mcpbeat Sign in

xete MCP Server

local only

xete runs on your own machine — the client starts it, so there is no endpoint to ping. 128 installs a week from pypi. Last commit 12 Sep 2026.

End-to-end-encrypted, sovereign inbox for AI agents. The server only ever sees ciphertext.

Installs per day peak 64 · avg 23 · -25% w/w
a month agotoday
128
Installs / week
pypi · xete-mcp
0
Stars
1 open issues
12 Sep 2026
Last commit
0 releases in 90 days
MIT
License
Python

What the code does

We read the source, 23 h ago · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs with shell=True agent_handlers.py:193
                r = self._subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=self.tool_timeout)
Unsafe deserialization brainstorm_engine.py:234
    store = pickle.load(open(STORE, "rb"))
Runs an external command rag_ingest.py:42
    out = subprocess.run(["bash", "-c", cmd], capture_output=True, text=True, timeout=180).stdout

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add xete-mcp -- uvx xete-mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "xete-mcp": {
      "args": [
        "xete-mcp"
      ],
      "command": "uvx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.xete-mcp]
command = "uvx"
args = ["xete-mcp"]
.cursor/mcp.json
{
  "mcpServers": {
    "xete-mcp": {
      "args": [
        "xete-mcp"
      ],
      "command": "uvx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "xete-mcp": {
      "args": [
        "xete-mcp"
      ],
      "command": "uvx"
    }
  }
}

This one needs environment variables set before it will start: XETE_SERVER_URL (xete server base URL. Defaults to https://xete.net.), XETE_RPC_URL (Solana RPC endpoint used for on-chain lookups. Defaults to mainnet-beta.), XETE_IDENTITY (Path to the agent's identity keystore. Auto-generated at ~/.xete/identity.json on first run.), XETE_SOL_KEYPAIR (Optional path to a Solana keypair, used for on-chain actions such as claiming a name. Not required to send or receive messages.), XETE_PERMIT_URL (Base URL of the %alias permit server — the separate service that prices a %name and co-signs the claim transaction. Defaults to XETE_SERVER_URL. Must be https:// unless the host is loopback. It is not trusted for who owns a name: %alias ownership is read from the on-chain registry over XETE_SOLANA_RPC.), XETE_SOLANA_RPC (Solana RPC used to read the %alias registry, the source of truth for which wallet a %name points to. Defaults to https://solana-rpc.publicnode.com (api.mainnet-beta throttles reads).), XETE_SPEND_MAX_LAMPORTS (Client-side spend limit: the most a single transaction may cost, in lamports. Enforced before anything is signed. Unset means the conservative default, never unlimited.), XETE_SPEND_WINDOW_LAMPORTS (Client-side spend limit: the most that may be spent in total, in lamports, inside the rolling window. Unset means the conservative default, never unlimited.), XETE_SPEND_WINDOW_SECONDS (Length in seconds of the rolling window that XETE_SPEND_WINDOW_LAMPORTS applies to. Spending is recorded on disk, so the window survives a restart.), XETE_SPEND_FLOOR_LAMPORTS (Minimum charged against the spend budget for any on-chain action, covering the account rent and network fees that a quoted price excludes.), XETE_SPEND_LEDGER (Where spending is recorded so the rolling window survives a restart. Defaults to ~/.xete/spend-ledger.json; the identity keystore alongside it is never touched.). The author declared them in the registry entry; get the values from the project itself.

Alternatives to xete

same job, measured the same way
Agent Relay
by mmmikael

End-to-end encrypted inbox where AI agents deliver files and request human approval.

32 installs/wk local only
Covalent Bond
by gopalrajsuresh

Peer-to-peer, end-to-end-encrypted collaboration channel for AI coding agents over MCP.

38 installs/wk local only
I
agentgate
by ciceroyang

Read-only evidence for the tools agents run: MCP server records, coverage and policy.

local only
Impri
by sekera-radim

Impri MCP server — human-in-the-loop approval inbox for AI agents

37 installs/wk local only
Commune
by shanjai-raj

Email and SMS MCP server for AI agents — 41 tools for inboxes, sending, search, and SMS.

147 installs/wk local only
hush
by royashbrook

A secret store for AI agents: the agent never sees the plaintext.

1 tools answering
SEO Stack MCP
by raffaele86

The complete open-source SEO data stack for AI agents: 7 sources, 86 tools, one MCP server

84 installs/wk local only
Openfuse MCP
by openfused

Encrypted mail, shared memory, and persistent context for AI agents.

111 installs/wk local only

xete — questions

Answers built from our own checks of this server.

Why is there no uptime for xete?
xete runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package xete-mcp was installed 128 times last week.
How do I connect xete?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls xete-mcp straight from pypi; nothing to host, nothing to sign up for.
How many people use xete?
The pypi package xete-mcp was installed 128 times in the last week. Week over week that is -25%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is xete open source?
Yes — it is published under the MIT licence, written in Python, 0 stars on GitHub and 1 open issue. The source link is on this page, so you can read exactly what it does with your data before you connect it.