seekrit (local crypto plane)

Local stdio MCP server that acts as a zero-knowledge secrets manager's crypto plane, decrypting and injecting secrets for an assistant.

What you can do

• Decrypt and inject secrets into the assistant's work through a local crypto plane, per the registry description.
• Retrieve secrets with a get_secret tool, which needs the token's private-key passphrase when authenticating with a token.
• Run commands with a run_command tool, which likewise requires the passphrase for decryption under token authentication.
• Authenticate either with machine (M2M) client credentials or with an existing service or admin token.
• Point the server at the hosted seekrit API or at an overridden API base URL.

When to use it

Worth adding when an assistant needs to work with stored secrets locally, decrypting them on the user's machine and injecting them into tasks such as running commands, rather than pasting credentials into prompts.

Requirements

Runs as a local process over stdio, installed from the npm package @seekrit/mcp (Node.js). Desktop only; no web execution. Needs either SEEKRIT_CLIENT_ID plus SEEKRIT_CLIENT_SECRET, or an existing SEEKRIT_TOKEN; SEEKRIT_PASSPHRASE is required for decrypting tools when using a token. SEEKRIT_API_URL optionally overrides the default hosted API. Network access to the seekrit API.