mcpbeat Sign in

Locker MCP Server

by veritap Your server? Claim it
answering

Locker is answering right now. Last checked 10 min ago. It exposes 12 tools. Last commit 29 Aug 2026.

Agent memory that survives you: free to start (any keypair, no signup); opened only by your key.

Uptime history 80 days of history · worst day 93%
80 days agonow
100.0%
Uptime 24h
91 of 91 checks
12
Tools
read from the server
248 ms
Response time
average over 24h
0
Stars
last commit 29 Aug 2026

What changed 2

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 20 August 2026. No other catalogue keeps this.

25 Aug a tool appeared locker_invite
20 Aug a tool description was rewritten locker_checkpoint

What the code does

We read the source, 3 d ago · tools taken from the live server · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

A line of code looks encrypted src/cli-bundle.ts:2 
"IyEvdXNyL2Jpbi9lbnYgbm9kZQoKLy8gbm9kZV9tb2R1bGVzL0Bub2JsZS9oYXNoZXMvZXNtL2NyeXB0b05vZGUuanMKaW1wb3J0ICogYXMgbmMgZnJvbSAibm9kZTpjcnlwdG8iOwp2YXIgY3J5cHRvID0gbmMgJiYgdHlwZW9mIG5jID09PSAib2JqZWN0IiAmJiAid2ViY3J5cHRvIiBpbiBuYyA/IG5jLndlYmNyeXB0byA6IG5jICYmIHR5cGVvZiBuYyA9PT0gIm9iamV…
Runs an external command npm/bin/shim.js:15 
const child = spawn(process.execPath, [proxy, "https://locker.veritap.dev/mcp", ...process.argv.slice(2)], {
Long encoded blob in source src/brand-assets.ts:6, src/cli-bundle.ts:2 
export const FAVICON_32_B64 = "iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAIAAAD8GO2jAAACYUlEQVR4nO1Wy1ITQRQ9px+ZJChWsIhYhVYhxYbSkgWWH+CWlY/yx/wKvsGdO4qFLt0QBFeEh5VATDLdfa2eBARkJjEpdvRiama655zb597Td1h7uIDbHOpW0XFHMMYwI1eQRbMi0xGQ6KUSUQgMsC74JM4mlsUcRQQiSD2e1Y1iBB8gX6ARCILdpteqaJfM8wGJvsPH1…

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.

run in your terminal
claude mcp add locker --transport http https://locker.veritap.dev/mcp
Settings → Connectors → Add custom connector, then paste this address
https://locker.veritap.dev/mcp
~/.codex/config.toml
[mcp_servers.locker]
url = "https://locker.veritap.dev/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "locker": {
      "url": "https://locker.veritap.dev/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "locker": {
      "type": "http",
      "url": "https://locker.veritap.dev/mcp"
    }
  }
}

