dazai — burn-after-reading secret (motokano) MCP Server
dazai — burn-after-reading secret (motokano) runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 13 Oct 2026.
Serve a secret to an agent exactly N times from locked RAM, then wipe it and self-destruct.
What the code does
We read the source, 4 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
return os.path.join(base, f"deadman-{os.getuid()}.sock")
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Alternatives to dazai — burn-after-reading secret (motokano)
same job, measured the same wayLets an AI agent hand a secret to a person as a one-time link, with no way to read it back.
Lets an AI agent hand a secret to a person as a one-time link, with no way to read it back.
Safety checks an agent runs before it acts: package malware, destructive command, secret leak.
Find and redact personal data and secrets in text before it reaches a model. Local, no account.
Local MCP tools for secret status and guarded deployment. Values never reach the agent.
Deterministic no-LLM MCP server that scrubs secrets before they reach an agent. Never leaks values.
The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.
Detect and redact PII, PHI, PCI and secrets in text and files before an AI agent sees them.
dazai — burn-after-reading secret (motokano) — questions
Answers built from our own checks of this server.