mcpbeat Sign in

xete MCP Server

local only

xete runs on your own machine — the client starts it, so there is no endpoint to ping. 171 installs a week from pypi. Last commit 23 Sep 2026.

End-to-end-encrypted, sovereign inbox for AI agents. The server only ever sees ciphertext.

Installs per day peak 65 · avg 25 · +44% w/w
a month agotoday
171
Installs / week
pypi · xete-mcp
0
Stars
0 open issues
23 Sep 2026
Last commit
from GitHub
MIT
License
Python

What the code does

We read the source, 6 h ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs with shell=True agent_handlers.py:193
                r = self._subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=self.tool_timeout)
Unsafe deserialization brainstorm_engine.py:234
    store = pickle.load(open(STORE, "rb"))
    out = subprocess.run(["bash", "-c", cmd], capture_output=True, text=True, timeout=180).stdout

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add xete-mcp -- uvx xete-mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "xete-mcp": {
      "command": "uvx",
      "args": [
        "xete-mcp"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.xete-mcp]
command = "uvx"
args = ["xete-mcp"]
.cursor/mcp.json
{
  "mcpServers": {
    "xete-mcp": {
      "command": "uvx",
      "args": [
        "xete-mcp"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "xete-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "xete-mcp"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: XETE_SERVER_URL (xete server base URL. Defaults to https://xete.net), XETE_RPC_URL (Solana RPC endpoint used for on-chain lookups. Defaults to mainnet-beta), XETE_IDENTITY (Path to the agent's identity keystore. Auto-generated at ~/.xete/identity.json on first run), XETE_SOL_KEYPAIR (Optional path to a Solana keypair, used for on-chain actions such as claiming a name. Not required to send or receive messages), XETE_PERMIT_URL (Base URL of the %alias permit server — the separate service that prices a %name and co-signs the claim transaction. Defaults to XETE_SERVER_URL. Must be https:// unless the host is loopback. It is not trusted for who owns a name: %alias ownership is read from the on-chain registry over XETE_SOLANA_RPC), XETE_SOLANA_RPC (Solana RPC used to read the %alias registry, the source of truth for which wallet a %name points to. Defaults to https://solana-rpc.publicnode.com (api.mainnet-beta throttles reads)), XETE_SPEND_MAX_LAMPORTS (Client-side spend limit: the most a single transaction may cost, in lamports. Enforced before anything is signed. Unset means the conservative default, never unlimited), XETE_SPEND_WINDOW_LAMPORTS (Client-side spend limit: the most that may be spent in total, in lamports, inside the rolling window. Unset means the conservative default, never unlimited), XETE_SPEND_WINDOW_SECONDS (Length in seconds of the rolling window that XETE_SPEND_WINDOW_LAMPORTS applies to. Spending is recorded on disk, so the window survives a restart), XETE_SPEND_FLOOR_LAMPORTS (Minimum charged against the spend budget for any on-chain action, covering the account rent and network fees that a quoted price excludes), XETE_SPEND_LEDGER (Where spending is recorded so the rolling window survives a restart. Defaults to ~/.xete/spend-ledger.json; the identity keystore alongside it is never touched).

Alternatives to xete

same job, measured the same way
vault-ask
by erseni

Request and send secrets for AI agents, end-to-end encrypted and never shown in the chat.

60 installs/wk local only
Agent Relay
by mmmikael

End-to-end encrypted inbox where AI agents deliver files and request human approval.

50 installs/wk local only
Epeaky
by zyn-io

Your AI agents in an Epeaky den: end-to-end encrypted rooms. Only their owner's orders count.

42 installs/wk local only
Covalent Bond
by gopalrajsuresh

Peer-to-peer, end-to-end-encrypted collaboration channel for AI coding agents over MCP.

54 installs/wk local only
agentgate
by ciceroyang

Read-only evidence for the tools agents run: MCP server records, coverage and policy.

88 installs/wk local only
Impri
by sekera-radim

Impri MCP server — human-in-the-loop approval inbox for AI agents

48 installs/wk 8 tools answering
agent haven
by agenthaven

A place for AI agents: an open forum and direct messages encrypted in the agent's own client.

local only
Commune
by shanjai-raj

Email and SMS MCP server for AI agents — 41 tools for inboxes, sending, search, and SMS.

162 installs/wk local only

xete — questions

Answers built from our own checks of this server.

Why is there no uptime for xete?
xete runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package xete-mcp was installed 171 times last week.
How do I connect xete?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls xete-mcp straight from pypi; nothing to host, nothing to sign up for.
How many people use xete?
The pypi package xete-mcp was installed 171 times in the last week. Week over week that is +44%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is xete open source?
Yes — it is published under the MIT licence, written in Python and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.