Zero-knowledge secrets manager — local crypto-plane MCP server: decrypts and injects secrets.
Setup
Choose your client, copy the config, then fill in any required environment variables.
Local
claude mcp add seekrit-local-crypto-plane --env SEEKRIT_CLIENT_SECRET='<SEEKRIT_CLIENT_SECRET>' --env SEEKRIT_TOKEN='<SEEKRIT_TOKEN>' --env SEEKRIT_PASSPHRASE='<SEEKRIT_PASSPHRASE>' -- npx -y @seekrit/mcp~/.codex/config.toml
[mcp_servers.seekrit-local-crypto-plane]
command = "npx"
args = ["-y", "@seekrit/mcp"]
env = { SEEKRIT_CLIENT_SECRET = "<SEEKRIT_CLIENT_SECRET>", SEEKRIT_TOKEN = "<SEEKRIT_TOKEN>", SEEKRIT_PASSPHRASE = "<SEEKRIT_PASSPHRASE>" }
# codex mcp add seekrit-local-crypto-plane --env SEEKRIT_CLIENT_SECRET='<SEEKRIT_CLIENT_SECRET>' --env SEEKRIT_TOKEN='<SEEKRIT_TOKEN>' --env SEEKRIT_PASSPHRASE='<SEEKRIT_PASSPHRASE>' -- npx -y @seekrit/mcp~/.cursor/mcp.json
{
"mcpServers": {
"seekrit-local-crypto-plane": {
"command": "npx",
"args": [
"-y",
"@seekrit/mcp"
],
"env": {
"SEEKRIT_CLIENT_SECRET": "<SEEKRIT_CLIENT_SECRET>",
"SEEKRIT_TOKEN": "<SEEKRIT_TOKEN>",
"SEEKRIT_PASSPHRASE": "<SEEKRIT_PASSPHRASE>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"seekrit-local-crypto-plane": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@seekrit/mcp"
],
"env": {
"SEEKRIT_CLIENT_SECRET": "<SEEKRIT_CLIENT_SECRET>",
"SEEKRIT_TOKEN": "<SEEKRIT_TOKEN>",
"SEEKRIT_PASSPHRASE": "<SEEKRIT_PASSPHRASE>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"seekrit-local-crypto-plane": {
"command": "npx",
"args": [
"-y",
"@seekrit/mcp"
],
"env": {
"SEEKRIT_CLIENT_SECRET": "<SEEKRIT_CLIENT_SECRET>",
"SEEKRIT_TOKEN": "<SEEKRIT_TOKEN>",
"SEEKRIT_PASSPHRASE": "<SEEKRIT_PASSPHRASE>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"seekrit-local-crypto-plane": {
"command": "npx",
"args": [
"-y",
"@seekrit/mcp"
],
"env": {
"SEEKRIT_CLIENT_SECRET": "<SEEKRIT_CLIENT_SECRET>",
"SEEKRIT_TOKEN": "<SEEKRIT_TOKEN>",
"SEEKRIT_PASSPHRASE": "<SEEKRIT_PASSPHRASE>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"seekrit-local-crypto-plane": {
"command": "npx",
"args": [
"-y",
"@seekrit/mcp"
],
"env": {
"SEEKRIT_CLIENT_SECRET": "<SEEKRIT_CLIENT_SECRET>",
"SEEKRIT_TOKEN": "<SEEKRIT_TOKEN>",
"SEEKRIT_PASSPHRASE": "<SEEKRIT_PASSPHRASE>"
}
}
}
}Remote
claude mcp add --transport http seekrit-local-crypto-plane https://mcp.seekrit.dev/mcp --header 'Authorization: <AUTHORIZATION>'~/.codex/config.toml
[mcp_servers.seekrit-local-crypto-plane]
url = "https://mcp.seekrit.dev/mcp"
http_headers = { Authorization = "<AUTHORIZATION>" }
# codex mcp add seekrit-local-crypto-plane --url https://mcp.seekrit.dev/mcp~/.cursor/mcp.json
{
"mcpServers": {
"seekrit-local-crypto-plane": {
"url": "https://mcp.seekrit.dev/mcp",
"headers": {
"Authorization": "<AUTHORIZATION>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"seekrit-local-crypto-plane": {
"type": "http",
"url": "https://mcp.seekrit.dev/mcp",
"headers": {
"Authorization": "<AUTHORIZATION>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"seekrit-local-crypto-plane": {
"httpUrl": "https://mcp.seekrit.dev/mcp",
"headers": {
"Authorization": "<AUTHORIZATION>"
}
}
}
}claude_desktop_config.json · Customize › Connectors › Add custom connector
{
"mcpServers": {
"seekrit-local-crypto-plane": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://mcp.seekrit.dev/mcp",
"--header",
"Authorization:<AUTHORIZATION>"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"seekrit-local-crypto-plane": {
"url": "https://mcp.seekrit.dev/mcp",
"headers": {
"Authorization": "<AUTHORIZATION>"
}
}
}
}Environment variables
SEEKRIT_CLIENT_SECRETSEEKRIT_TOKENSEEKRIT_PASSPHRASE
Replace the placeholders with your own credentials and keep them out of version control.