Sign In

@seekrit/mcp

Package Overview
Dependencies
Maintainers
1
Versions
6
Alerts
File Explorer

Advanced tools

License
Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@seekrit/mcp - npm Package Compare versions

Comparing version
0.3.0
 to
0.4.0
+2
-2
package.json
{
"name": "@seekrit/mcp",
"version": "0.3.0",
"version": "0.4.0",
"description": "npx-able MCP server for seekrit — let Claude Code and other MCP clients provision, manage, and inject end-to-end encrypted secrets.",

@@ -25,3 +25,3 @@ "type": "module",

"tsdown": "^0.22.3",
"@seekrit/cli": "0.19.0"
"@seekrit/cli": "0.20.0"
},

@@ -28,0 +28,0 @@ "scripts": {

+31
-6
README.md

@@ -21,4 +21,29 @@ # @seekrit/mcp

Add it to any MCP client with a stdio server whose command runs this package via
`npx`, passing a credential in its environment. For Claude Code:
`npx`, passing a credential in its environment.
**Fully autonomous agent (recommended).** An agent with no account can
[sign up](https://seekrit.dev/docs/guides/ai-agents) for **machine credentials**
(`POST https://mcp.seekrit.dev/signup`) and use the *same* client id + secret for
everything — the hosted metadata plane and this local crypto plane. Point this
server at them and it mints its own admin token automatically on first use
(keyless — the keypair is generated locally), so there is no token to copy:
```json
{
"mcpServers": {
"seekrit": {
"command": "npx",
"args": ["-y", "@seekrit/mcp"],
"env": {
"SEEKRIT_CLIENT_ID": "<your client id>",
"SEEKRIT_CLIENT_SECRET": "<your client secret>"
}
}
}
}
```
**With an existing token.** If you already hold a service token, pass it directly.
For Claude Code:
```sh

@@ -29,4 +54,2 @@ # An admin token lets the agent provision structure (apps/envs/tokens) too:

Or drop a `.mcp.json` in your project — the whole setup is this snippet:
```json

@@ -78,8 +101,10 @@ {

The server authenticates exactly like the CLI — `SEEKRIT_TOKEN`, or saved
config at `~/.config/seekrit/config.json`.
The server authenticates exactly like the CLI — `SEEKRIT_CLIENT_ID` +
`SEEKRIT_CLIENT_SECRET`, `SEEKRIT_TOKEN`, or saved config at
`~/.config/seekrit/config.json`.
| Credential | Good for | Notes |
| --- | --- | --- |
| **Admin token** (`seekrit token create --admin`) | Provisioning: create apps/groups/envs, compose, grant, mint tokens | Org-scoped; the only headless way to create structure. |
| **Machine credentials** (`SEEKRIT_CLIENT_ID` + `SEEKRIT_CLIENT_SECRET`) | Fully autonomous agents: one credential for both planes | Auto-mints + caches an admin token on first use. Get them from `POST /signup`. |
| **Admin token** (`seekrit token create --admin`) | Provisioning: create apps/groups/envs, compose, grant, mint tokens | Org-scoped; a fixed headless credential for structure. |
| **Runtime token** (bound to an env) | Reading/writing/injecting one environment's secrets | Self-decrypts — no passphrase. Cannot provision. |

@@ -86,0 +111,0 @@ 

dist/index.js

Sorry, the diff of this file is too big to display