gpg-mcp
A security-focused Model Context Protocol server for GnuPG that allows AI agents to sign, verify, encrypt, decrypt, and manage OpenPGP keys. It ensures private key material never leaves the local gpg-agent environment, enforcing strict policy boundaries to prevent silent key usage or exposure.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Sign documents or code commits using GnuPG
- Verify digital signatures for authenticity
- Encrypt data for secure transmission
- Decrypt received encrypted messages
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
gpg-mcp 0.1.0
{
"version": "0.1.0",
"transport": "stdio",
"identifier": "gpg-mcp",
"runtimeHint": "uvx",
"registryType": "pypi",
"packageArguments": [
{
"type": "positional",
"value": "serve",
"valueHint": "command"
}
],
"environmentVariables": [
{
"name": "GPG_MCP_CONFIG",
"format": "string",
"description": "Optional path to the gpg-mcp config file."
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"gpg-mcp": {
"command": "uvx",
"args": [
"gpg-mcp==0.1.0",
"serve"
],
"env": {
"GPG_MCP_CONFIG": "<YOUR_GPG_MCP_CONFIG>"
}
}
}
}Cline
{
"mcpServers": {
"gpg-mcp": {
"command": "uvx",
"args": [
"gpg-mcp==0.1.0",
"serve"
],
"env": {
"GPG_MCP_CONFIG": "<YOUR_GPG_MCP_CONFIG>"
}
}
}
}VS Code
{
"servers": {
"gpg-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"gpg-mcp==0.1.0",
"serve"
],
"env": {
"GPG_MCP_CONFIG": "<YOUR_GPG_MCP_CONFIG>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"gpg-mcp": {
"command": "uvx",
"args": [
"gpg-mcp==0.1.0",
"serve"
],
"env": {
"GPG_MCP_CONFIG": "<YOUR_GPG_MCP_CONFIG>"
}
}
}
}Let your agent find its tools
Find servers like gpg-mcp from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.