seekrit (local crypto plane)

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "dev.seekrit/mcp",
  "description": "Zero-knowledge secrets manager — local crypto-plane MCP server: decrypts and injects secrets.",
  "title": "seekrit (local crypto plane)",
  "repository": {
    "url": "https://github.com/mileszim/seekrit",
    "source": "github"
  },
  "version": "0.8.5",
  "packages": [
    {
      "registryType": "npm",
      "identifier": "@seekrit/mcp",
      "version": "0.8.5",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "description": "Machine (M2M) client id from POST https://mcp.seekrit.dev/signup — mints an admin token automatically, no separate token to copy.",
          "format": "string",
          "name": "SEEKRIT_CLIENT_ID"
        },
        {
          "description": "Machine (M2M) client secret paired with SEEKRIT_CLIENT_ID.",
          "format": "string",
          "isSecret": true,
          "name": "SEEKRIT_CLIENT_SECRET"
        },
        {
          "description": "An existing skt_… service or admin token, if you already have one instead of machine credentials.",
          "format": "string",
          "isSecret": true,
          "name": "SEEKRIT_TOKEN"
        },
        {
          "description": "Passphrase for the token's private key. Required for tools that decrypt (get_secret, run_command) when authenticating with SEEKRIT_TOKEN.",
          "format": "string",
          "isSecret": true,
          "name": "SEEKRIT_PASSPHRASE"
        },
        {
          "description": "Override the API base URL. Defaults to the hosted seekrit API.",
          "format": "string",
          "name": "SEEKRIT_API_URL"
        }
      ]
    }
  ]
}