seekrit MCP MCP server

An official end-to-end encrypted secrets manager providing a hosted MCP server for AI agents. It allows agents to autonomously provision workspaces, manage secret structures, and execute commands with decrypted credentials injected into subprocesses, ensuring the server never sees plaintext values.

Endpoint and access

No sign-in: your client connects and lists tools immediately, with no account or key.

No sign-inEndpoint checked 2026-10-05Operated by seekrit

MCP endpoint (Streamable HTTP)

https://mcp.seekrit.dev/mcp

Vendor documentation

What you can do with it

Autonomously provision organizations and environments via tool calls
Inject decrypted secrets into child processes without exposing them to the agent context
Manage secret structure and audit trails for AI agent workflows

Tools advertised by the last live check:

signup
get_started
setup_local_crypto
local_tool_for
whoami
list_orgs
list_apps
list_envs
list_branches
list_groups
list_group_envs
list_env_groups
list_members
list_secrets
list_secret_versions
list_tokens
list_invites
kms_list_keys
list_lease_targets
list_leases
audit
billing
create_app
create_group
compose_group
uncompose_group
invite_member
rename_app
rename_group
restore_secret
delete_secret
revoke_token
revoke_invite
revoke_lease
kms_disable_key
kms_revoke_grant
delete_app
delete_group
delete_env
delete_branch

Connect from your client

Each snippet registers the same endpoint; pick the client you use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Claude Code

Run this once in a terminal. It registers a Streamable HTTP server. Use --scope project to write .mcp.json for the repo.

Claude Code configuration

claude mcp add --transport http seekrit-mcp https://mcp.seekrit.dev/mcp

Codex

Run this once. Codex stores MCP servers in ~/.codex/config.toml (or .codex/config.toml in a trusted project).

Codex configuration

codex mcp add seekrit-mcp --url https://mcp.seekrit.dev/mcp

Cursor

Merge this server into .cursor/mcp.json in your project, then enable seekrit-mcp in your MCP settings.

Cursor configuration

{
  "mcpServers": {
    "seekrit-mcp": {
      "url": "https://mcp.seekrit.dev/mcp"
    }
  }
}

Cline

Merge this into cline_mcp_settings.json (Cline → MCP Servers → Configure). The type must be streamableHttp for a remote HTTP server.

Cline configuration

{
  "mcpServers": {
    "seekrit-mcp": {
      "type": "streamableHttp",
      "url": "https://mcp.seekrit.dev/mcp",
      "disabled": false
    }
  }
}

VS Code

Merge this server into .vscode/mcp.json. Use MCP: List Servers to start seekrit-mcp and inspect its tools.

VS Code configuration

{
  "servers": {
    "seekrit-mcp": {
      "type": "http",
      "url": "https://mcp.seekrit.dev/mcp"
    }
  }
}

Gemini CLI

Run this once. It writes .gemini/settings.json in the current project; pass --scope user for ~/.gemini/settings.json.

Gemini CLI configuration

gemini mcp add --transport http seekrit-mcp https://mcp.seekrit.dev/mcp

Claude Desktop

Merge this into claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\), then restart Claude Desktop.

Claude Desktop configuration

{
  "mcpServers": {
    "seekrit-mcp": {
      "url": "https://mcp.seekrit.dev/mcp"
    }
  }
}

Windsurf

Merge this into ~/.codeium/windsurf/mcp_config.json, then refresh MCP in Cascade. Windsurf remote servers use serverUrl, not url.

Windsurf configuration

{
  "mcpServers": {
    "seekrit-mcp": {
      "serverUrl": "https://mcp.seekrit.dev/mcp"
    }
  }
}

See all 957

Do you run seekrit MCP?

Prove ownership with a DNS record, a well-known file, or your Official MCP Registry entry, and your edits publish immediately. Proofs are re-checked weekly; admins can still hide or remove a listing.

Claim this listing