Chamber

io.github.ceedot-rockPublished by GitHub account ceedot-rockv1.2.0Updated Oct 24, 2026

Two-key JSON seal/open. Cloak needs a live license. Open is keys-only.

VerifiedSTDIODesktop onlyFiles & StorageSecurity & Monitoring

Overview

AI-generated overview

A local MCP server that seals JSON or text into an encrypted blob and opens already-sealed blobs using two keys.

What you can do
Chamber exposes tools for sealing new JSON or text into a ciphertext blob and for opening an already-sealed blob. It also reports license status, points to live pricing, and provides a hop-gate admission check with a sanitized reject log. Sealing requires a live license; opening an existing blob needs only the keys.
When to use it
Useful when an assistant needs to encrypt structured data before storing or passing it on, or to decrypt a blob that was sealed earlier. The hop-gate tools suit workflows that need an admit or reject decision on incoming records.
Requirements
Runs locally over stdio, started with npx from the npm package json-chamber-mcp, so Node.js is needed. The configuration example sets the environment variable CHAMBER_MASTER_SECRET. Sealing new content requires a paid license; opening an existing blob does not.
Before you install
The configuration asks for a high-entropy secret in CHAMBER_MASTER_SECRET, which should be handled carefully. Sealing new JSON is a paid feature with a 24-hour free trial and monthly or yearly licenses, so costs apply. The hop-gate writes a reject log containing truncated previews of rejected input.

Installation

In SourceWeft

  1. Open Chamber in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

json-chamber-mcp

[Audited checks] [License: BUSL-1.1]

Chamber MCP — seal / open JSON. Slid Phi Labs.

Cloak (seal new JSON) needs a live license. Open of an already-sealed blob is both keys, no extra payment. Ciphertext does not expire.

Install / run

bash
npx -y json-chamber-mcp
json
{  "mcpServers": {    "json-chamber": {      "command": "npx",      "args": ["-y", "json-chamber-mcp"],      "env": {        "CHAMBER_MASTER_SECRET": "your-high-entropy-secret"      }    }  }}

Discovery

SurfaceURL
Official registry idio.github.ceedot-rock/json-chamber-mcp
Lab well-knownhttps://www.slidphilabs.com/.well-known/mcp.json
Lab llms.txthttps://www.slidphilabs.com/llms.txt
npmjson-chamber-mcp 1.2.0
Server schemaserver.json
Producthttps://www.slidphilabs.com/chamber

Hosted lab MCP (PCC + catalog): POST https://www.slidphilabs.com/mcp · Smithery: https://smithery.ai/servers/slidphi/lab

Pricing

SKUWhatPrice
Chamber trycloak new JSON24 hours free
Chamber monthcloak license$9
Chamber yearcloak license$99
Openalready-sealed blobkeys only

Prices live on https://www.slidphilabs.com/chamber

Tools

ToolPurpose
chamber_statuscloak try remaining / dead / purchased
chamber_infopointer to live prices
chamber_cloakseal JSON / text (licensed)
chamber_openopen sealed blob (keys only)
chamber_hop_gateadmit/reject hop (gate only)
chamber_hop_reject_loglive sanitized reject log

Hop-gate (ScanChunk / Rider SoT)

Admission layer in front of seal/open. Seal/open APIs are unchanged. No SettleHop / x402.

Wire is exact text (Agent-Rider agent-rider-c / PR #22), not JSON:

CUNI ScanChunkurl=https://example.com/etag="abc"hash=sha256:…agent_id=agt_1

Fields (allowlist): url · etag · hash · agent_id. Gate result wire is a single exact-text code string (not a JSON body).

CodeMeaning
admithop allowed
reject.schemaChamber-local only (Rider does not emit)
reject.extraunknown keys or wrong kind — fail-closed; do not bind; never rehydrate
reject.hashempty / invalid hash
reject.replayhash already seen
reject.agentagent allowlist fail
reject.emptyempty / missing required fields (url, hash, agent_id)

Live reject.log is TSV ISO\tcode\tpreview (mirrors agent-rider-c/reject.log); preview truncates ~120 and flattens newlines. Extra-key values never rehydrate as next machine input.

PCC ≠ payment — PCC is the compression/storefront face; hop-gate codes are admission control, not billing.

MCP tools: chamber_hop_gate, chamber_hop_reject_log.

Related

Source: README.md at commit 1bc774f

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.2.0LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.