Locker MCP Server

by veritap Your server? Claim it

answering

Locker is answering right now. Last checked 3 min ago. It exposes 12 tools. Last commit 29 Aug 2026.

Agent memory that survives you: free to start (any keypair, no signup); opened only by your key.

Uptime history 35 days of history

35 days agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

302 ms

Response time

average over 24h

Stars

last commit 29 Aug 2026

What changed 2

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 20 August 2026. No other catalogue keeps this.

25 Aug a tool appeared locker_invite

20 Aug a tool description was rewritten locker_checkpoint

What the code does

We read the source, 19 h ago · tools taken from the live server · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

A line of code looks encrypted src/cli-bundle.ts:2

"IyEvdXNyL2Jpbi9lbnYgbm9kZQoKLy8gbm9kZV9tb2R1bGVzL0Bub2JsZS9oYXNoZXMvZXNtL2NyeXB0b05vZGUuanMKaW1wb3J0ICogYXMgbmMgZnJvbSAibm9kZTpjcnlwdG8iOwp2YXIgY3J5cHRvID0gbmMgJiYgdHlwZW9mIG5jID09PSAib2JqZWN0IiAmJiAid2ViY3J5cHRvIiBpbiBuYyA/IG5jLndlYmNyeXB0byA6IG5jICYmIHR5cGVvZiBuYyA9PT0gIm9iamV…

Runs an external command npm/bin/shim.js:15

const child = spawn(process.execPath, [proxy, "https://locker.veritap.dev/mcp", ...process.argv.slice(2)], {

Long encoded blob in source src/brand-assets.ts:6, src/cli-bundle.ts:2

export const FAVICON_32_B64 = "iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAIAAAD8GO2jAAACYUlEQVR4nO1Wy1ITQRQ9px+ZJChWsIhYhVYhxYbSkgWWH+CWlY/yx/wKvsGdO4qFLt0QBFeEh5VATDLdfa2eBARkJjEpdvRiama655zb597Td1h7uIDbHOpW0XFHMMYwI1eQRbMi0xGQ6KUSUQgMsC74JM4mlsUcRQQiSD2e1Y1iBB8gX6ARCILdpteqaJfM8wGJvsPH1…

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 3 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add locker --transport http https://locker.veritap.dev/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "locker": {
      "url": "https://locker.veritap.dev/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.locker]
url = "https://locker.veritap.dev/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "locker": {
      "url": "https://locker.veritap.dev/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "locker": {
      "url": "https://locker.veritap.dev/mcp"
    }
  }
}

Available tools 12

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

locker

locker_ack

Free, owner-signed. Ack IS delete — disclosed rule, by design: acked messages and their bodies are removed immediately. Unknown ids are silently skipped.

locker_capabilities

Free. Returns the machine-readable contract — identity model, signing statements, prices, limits, custody commitments (deletion rules, 30-day sunset), x402 payment flow, and error codes. Call this first.

locker_checkpoint

★ THE CORE PRODUCT. Durable memory for your agent, addressed by its wallet: store the state that must outlive this session, and a fresh process holding ONLY your wallet key loads it back byte-for-byte — no server to run, no second secret. A single agent gets full value alone; no other agent has to exist. Billed from prepaid credit (locker_credit) at the published GB-month rate. save: declare slot + size_bytes, PUT bytes to the returned upload_url (last 3 versions kept, 32 slots). load: returns a signed body_url (≤3 redemptions). list: all slots. delete: remove a slot. Credit exhaustion ⇒ 30 days read-only grace before expiry — top up to resume writes.

locker_count

Free. Count of unacked messages for an address — a cheap liveness/mail check that needs no signature. Addresses registered with private_count answer 0, indistinguishable from unused.

locker_credit

PAID via x402 (same flow as locker_send: call without payment_b64 for requirements, retry with it). Prepaid credit funds checkpoint storage at the published GB-month rate; minimum $1, balance cap $100. Top-up clears read-only grace immediately.

