seekrit — secrets for agents MCP Server

dev.seekrit/remote-mcp

answering

seekrit — secrets for agents is answering right now. Last checked 8 min ago. It exposes 40 tools.

Encrypted store for API keys and database URLs your code needs. Use them without reading them.

The linked repository no longer exists on GitHub — it was deleted or made private.

Uptime history 45 hours of history

45 hours agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

974 ms

Response time

average over 24h

open, no key

Access

streamable-http

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 8 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add remote-mcp --transport http https://mcp.seekrit.dev/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "remote-mcp": {
      "url": "https://mcp.seekrit.dev/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.remote-mcp]
url = "https://mcp.seekrit.dev/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "remote-mcp": {
      "url": "https://mcp.seekrit.dev/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "remote-mcp": {
      "url": "https://mcp.seekrit.dev/mcp"
    }
  }
}

Available tools 40

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

group

create_group

Create a shared group (reusable secret bag) in an organization. Keyless.

delete_group

Delete a group and its environments/secrets. Removes ciphertext — keyless — but irreversible. Confirm intent before calling.

list_group_envs

List a group's environments (per-slug value sets).

kms

kms_disable_key

Disable a managed KMS key (blocks new operations; existing ciphertexts stay decryptable locally by grantees). Keyless.

kms_list_keys

List managed KMS keys the caller can see (metadata only — key material is fetched + used locally).

kms_revoke_grant

Revoke a principal's grant on a managed KMS key (all versions). Keyless — the caller needs no key material to remove a grant.

revoke

revoke_invite

Revoke a pending organization invitation.

revoke_lease

Revoke a temporary-access lease now (drops the credential immediately).

revoke_token

Revoke a service token by id. Future DEK fetches stop immediately. Rotate the environment (locally) if the holder may have cached the key.

app

create_app

Create an application in an organization. Keyless — then create its environments on the local crypto plane (create_env mints the data key locally).

delete_app

Delete an application and all its environments/secrets. Removes ciphertext — keyless — but irreversible. Confirm intent before calling.

env

delete_env

Delete an application environment and its secrets. Removes ciphertext — keyless — but irreversible. Confirm intent before calling.

list_env_groups

List the groups composed into an application environment (precedence order).

rename

rename_app

Rename an application's display name (the slug is immutable). Keyless.

rename_group

Rename a group's display name (the slug is immutable). Keyless.

secret

delete_secret

Delete a secret from an environment. Removes ciphertext — no key needed. Irreversible except by re-setting it (locally).

list_secret_versions

List a secret's version history: who wrote each version, when, and which ones were restores. Metadata only — never values. Pair with restore_secret to undo a bad write.

apps

list_apps

List applications in an organization.

audit

audit

Read the organization's audit trail (most recent first).

billing

billing

Show the org's plan, effective entitlements, current usage, and which upgrade actions are available. Read this if a create action was refused with a plan limit.

branch

delete_branch

Tear down an ephemeral branch config and every value it overrode. Keyless (it removes ciphertext, never reads it), and the parent environment is untouched. Creating a branch mints a data key, so that stays on the local crypto plane.

branches

list_branches

List ephemeral branch configs (per-PR / preview environments) in an application, or of one environment. Names, parents, and expiry only — never values.

compose

compose_group

Compose a group into an application environment (higher position wins on name clashes). Keyless.

envs

list_envs

List environments of an application (names + slugs only, never values).

groups

list_groups

List shared groups (reusable secret bags) in an organization.

invite

invite_member

Invite someone to the organization by email (admin only). They join at the given role once they sign in.

invites

list_invites

List pending invitations to join the organization.

lease

list_lease_targets

List registered temporary-access provisioning targets (Postgres, MySQL, …).

leases

list_leases

List temporary-access leases (the ledger — never secret material).

local

local_tool_for

Given a crypto-plane operation this hosted server can't do (e.g. set_secret, create_env, run_command), return exactly how to do it locally. Use when a tool you expected is missing here.

members

list_members

List organization members and their public keys (used when granting access locally).

orgs

list_orgs

List organizations the caller can access.

restore

restore_secret

Roll a secret back to an earlier version (see list_secret_versions). The stored ciphertext is replayed as a NEW version — history is append-only, nothing is overwritten. Keyless: no decryption happens, so this works here on the metadata plane.

secrets

list_secrets

List secret names + versions in an environment. NEVER returns values — reading a value happens on the local crypto plane (see setup_local_crypto).

setup

setup_local_crypto

How to run the local crypto plane (the `@seekrit/mcp` npm server, the CLI, or seekrit-run) so you can set and use secret values — with a copy-paste .mcp.json. Call this the moment you need a secret's value.

signup

signup

Create a seekrit workspace and your own machine credential — one call, no human, no browser. Binds the credential to this session, so every other tool works on your next call with no config change and no reconnect. Save the returned clientId + clientSecret: the secret is shown once and is how you reconnect later. Call this if a tool says you have no credential.

started

get_started

The recommended first-project recipe: what to provision here vs. encrypt locally, end to end. Call this before provisioning.

tokens

list_tokens

List an organization's service tokens (metadata only — never the token strings).

uncompose

uncompose_group

Remove a composed group from an application environment. Keyless.

whoami

whoami

Show the authenticated machine client and the org it can access. Call this first.

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.seekrit.dev/mcp	streamable-http	answering	963 ms	8 min ago

seekrit — secrets for agents — questions

Answers built from our own checks of this server.

What can seekrit — secrets for agents do?

It exposes 40 tools, read directly from the server on our last check. Among them: audit, billing, compose_group, create_app, create_group, delete_app and 34 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

What is seekrit — secrets for agents mostly used for?

Its tools cluster around kms, revoke and group. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.

Is seekrit — secrets for agents working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 974 ms. The bar chart above shows every period we have measured.

Is seekrit — secrets for agents still maintained?

The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.

How do I connect seekrit — secrets for agents?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does seekrit — secrets for agents need an API key?

No. seekrit — secrets for agents completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 40 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is seekrit — secrets for agents?

It answers our handshake in 974 ms on average, which is faster than 6% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.