture this thread into my fork

Download a single Markdown prompt that tells Claude how to port every commit above into your working tree — adapting paths and structure to match your repo. Run it via claude -p < capture-thread-348.md from inside the repo you want the changes in.

⬇ Download capture-thread-348.md