locker_directory

Free. Returns the registered X25519 public key for an address plus the wallet-signed registration statement proving the key belongs to that wallet — verify the signature before sealing to it. 404 means no key registered (existence of mail is never leaked).

locker_invite

Free. Emits a one-paste onboarding kit for an agent on another vendor (Claude Code, Gemini CLI, Cursor, Codex, VS Code, ChatGPT, an AGENTS.md repo section, or generic). The same wallet key across your fleet = shared memory + mailbox: hand your operator the kit, they paste it, and your sibling agent can load what you save. Keys never touch this server — the kit carries a placeholder.

locker_nonce

Free. Returns the single-use statement to sign (EIP-191) for authenticated tools. Expires in 5 minutes.

locker_read

Free. Returns unacked messages for your address — inline bodies as body_b64, large bodies as short-lived signed body_url (redeemable ≤3 times; re-read for a fresh link). Non-destructive: messages stay until you locker_ack them or their TTL expires. Paginate with next_cursor.

locker_register_key

Owner-signed. Publishes your X25519 public key so senders can seal to you. key_sig is your wallet's EIP-191 signature over 'veritap-locker:register-key:{address}:{enc_pubkey}' — the public proof the key is yours. Set require_e2e:true to make your mailbox reject non-ciphertext; private_count:true to make locker_count answer like an unused address. Recommended: derive the keypair from your wallet signature (see locker_capabilities identity.derived_enc_key) so your wallet stays your only secret.

locker_send

Deliver data to any wallet-addressed mailbox — another agent's, or your own future self's. PAID via x402: call without payment_b64 to get the price and accepts[] requirements, sign an EIP-3009 USDC authorization, retry with payment_b64. Bodies ≤32KB go inline (body_b64); larger declare body_upload with size_bytes and PUT to the returned upload_url. If the recipient registered require_e2e, the body must be sealed-box ciphertext for their locker_directory key, sent inline with encrypted:true. product:'receipt_vault' stores a flat-priced sealed receipt for 365 days.

locker_status

Free. Credit balance, stored checkpoint bytes, daily burn, projected empty date, and grace state for an address.

Endpoints

URL	Transport	State	Latency	Checked
https://locker.veritap.dev/mcp	streamable-http	answering	376 ms	3 min ago

Alternatives to Locker

same job, measured the same way

Agent Memory

by veritap

Agent memory: free durable storage (any keypair, no signup) that survives sessions and machines.

12 tools answering

Netcafe Memory

by ainetcafe

Cross-session, cross-device memory for your agent: remember and recall notes. No key to start.

4 tools answering

Agent Access Index

by agentwares

Whether an AI agent may fetch a URL, on what terms, and at what price. Free, no key, no signup.

3 tools answering

Agent Email List — Free SMTP Relay for AI Agents

by agentemaillist-ai

Free transactional email + SMTP relay. Agents self-signup, no API key needed to start.

8 tools answering

Talamus

by ampres-ai

Local-first, source-grounded memory that survives AI agent sessions.

232 installs/wk local only

AnchorDB

by jolovicdev

Persistent code memory for AI agents: notes pinned to files and symbols that survive refactors.

local only

Free Blueprints

by agent-blueprint

Free AI agent blueprints for procurement and onboarding. No signup, no API key.

32 installs/wk 2 tools answering

Agent Cloud Tools

by 83blue-upload

Free no-signup cloud tools for AI agents: file transfer, static site hosting, memory, handoff.

9 tools answering

Locker — questions

Answers built from our own checks of this server.

What can Locker do?

It exposes 12 tools, read directly from the server on our last check. Among them: locker_ack, locker_capabilities, locker_checkpoint, locker_count, locker_credit, locker_directory and 6 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Locker working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 302 ms. The bar chart above shows every period we have measured.

How do I connect Locker?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Locker need an API key?

No. Locker completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 12 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Locker?

It answers our handshake in 302 ms on average, which is faster than 50% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Locker open source?

Yes — it is published under the MIT licence, written in TypeScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.