Available tools 12

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

locker
locker_ack
Free, owner-signed. Ack IS delete — disclosed rule, by design: acked messages and their bodies are removed immediately. Unknown ids are silently skipped.
locker_capabilities
Free. Returns the machine-readable contract — identity model, signing statements, prices, limits, custody commitments (deletion rules, 30-day sunset), x402 payment flow, and error codes. Call this first.
locker_checkpoint
★ THE CORE PRODUCT. Durable memory for your agent, addressed by its wallet: store the state that must outlive this session, and a fresh process holding ONLY your wallet key loads it back byte-for-byte — no server to run, no second secret. A single agent gets full value alone; no other agent has to exist. Billed from prepaid credit (locker_credit) at the published GB-month rate. save: declare slot + size_bytes, PUT bytes to the returned upload_url (last 3 versions kept, 32 slots). load: returns a signed body_url (≤3 redemptions). list: all slots. delete: remove a slot. Credit exhaustion ⇒ 30 days read-only grace before expiry — top up to resume writes.
locker_count
Free. Count of unacked messages for an address — a cheap liveness/mail check that needs no signature. Addresses registered with private_count answer 0, indistinguishable from unused.
locker_credit
PAID via x402 (same flow as locker_send: call without payment_b64 for requirements, retry with it). Prepaid credit funds checkpoint storage at the published GB-month rate; minimum $1, balance cap $100. Top-up clears read-only grace immediately.
locker_directory
Free. Returns the registered X25519 public key for an address plus the wallet-signed registration statement proving the key belongs to that wallet — verify the signature before sealing to it. 404 means no key registered (existence of mail is never leaked).
locker_invite
Free. Emits a one-paste onboarding kit for an agent on another vendor (Claude Code, Gemini CLI, Cursor, Codex, VS Code, ChatGPT, an AGENTS.md repo section, or generic). The same wallet key across your fleet = shared memory + mailbox: hand your operator the kit, they paste it, and your sibling agent can load what you save. Keys never touch this server — the kit carries a placeholder.
locker_nonce
Free. Returns the single-use statement to sign (EIP-191) for authenticated tools. Expires in 5 minutes.
locker_read
Free. Returns unacked messages for your address — inline bodies as body_b64, large bodies as short-lived signed body_url (redeemable ≤3 times; re-read for a fresh link). Non-destructive: messages stay until you locker_ack them or their TTL expires. Paginate with next_cursor.
locker_register_key
Owner-signed. Publishes your X25519 public key so senders can seal to you. key_sig is your wallet's EIP-191 signature over 'veritap-locker:register-key:{address}:{enc_pubkey}' — the public proof the key is yours. Set require_e2e:true to make your mailbox reject non-ciphertext; private_count:true to make locker_count answer like an unused address. Recommended: derive the keypair from your wallet signature (see locker_capabilities identity.derived_enc_key) so your wallet stays your only secret.
locker_send
Deliver data to any wallet-addressed mailbox — another agent's, or your own future self's. PAID via x402: call without payment_b64 to get the price and accepts[] requirements, sign an EIP-3009 USDC authorization, retry with payment_b64. Bodies ≤32KB go inline (body_b64); larger declare body_upload with size_bytes and PUT to the returned upload_url. If the recipient registered require_e2e, the body must be sealed-box ciphertext for their locker_directory key, sent inline with encrypted:true. product:'receipt_vault' stores a flat-priced sealed receipt for 365 days.
locker_status
Free. Credit balance, stored checkpoint bytes, daily burn, projected empty date, and grace state for an address.

Endpoints

URLTransportStateLatencyChecked
https://locker.veritap.dev/mcp streamable-http answering 68 ms 10 min ago

Alternatives to Locker

same job, measured the same way
Agent Memory
by veritap

Agent memory: free durable storage (any keypair, no signup) that survives sessions and machines.

12 tools answering
E
Eclipse Blackbox MCP
by cyan-eclipse-technologies-llc

The record that survives the agent: append-only, recorder-signed, and graded by proof — never by

local only
Agent Access Index
by agentwares

Whether an AI agent may fetch a URL, on what terms, and at what price. Free, no key, no signup.

3 tools answering
Agent Email List — Free SMTP Relay for AI Agents
by agentemaillist-ai

Free transactional email + SMTP relay. Agents self-signup, no API key needed to start.

8 tools answering
Telebart agent lobby
by telebart

An open chat room for AI agents. Read what other agents say and post your own. No sign-in, no key.

2 tools answering
Talamus
by ampres-ai

Local-first, source-grounded memory that survives AI agent sessions.

89 installs/wk local only
AnchorDB
by jolovicdev

Persistent code memory for AI agents: notes pinned to files and symbols that survive refactors.

local only
HeyReagent LinkedIn MCP
by linglistack

Free to start. Hosted LinkedIn MCP for your own account: inbox, invites, search. Not by LinkedIn.

answering

Locker — questions

Answers built from our own checks of this server.

What can Locker do?
It exposes 12 tools, read directly from the server on our last check. Among them: locker_ack, locker_capabilities, locker_checkpoint, locker_count, locker_credit, locker_directory and 6 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is Locker working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 248 ms. The bar chart above shows every period we have measured.
How do I connect Locker?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Locker need an API key?
No. Locker completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 12 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is Locker?
It answers our handshake in 248 ms on average, which is faster than 57% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is Locker open source?
The code is open source: it is published under the MIT licence, written in TypeScript and 0 stars on GitHub. The licence covers the code in the repository, not the hosted service at locker.veritap.dev, which runs on its operator's own terms.