Zero-knowledge secrets manager — local crypto-plane MCP server: decrypts and injects secrets.
Connect Runs on your machine
claude mcp add mcp -e SEEKRIT_CLIENT_ID=<SEEKRIT_CLIENT_ID> -e SEEKRIT_CLIENT_SECRET=<SEEKRIT_CLIENT_SECRET> -e SEEKRIT_TOKEN=<SEEKRIT_TOKEN> -e SEEKRIT_PASSPHRASE=<SEEKRIT_PASSPHRASE> -e SEEKRIT_API_URL=<SEEKRIT_API_URL> -- npx -y @seekrit/[email protected]
{
"mcpServers": {
"mcp": {
"command": "npx",
"args": [
"-y",
"@seekrit/[email protected]"
],
"env": {
"SEEKRIT_CLIENT_ID": "<SEEKRIT_CLIENT_ID>",
"SEEKRIT_CLIENT_SECRET": "<SEEKRIT_CLIENT_SECRET>",
"SEEKRIT_TOKEN": "<SEEKRIT_TOKEN>",
"SEEKRIT_PASSPHRASE": "<SEEKRIT_PASSPHRASE>",
"SEEKRIT_API_URL": "<SEEKRIT_API_URL>"
}
}
}
}
{
"mcpServers": {
"mcp": {
"command": "npx",
"args": [
"-y",
"@seekrit/[email protected]"
],
"env": {
"SEEKRIT_CLIENT_ID": "<SEEKRIT_CLIENT_ID>",
"SEEKRIT_CLIENT_SECRET": "<SEEKRIT_CLIENT_SECRET>",
"SEEKRIT_TOKEN": "<SEEKRIT_TOKEN>",
"SEEKRIT_PASSPHRASE": "<SEEKRIT_PASSPHRASE>",
"SEEKRIT_API_URL": "<SEEKRIT_API_URL>"
}
}
}
}
{
"servers": {
"mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@seekrit/[email protected]"
],
"env": {
"SEEKRIT_CLIENT_ID": "<SEEKRIT_CLIENT_ID>",
"SEEKRIT_CLIENT_SECRET": "<SEEKRIT_CLIENT_SECRET>",
"SEEKRIT_TOKEN": "<SEEKRIT_TOKEN>",
"SEEKRIT_PASSPHRASE": "<SEEKRIT_PASSPHRASE>",
"SEEKRIT_API_URL": "<SEEKRIT_API_URL>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
SEEKRIT_CLIENT_IDOptional | Machine (M2M) client id from POST https://mcp.seekrit.dev/signup — mints an admin token automatically, no separate token to copy. |
SEEKRIT_CLIENT_SECRETOptional, secret | Machine (M2M) client secret paired with SEEKRIT_CLIENT_ID. |
SEEKRIT_TOKENOptional, secret | An existing skt_… service or admin token, if you already have one instead of machine credentials. |
SEEKRIT_PASSPHRASEOptional, secret | Passphrase for the token's private key. Required for tools that decrypt (get_secret, run_command) when authenticating with SEEKRIT_TOKEN. |
SEEKRIT_API_URLOptional | Override the API base URL. Defaults to the hosted seekrit API. |
Details
| Package | @seekrit/[email protected] (NPM, stdio) |
| First published | 20 Sep 2026 |
| Last updated | 20 Sep 2026 |
| Registry name | dev.seekrit/mcp |
More finance and crypto servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
