dev.seekrit/remote-mcp

up checked 2026-11-11T02:37:38.734Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

seekrit — secrets for agents

Publisher-provided description

Encrypted store for API keys and database URLs your code needs. Use them without reading them.

Summary by lookupd

Manage encrypted API keys and database URLs across apps, environments, and shared groups without reading their values, plus audit, leases…

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http remote https://mcp.seekrit.dev/mcp

Codex, remote (streamable-http)

codex mcp add remote --url https://mcp.seekrit.dev/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "remote": {
      "url": "https://mcp.seekrit.dev/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (showing 30 of 40)

Publisher-provided text

• signup Create a seekrit workspace and your own machine credential — one call, no human, no browser. Binds the credential to this session, so every other tool works on
• get_started Read the recommended first-project recipe end to end: which steps run here and which need the local crypto plane. Takes no arguments and returns a prose walkthr
• setup_local_crypto Get the exact commands for running the local crypto plane (the `@seekrit/mcp` npm server, the `@seekrit/cli` CLI, seekrit-run, seekrit-proxy), including a copy-
• local_tool_for Look up how to perform one crypto-plane operation locally — the targeted answer for "the tool I expected is not on this server". Returns { operation, where, how
• whoami Show the authenticated machine client and the org it can access. Call this first: it confirms the credential works and tells you which org slug to pass (or that
• list_orgs List the organizations this credential can access. Use it to find the `org` slug every other tool takes; prefer whoami if you also want to confirm which client
• list_apps List the applications in an organization — an application is the top-level container that owns environments, which in turn own secrets. Start here when you know
• list_envs List the environments an application owns (production, staging, …). Names and slugs only — never values. Use this to find the `env` slug that list_secrets and t
• list_branches List ephemeral branch configs (per-PR / preview environments) across an application, or just those forked from one environment. Names, parents, and expiry only
• list_groups List the shared groups in an organization — a group is a reusable bag of secrets (a shared datastore, a vendor account) that many application environments can c
• list_group_envs List the environments belonging to one shared GROUP — a group holds a separate value set per slug, so its `production` differs from its `staging`. Use this when
• list_env_groups List the shared groups composed INTO one application environment, in precedence order (higher position wins a name clash). Read this to explain where a secret n
• list_members List organization members with their public keys. The public keys are what you pass to `grant_env` on the LOCAL crypto plane to give a human the ability to decr
• list_secrets List the secret NAMES and versions in an environment. NEVER returns values: this server cannot decrypt. Use it to discover which names exist before referencing
• list_secret_versions List one secret's version history: who wrote each version, when, and which ones were restores. Metadata only — never values. Pair with restore_secret to undo a
• list_tokens List an organization's service tokens — the long-lived credentials that let a deployed workload fetch secrets. Metadata only: the token strings are shown once a
• list_invites List invitations to the organization that have been sent but not yet accepted. Use it to confirm an invite_member call landed, or to find an `inviteId` for revo
• kms_list_keys List the managed KMS keys the caller can see — symmetric and signing keys seekrit stores wrapped, for encrypting data outside the secret store. Metadata only: k
• list_lease_targets List the registered temporary-access targets — the databases (Postgres, MySQL, …) against which short-lived credentials can be minted on demand instead of stori
• list_leases List temporary-access leases that have been issued — the ledger of who got a short-lived credential against which target and until when. Never includes the cred
• audit Read the organization's append-only audit trail, most recent first — every mutation across apps, environments, secrets, members, and tokens. Use it to answer "w
• billing Show the org's plan, effective entitlements, current usage, and which upgrade actions are available. Read this if a create action was refused with a plan limit
• create_app Create an application — the container that will own environments and secrets. This step needs no key material, so it runs here. Creating its environments does N
• create_group Create a shared group — a reusable bag of secrets (a shared datastore, a vendor account) that many application environments compose in rather than each keeping
• compose_group Compose a shared group into an application environment, so that environment resolves the group's secrets as well as its own. Safe to repeat — composing an alrea
• uncompose_group Remove a composed group from an application environment. The group and its secrets are untouched — only the link is dropped — but the environment stops resolvin
• invite_member Invite a human to the organization by email (admin only). They join at the given role once they sign in. Use this to hand a project off to a person — then grant
• rename_app Change an application's display name. The slug is immutable — every other tool refers to the app by slug, so a rename breaks nothing. Use delete_app + create_ap
• rename_group Change a shared group's display name. The slug is immutable — references from composed environments are by slug, so a rename breaks nothing. Returns the updated
• restore_secret Roll a secret back to an earlier version — the undo for a bad write. The stored ciphertext is replayed as a NEW version, so history is append-only and nothing i

Details

• Version: 0.1.0
• Transports: streamable-http
• Uptime (7 days): 100%
• Median latency: 1148 ms
• First indexed: 2026-11-01T09:01:32.870Z
• Last seen in registry: 2026-11-01T09:01:32.879Z
• Repository: https://github.com/mileszim/seekrit

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/dev.seekrit/remote-mcp.svg)](https://lookupd.com/servers/dev.seekrit/remote-mcp)

• 62092 servers
• Last crawl: 2026-11-11T17:38:11.606Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp